Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: wcNc2Y6kGofZr1gv9c4fklzXV1Gd7y6iSf0FAeDFqIQ=
Subject key identifier: 15:C4:00:44:D0:90:4E:FF:45:22:5B:6F:FB:0B:72:D2:46:96:45:7F
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01964D1007BBE45E60F18E422566CA223587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0657
Signing time: Sat 19 Apr 2025 08:00:18 +0000
Manifest this update: Sat 19 Apr 2025 08:00:18 +0000
Manifest next update: Sun 20 Apr 2025 08:00:18 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: H5w+KOeXsy8KoEnr6gL2Tjrilu7kU29XJuB2i4ouf3s=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:07:bb:e4:5e:60:f1:8e:42:25:66:ca:22:35:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Apr 19 08:00:18 2025 GMT
Not After : Apr 20 08:00:18 2025 GMT
Subject: CN=15c40044d0904eff45225b6ffb0b72d24696457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:40:95:6e:eb:a7:99:95:73:9c:5d:4d:9d:
5f:21:fc:bb:b9:7e:d7:9d:cf:b7:53:32:1b:5d:07:
d6:90:41:db:79:61:86:59:24:97:0d:a5:63:8c:2e:
64:ff:1f:e7:f4:b9:a0:89:53:a3:8b:d2:dc:49:19:
18:a7:10:a8:f4:69:cd:e6:0d:e1:a6:13:25:41:ee:
76:f2:e5:35:da:a7:ba:5f:c9:1a:89:74:97:b0:57:
ca:eb:97:35:c9:bd:2f:50:b1:b1:2b:ae:f4:37:d8:
de:00:ce:c7:5d:de:f0:f7:46:53:9d:be:7a:d5:ef:
0f:51:e2:67:a5:5a:03:de:b4:b2:40:55:7b:38:28:
e6:5c:ec:26:2a:b3:33:ad:4f:19:0b:37:ae:6f:4c:
73:22:a4:cc:0b:ea:b4:01:d0:79:38:4d:6c:f8:06:
f5:6d:47:89:87:d7:bf:60:e1:89:36:19:a7:c0:4a:
1f:3f:98:18:be:84:03:94:6a:33:72:a6:b7:3f:12:
da:c0:e4:97:2e:37:57:36:ed:dc:23:40:b1:c5:26:
ac:8f:ae:a8:e5:2b:a5:9f:1a:60:df:c7:c6:a7:eb:
2f:70:10:25:38:67:5c:ef:e9:c4:62:f6:d2:30:2c:
e4:4d:3f:67:3a:f4:28:21:1b:a2:80:90:b7:45:b8:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:00:44:D0:90:4E:FF:45:22:5B:6F:FB:0B:72:D2:46:96:45:7F
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:29:10:c3:f6:cc:2e:a0:3c:17:85:08:89:b8:b4:bd:b1:
ea:40:97:59:06:53:f1:81:b4:75:ec:40:b0:ef:aa:59:de:5c:
ac:d8:5f:69:30:91:b3:40:e4:a1:86:64:13:78:2e:64:c2:75:
37:20:bb:0f:0c:50:9e:41:75:ec:ac:fd:d4:ba:9d:e6:67:71:
20:39:85:17:5e:17:f5:7b:41:d4:22:e3:50:f7:ad:f0:e0:d9:
e4:1b:16:13:b8:96:ef:2b:cd:e7:ea:10:e7:94:28:c7:54:7f:
6e:eb:a2:12:e4:e6:c7:c7:37:ca:8c:a7:b4:a7:3f:dd:07:29:
2c:fb:fb:f8:e5:2b:cd:de:03:58:51:12:1d:db:cd:1c:c1:53:
49:31:36:20:b2:7d:c7:fa:2e:de:2e:c1:ef:73:4a:7d:d1:47:
e2:30:c7:be:bb:d7:80:54:ee:e5:db:01:87:9c:2b:08:42:ec:
e1:9d:43:43:96:a6:a7:18:d2:7d:38:b4:72:c9:c4:11:f5:53:
81:f5:9e:cb:3f:4c:24:74:b8:0c:78:f4:5f:4d:ff:2a:2e:17:
ac:9e:c1:25:42:57:c8:1e:a6:69:0b:b6:3f:3e:d6:1e:ac:aa:
6e:bb:8b:cd:be:81:ca:72:0a:fb:a7:a7:77:05:76:e8:8c:5a:
d8:65:01:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:08 2025 by rpki-client