Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: dhG+b9pkGC3TM7AyNMFWkwzYnGKm1hrzJWFKqYwNUB4=
Subject key identifier: 55:E6:27:AB:A6:8D:30:E1:87:94:96:41:17:CA:13:18:C9:14:3E:F3
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 0196564A9034A7299B78AD18A803861F7BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 0585
Signing time: Mon 21 Apr 2025 03:00:49 +0000
Manifest this update: Mon 21 Apr 2025 03:00:49 +0000
Manifest next update: Tue 22 Apr 2025 03:00:49 +0000
Files and hashes: 1: TuQDQ8nJBbYLub1mzr6Exv_MEOE.roa (hash: mNd0eAJJzc4YIh0tYa+bIHu2wbr2Q6C9CMzRK0s5ooI=)
2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: Pw/wFbYPZaet2IShz/eytp4oHAEFBVP0oADrewxjis8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:90:34:a7:29:9b:78:ad:18:a8:03:86:1f:7b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Apr 21 03:00:49 2025 GMT
Not After : Apr 22 03:00:49 2025 GMT
Subject: CN=55e627aba68d30e18794964117ca1318c9143ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:72:3a:e2:5f:2c:15:80:ba:85:8f:ac:36:
58:ec:3c:bc:aa:17:1c:d9:29:bd:ac:a4:58:f0:c3:
5f:80:d3:2a:4e:21:28:52:92:3a:0b:c7:9c:10:fd:
22:7d:c2:98:51:8a:a7:b8:d9:fc:ee:ab:7e:26:a0:
69:f5:2b:70:4c:b9:e4:1f:3b:23:c4:b3:ee:4d:3e:
d7:f8:11:fc:cd:9c:85:c0:df:c1:47:a8:1f:d2:4e:
44:13:62:af:ea:5f:88:65:f8:5b:9c:de:9f:5d:c7:
a8:ed:3b:99:3e:2d:9c:c4:27:8c:77:b2:89:5c:ac:
f3:e4:ea:c5:a6:52:3c:71:30:13:3d:69:0f:91:62:
84:79:26:4e:51:e2:d5:8c:8b:57:f1:f1:69:d0:bc:
07:7a:ef:71:54:03:25:a6:a5:e3:d3:8f:6e:34:dc:
ca:5a:4e:59:60:83:b8:7f:f8:cc:6c:e4:25:1f:9b:
d9:91:a2:ae:98:a3:69:d2:24:28:a8:6e:e6:7a:fa:
b9:5b:8e:d3:24:c5:0a:ec:a7:61:76:1e:ea:0c:de:
97:ba:4a:fb:0c:bc:aa:cf:96:2b:5c:f6:e0:ad:32:
0a:75:27:ab:0a:86:cb:0a:7e:f1:01:a1:50:8a:ed:
85:4d:9f:e8:45:7c:90:aa:03:28:94:f5:47:29:cf:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:27:AB:A6:8D:30:E1:87:94:96:41:17:CA:13:18:C9:14:3E:F3
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:7d:36:5a:b8:c8:45:cb:f6:5f:23:92:51:98:f9:96:0b:
d0:8a:db:d9:f4:f1:1d:a6:d5:ad:bc:b5:3a:94:15:5c:51:d3:
bb:f4:4e:6e:df:7f:a3:ba:1e:3a:0c:2d:d1:44:32:ae:5c:2b:
67:ba:1b:ef:09:5c:2b:aa:96:7f:51:42:90:0d:51:ce:17:db:
23:60:d7:68:74:04:26:d2:6b:17:04:a8:3d:c6:f5:95:c1:a0:
5f:77:14:f0:1c:f0:60:cc:d4:52:83:1a:6d:b3:05:ac:79:cd:
82:0b:7f:f1:34:3f:48:f2:89:11:ad:f3:73:f9:d2:86:44:6b:
03:4d:66:b9:90:1f:ef:a7:28:20:fc:27:1c:37:75:ed:3c:b3:
29:83:5f:6b:79:3e:a9:85:44:80:fb:bf:f5:2a:a0:93:49:49:
ca:62:ad:6f:5e:c3:b2:6d:a7:f2:08:1c:ab:65:df:eb:0e:ac:
be:1b:0b:c9:f5:91:f7:21:a6:f1:e4:f0:1f:3d:ac:08:f1:85:
3d:61:6c:1a:fc:ba:73:87:e8:f3:ee:28:c9:ec:c8:e4:96:a2:
0e:59:ca:9b:ed:c6:7d:c4:23:54:b2:66:bd:e0:77:1f:cf:c8:
19:4f:89:07:06:b2:86:b2:a2:a5:22:e7:ca:fa:26:f9:01:5a:
24:67:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:35 2025 by rpki-client