Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File: yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier: gX0lyoNBtG5QDBu6HaurJ+kYnxu0olLKwGkoyTdodJ8=
Subject key identifier: CB:EB:8C:0C:05:F5:42:0D:5E:CB:E5:E2:D8:BF:01:09:E9:E1:9A:D7
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 019655DD0FCDDBD549A5D991EEB368A7A566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number: 0B2C
Signing time: Mon 21 Apr 2025 01:01:12 +0000
Manifest this update: Mon 21 Apr 2025 01:01:12 +0000
Manifest next update: Tue 22 Apr 2025 01:01:12 +0000
Files and hashes: 1: gZMQxr61w0P4Si-B6lBsVj_b8vM.roa (hash: 3Vc/pW8ygtdQIimX5iqQ/MSW6PLhJ2nbGCIzRJsZshI=)
2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: 988YbnGrrehGt+IfQy+HX2iZ81SwQk/5rv6XdlchYuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:0f:cd:db:d5:49:a5:d9:91:ee:b3:68:a7:a5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Apr 21 01:01:12 2025 GMT
Not After : Apr 22 01:01:12 2025 GMT
Subject: CN=cbeb8c0c05f5420d5ecbe5e2d8bf0109e9e19ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:b7:87:4a:3e:18:e5:e2:42:80:a0:e7:75:
87:f1:3a:b9:d6:e0:3a:63:09:24:7f:c1:e6:87:55:
82:f8:0a:4a:24:3c:95:eb:15:29:aa:2c:6a:08:ff:
71:48:7c:4d:60:1a:ab:57:99:60:6e:56:77:27:8d:
80:a4:43:b3:c9:7d:ae:ff:52:76:42:2a:f3:bd:a7:
be:75:8c:86:5e:49:b4:64:42:f2:c1:bb:e7:0a:ff:
e1:89:73:7c:5d:11:8c:6d:c1:bf:f5:0e:ac:1d:e5:
9a:e8:af:3f:d7:90:94:fc:98:a9:37:36:07:a8:8a:
66:3f:bc:4e:ac:da:9c:68:60:88:cd:1a:f3:d1:62:
a6:66:56:7d:30:13:ef:bf:d4:94:04:53:1f:55:bc:
f7:16:31:28:1c:f7:0e:09:4b:e7:f3:c6:d8:4c:c3:
54:90:b5:7b:ad:b5:ff:60:7d:a2:74:b8:bf:07:fc:
21:4c:ba:b2:af:91:68:16:c3:29:50:8b:c2:5a:99:
70:3d:b3:b7:d0:f8:b9:ce:06:11:14:3b:27:4e:be:
e7:32:26:79:40:79:4e:2d:ae:38:69:71:3b:f4:48:
21:f4:cc:47:f7:d0:ae:1c:f5:81:d1:c2:10:f0:bc:
26:6e:71:bd:c6:2d:f3:6e:03:13:c9:5d:43:f2:2e:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:8C:0C:05:F5:42:0D:5E:CB:E5:E2:D8:BF:01:09:E9:E1:9A:D7
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:65:03:16:97:24:36:1e:0e:72:46:a7:ec:78:55:f7:73:b4:
34:0b:25:50:67:c7:75:82:e9:1f:7d:97:ea:66:74:6e:af:24:
d8:4b:fa:fc:69:ee:cc:92:b5:12:38:8a:71:fb:fe:b4:b3:7c:
1b:4a:32:47:49:c7:f5:74:2b:c5:38:8c:68:d2:5a:3c:a4:d2:
ca:5b:e5:e1:d2:05:21:46:63:08:b1:af:33:92:48:b6:24:7e:
67:f9:f7:fa:82:e9:60:18:90:c8:42:03:bc:4e:8b:da:b5:c5:
cd:b5:17:1a:98:7d:a6:48:25:d7:d1:33:59:e0:61:18:bd:fc:
4e:1c:83:13:4f:6d:c4:0d:a6:1b:23:cb:d0:68:0a:58:e9:dc:
69:a3:87:5a:0c:8b:0a:de:5c:82:5d:e9:f7:51:eb:65:8a:2b:
77:20:13:9f:fa:d4:ba:89:8c:2f:1d:ae:db:b7:94:3a:12:1a:
37:4d:77:80:85:82:ae:6b:25:0b:e3:05:7d:16:73:3b:df:65:
66:d7:4a:c8:15:f9:2b:12:4b:72:cb:a4:7a:94:90:82:de:d9:
da:0a:9f:97:fa:25:fd:be:73:c7:20:1f:eb:9e:42:53:0a:e9:
c9:9e:34:e4:64:aa:dc:53:9e:0d:14:92:b4:c2:ee:55:2b:82:
5c:a7:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:30 2025 by rpki-client