Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: 6q3lpibL4Si5/HkKKGotQ5Lqd1zYCita0nrF01uCF5o=
Subject key identifier: 40:3C:38:2C:47:25:57:84:B4:EF:5E:94:7B:39:B6:4C:FC:E8:A0:A3
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019654C97E628A1C8AB2B596F071F8499DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 20:00:13 +0000
Manifest this update: Sun 20 Apr 2025 20:00:13 +0000
Manifest next update: Mon 21 Apr 2025 20:00:13 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: NKHgJHR8vPyVQ7lBeN0wxyQzyRG6TI4ANJW+n8QSovI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:7e:62:8a:1c:8a:b2:b5:96:f0:71:f8:49:9d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Apr 20 20:00:13 2025 GMT
Not After : Apr 21 20:00:13 2025 GMT
Subject: CN=403c382c47255784b4ef5e947b39b64cfce8a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:30:cf:66:a0:ea:db:f2:cb:e9:bd:22:3e:
30:5b:c9:65:77:b6:14:36:f1:5b:f4:4a:2a:3e:d0:
98:b8:9b:3a:a2:ec:da:25:c2:d6:b2:9c:11:d2:45:
46:12:f0:85:10:50:3b:fd:c1:2f:49:15:55:56:f5:
21:5d:ef:f5:9e:64:40:45:a5:10:7e:28:da:9e:1a:
a4:18:13:2f:98:f1:48:18:39:fb:a9:3f:2e:99:1e:
79:08:c8:d9:c0:11:50:10:20:1f:d3:c3:57:bd:d6:
7c:4a:97:26:a7:67:b3:28:4e:85:42:87:81:2b:b3:
47:79:31:78:fc:a6:56:a0:90:41:d6:3b:9d:ab:60:
d9:a2:24:cf:36:03:f5:58:55:dc:c8:8a:63:e5:d7:
a9:5f:97:42:94:01:a0:d5:e3:56:1a:4e:a2:a9:6d:
b0:0a:3d:d8:e6:98:f3:a9:b5:65:0f:e2:ad:4b:6c:
02:d4:b9:3e:1d:2e:a9:dd:3c:ac:9c:0f:15:7d:30:
e4:3c:74:95:cc:b7:8f:83:50:1a:36:54:ea:74:04:
be:ef:bd:6b:c1:12:b4:22:01:5a:11:d2:01:8d:e3:
7c:65:07:cd:83:dd:d7:be:3e:5d:8e:fd:8c:af:7f:
9b:45:e9:5e:2a:80:e3:a9:ad:ba:bd:ee:cd:2b:2b:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3C:38:2C:47:25:57:84:B4:EF:5E:94:7B:39:B6:4C:FC:E8:A0:A3
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a4:5b:ff:5d:af:c3:a7:a7:29:0f:1e:25:eb:d1:cf:f5:e2:
98:55:72:72:af:70:2b:d8:ff:61:b6:d3:bb:bf:27:22:97:58:
6f:2c:f9:aa:07:50:19:a8:26:3a:f7:e4:27:56:0a:0f:af:d8:
a9:a1:2f:1a:93:17:38:de:66:64:aa:35:d1:4b:f2:ea:13:6c:
da:4a:61:d4:a2:93:49:fa:17:d7:a3:d0:95:43:9c:9d:26:fb:
cc:bd:e9:3c:92:65:d3:fd:7a:15:97:35:87:ba:b2:e1:62:dd:
80:a4:04:bf:28:14:83:3f:da:36:7c:15:f9:27:28:15:e0:83:
a4:f5:45:67:c8:2c:62:39:51:f9:fb:d8:78:81:d6:e0:4c:68:
62:39:bd:03:49:42:9d:c2:6f:37:00:78:bf:1d:39:44:6d:63:
30:48:a3:96:08:fa:51:47:62:b0:e5:45:1d:e2:22:56:d1:66:
cb:c9:4a:9b:36:86:6c:bd:86:b5:37:86:f5:a0:2e:0b:c4:2d:
fa:c0:f1:ac:5d:78:cf:e5:41:d9:07:18:a1:dd:46:7b:43:3b:
d8:a7:9e:77:64:fe:5a:38:9a:f2:39:09:8f:05:5f:7f:d5:9b:
df:26:22:99:9f:78:a9:9e:c1:0d:d8:ff:68:9b:74:50:cc:45:
9f:72:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:19 2025 by rpki-client