Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: 1vwYTn4m6R0wypmPzJU9rPJleZ69Wc1DR24cw9F2cMI=
Subject key identifier: 51:B3:29:9D:4F:8E:D0:48:55:5F:25:EC:4D:63:CE:DC:55:EB:DE:65
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 0196089DDF1DDE81DD3C4C12301C85F9345B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 0CA1
Signing time: Sun 06 Apr 2025 01:01:25 +0000
Manifest this update: Sun 06 Apr 2025 01:01:25 +0000
Manifest next update: Mon 07 Apr 2025 01:01:25 +0000
Files and hashes: 1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=)
2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: j6gPZ0GdcnQ5RAImBB/hSyuay03q/bsd3ymYGZaAEGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:9d:df:1d:de:81:dd:3c:4c:12:30:1c:85:f9:34:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Apr 6 01:01:25 2025 GMT
Not After : Apr 7 01:01:25 2025 GMT
Subject: CN=51b3299d4f8ed048555f25ec4d63cedc55ebde65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2b:52:da:bf:fc:60:ea:3f:9f:08:b0:02:ed:
d4:06:09:ec:40:cd:68:6d:5b:cb:78:ec:c5:33:0b:
34:d6:06:86:64:0a:e5:49:a1:4c:49:0b:7f:3a:22:
11:56:d3:65:cc:6a:22:50:53:5a:c3:9e:de:1c:b8:
d5:78:9a:d6:82:88:06:4f:42:39:75:79:21:c7:6e:
02:26:0b:51:e6:0b:ea:75:31:d4:4d:e2:e4:ed:52:
a8:e2:38:ad:7e:16:80:e9:27:eb:9b:3f:48:13:b0:
a5:5e:57:39:10:4e:bf:98:1c:d6:7c:d3:55:4b:19:
73:ef:08:5e:c7:63:8d:6e:60:05:b4:9a:ad:21:ef:
29:6f:5f:c6:00:ad:5b:f6:5c:ed:8c:ff:f4:ca:20:
62:68:80:6f:14:aa:6a:91:74:75:03:7f:4e:02:06:
c5:57:22:72:61:67:60:c9:7e:ce:c9:a9:95:5b:7a:
31:3d:72:bf:bb:28:e6:54:4c:34:f5:11:65:fd:56:
57:9f:0a:3c:ac:99:47:5e:08:9c:f5:47:9c:6a:13:
6f:53:a4:26:cd:aa:c6:d2:ef:db:0b:31:8d:ca:c9:
8a:5f:27:42:d4:cf:53:3f:95:37:2b:24:97:10:77:
28:7d:be:f8:6d:87:03:94:21:c8:3e:4f:28:af:b9:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B3:29:9D:4F:8E:D0:48:55:5F:25:EC:4D:63:CE:DC:55:EB:DE:65
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c4:0a:dc:27:1c:74:e6:1b:69:34:25:48:cf:5f:ca:90:d3:
3e:5e:c2:ac:d1:01:ff:31:b1:89:6e:a7:1e:a0:92:d0:86:84:
a8:61:6c:08:cd:65:ec:29:14:62:ce:76:f4:db:71:97:08:d9:
df:e0:1e:e7:40:6d:4a:da:bc:e1:a8:c5:1e:66:5a:9b:8c:7f:
da:83:eb:8c:82:5f:87:0b:b7:af:59:c1:ff:dc:d5:7d:c9:82:
52:4d:34:63:60:93:e0:f9:7c:0a:07:31:bc:a1:25:df:63:cb:
d6:45:b0:31:fa:63:86:d3:d8:74:be:a0:be:93:03:b4:77:97:
96:1d:0c:15:8e:3a:72:54:93:7c:ef:66:50:c3:6a:4e:95:a7:
e4:74:ce:bf:c1:d0:12:4e:07:6b:88:b8:71:87:56:4a:0d:07:
ff:eb:1f:b5:6d:cd:1c:66:15:a1:5d:dd:c5:6c:77:15:eb:68:
d8:19:af:84:b0:76:53:dd:7e:b2:7a:11:2d:fc:3f:15:25:1c:
16:10:5e:2b:59:ce:5b:80:90:54:43:29:88:86:49:a1:4b:72:
07:89:2a:17:ed:4b:ce:bb:2f:d9:0a:c6:c9:ae:cc:9e:ff:cf:
4e:1f:b7:a5:76:75:9a:73:a7:a2:bd:91:00:ed:30:78:cb:6e:
a7:fb:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:20 2025 by rpki-client