Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
File: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft (raw, json)
Hash identifier: ait1kE0EtaaybvPyvHxQEr6+rvkiASIzbVURWb/D9k4=
Subject key identifier: C8:D9:A5:13:07:1A:57:2F:63:56:F7:01:EB:97:A7:BD:79:3E:E8:A0
Authority key identifier: 62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
Certificate issuer: /CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Certificate serial: 019657265085FDB7751796B1011BC2A2C1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
Manifest number: 05E7
Signing time: Mon 21 Apr 2025 07:00:50 +0000
Manifest this update: Mon 21 Apr 2025 07:00:50 +0000
Manifest next update: Tue 22 Apr 2025 07:00:50 +0000
Files and hashes: 1: RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa (hash: CWqw/aMDA6ZuqW+g16a2LFyjcXoDj/1ZGqdzZueDSNs=)
2: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl (hash: teFTnQwrK7gyZj9ZhoirSJjSZSWTdu38NwbczpqpE+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:50:85:fd:b7:75:17:96:b1:01:1b:c2:a2:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Validity
Not Before: Apr 21 07:00:50 2025 GMT
Not After : Apr 22 07:00:50 2025 GMT
Subject: CN=c8d9a513071a572f6356f701eb97a7bd793ee8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:50:2c:28:e1:bd:9c:37:8d:f6:0d:0c:c8:
cb:4d:21:3b:90:e7:ad:e5:e2:dd:34:6f:47:18:6d:
b8:2e:71:be:3b:8e:52:47:9c:9f:a7:3e:10:07:10:
f9:75:23:91:18:2f:a8:c5:90:3f:13:13:3d:95:57:
a1:f6:96:b7:c1:06:50:30:9a:e1:05:fa:5d:8e:f4:
27:f1:17:56:ca:dc:e6:a4:bd:9a:8c:c5:8a:58:4c:
46:4d:1e:6d:28:e1:c1:b9:99:a0:01:b1:21:95:a0:
b8:8d:40:f0:3e:4d:fb:6c:35:20:75:fb:bf:0f:de:
30:28:46:d2:ea:9b:4e:c3:4a:eb:fd:3b:8d:96:fb:
f8:be:71:92:34:15:48:41:e6:8e:ac:4c:05:ed:46:
3e:ae:c5:26:f1:7b:86:4c:a8:e3:5a:42:fd:c5:6a:
eb:24:5a:88:34:a9:2f:ac:36:8f:a3:dc:ad:62:3a:
c3:9f:ac:a6:ce:5a:7e:bf:ff:9e:99:12:9e:e4:8e:
25:7c:f4:1b:f9:a1:1c:8a:ad:66:f4:1b:85:05:87:
9c:3b:76:db:a5:c7:06:a2:9a:13:53:f2:ea:88:8d:
a5:67:b7:4e:53:a4:83:89:22:64:11:a5:ec:68:67:
63:94:d2:15:47:59:4b:ba:c5:7a:63:5f:18:0c:38:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D9:A5:13:07:1A:57:2F:63:56:F7:01:EB:97:A7:BD:79:3E:E8:A0
X509v3 Authority Key Identifier:
keyid:62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f7:f4:df:64:1e:0c:13:ce:d1:21:98:39:7b:52:c8:37:13:
6a:78:ff:41:b2:f3:9e:80:72:8e:ee:0e:d6:88:1c:80:6b:df:
90:32:13:bd:e4:41:1a:7a:83:74:d1:62:28:6a:7a:63:40:39:
e8:31:15:6c:6d:17:d0:7d:4d:c3:7f:c2:08:0c:72:19:70:02:
4a:68:19:d5:aa:d4:53:9f:07:26:89:f2:04:fb:b1:1a:82:b2:
8c:0a:f2:cc:63:25:39:49:0e:6e:7b:ee:68:fb:56:b5:3a:58:
8c:c2:ab:f6:c6:2e:8e:80:09:69:fb:cd:54:17:04:de:fc:bd:
45:6d:5b:46:73:83:d4:46:0a:85:75:5e:7c:02:52:7e:1b:d3:
85:74:6f:c5:5f:33:14:84:f5:1a:63:32:f9:f2:7d:2f:6e:11:
b4:73:5c:e5:da:d7:78:a0:86:c2:01:3b:67:f3:2c:94:87:82:
2b:a5:4d:a1:f5:3c:61:5f:ee:d9:79:9f:8a:83:33:cb:68:5b:
5b:8c:21:26:85:06:69:41:e0:bd:19:ea:1b:46:d7:45:76:30:
b8:0a:01:63:1f:7a:d4:bc:bb:29:5b:eb:0d:51:7e:0f:77:d1:
f8:95:6e:c9:fd:2f:09:5f:f1:94:92:ce:84:b3:86:3a:3e:df:
c0:1a:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:47 2025 by rpki-client