Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: 7EASl4huDZsHQrH2BfIABVGwcDz0JHCb05jqgeurmQc=
Subject key identifier: BD:C4:6F:50:70:10:D9:74:7A:28:42:A7:D7:35:7F:72:EC:4A:B1:68
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 0196297293404C9BF88014A40102B790E30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 55
Signing time: Sat 12 Apr 2025 10:01:36 +0000
Manifest this update: Sat 12 Apr 2025 10:01:36 +0000
Manifest next update: Sun 13 Apr 2025 10:01:36 +0000
Files and hashes: 1: iCASJufkL7y0bMUvn8IqLTzGPYE.roa (hash: INWHICniz6zWWSqMWPOuPOjMAKv1y3stcVV7r6T0Z4Y=)
2: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: gqrIrn4z1bSpnfYvad4RfDMiVjaVIF/D5Q6zd4nmgyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:93:40:4c:9b:f8:80:14:a4:01:02:b7:90:e3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Apr 12 10:01:36 2025 GMT
Not After : Apr 13 10:01:36 2025 GMT
Subject: CN=bdc46f507010d9747a2842a7d7357f72ec4ab168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:63:23:5f:4c:df:23:99:9d:a2:46:e3:58:
1b:79:57:01:50:07:aa:f4:db:95:8c:4a:de:a4:67:
c4:60:1e:a2:b6:38:f7:b9:ed:d7:ee:f5:f6:29:c6:
86:ba:7c:c3:48:79:bc:23:5a:33:83:1f:d2:2e:22:
e4:12:d1:6b:7e:a4:1c:04:b7:90:cd:90:64:d2:b6:
0c:02:ff:67:a1:0b:08:9d:36:90:8d:fb:76:d7:df:
16:ba:4b:3e:78:f0:44:82:d2:9a:5e:4e:f6:77:ed:
4b:b1:cf:d9:78:bd:b7:a6:ad:11:e6:68:ba:a6:dd:
ab:f6:44:ea:57:f5:a2:4b:4c:6d:a2:36:ce:3f:33:
67:92:1b:53:91:8e:d2:9e:b2:e7:79:4b:e1:4e:50:
c5:a9:ce:38:86:2c:ec:85:4b:aa:f1:55:aa:a9:3d:
76:1a:9b:f9:5b:49:70:44:93:27:34:9e:b1:6f:e5:
47:5e:49:25:fc:0e:52:f9:b0:b2:9a:c0:93:4b:d5:
66:cd:3c:4a:08:60:c1:f6:c6:ee:bf:8a:29:d5:58:
e7:ed:0e:8a:39:f8:e8:e4:17:1b:40:d7:fe:98:61:
33:f5:ea:2d:32:e9:dd:67:b3:c1:ad:84:73:44:08:
2e:9e:8b:8c:26:55:ae:f1:d9:69:67:ad:ba:fa:39:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:6F:50:70:10:D9:74:7A:28:42:A7:D7:35:7F:72:EC:4A:B1:68
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:93:86:1b:ca:ed:45:6a:ef:cd:77:9e:6d:a1:8e:13:93:63:
e1:33:00:1f:8f:36:a5:bd:86:70:7a:54:af:ef:01:ea:14:60:
61:ba:86:b2:93:b4:eb:d9:73:4d:7d:69:95:ea:47:79:fa:43:
e6:f5:12:e3:5a:06:24:38:77:2b:d1:aa:0c:3c:dd:ae:62:0c:
9d:32:89:b8:9d:78:bc:44:89:27:82:79:44:89:54:63:ca:1e:
1d:4a:1f:41:55:86:54:9e:66:78:1d:6b:d4:d3:1a:ff:34:0b:
4a:2b:b9:d6:e5:17:c6:26:c7:d9:c2:16:ac:47:f3:f0:2b:57:
dd:ad:8c:0c:b2:03:e8:23:44:99:c7:ea:24:33:3f:a8:a7:18:
89:c7:8a:9e:28:bd:02:00:ae:c8:ce:71:d2:7e:62:bc:2e:85:
3e:5c:70:5b:19:b5:42:04:60:a0:eb:00:56:ba:f9:d1:34:69:
dd:1b:ca:a5:79:d1:49:85:d2:90:f5:84:05:b8:7d:37:ec:6e:
14:a5:10:9c:88:61:0c:4b:dd:24:44:b7:6b:af:d4:b2:32:aa:
3c:2d:9c:35:8b:1a:a6:68:59:6e:ff:f0:3e:98:23:ac:0d:14:
f4:9d:d9:09:9c:cd:55:28:09:7f:6f:92:15:64:00:6f:a8:32:
6f:e0:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:19:32 2025 by rpki-client