Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: olRYL0s7XMIivm55xIycvgXwsLoMkAADqlCGClX7Fec=
Subject key identifier: EE:7E:5E:E6:E3:1D:76:59:D8:69:95:26:1E:30:BF:11:24:71:66:AB
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 01965982B35D21FB4319627782E8FB800CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0AE9
Signing time: Mon 21 Apr 2025 18:00:59 +0000
Manifest this update: Mon 21 Apr 2025 18:00:59 +0000
Manifest next update: Tue 22 Apr 2025 18:00:59 +0000
Files and hashes: 1: YFmwVrLg1hwmMKXx_Mm4unlp1Pk.roa (hash: k02tWA3CSFWvzMdYPWtnwp3L9wjqBp2dmnRijw+YwuE=)
2: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: Z3zPBO2F8qt+pdUKyrSfokDbv89gMHcjnEO98AKrRGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:b3:5d:21:fb:43:19:62:77:82:e8:fb:80:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Apr 21 18:00:59 2025 GMT
Not After : Apr 22 18:00:59 2025 GMT
Subject: CN=ee7e5ee6e31d7659d86995261e30bf11247166ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:df:f6:ce:3e:3f:c4:18:54:45:8e:f8:13:
7f:9c:31:be:e1:8c:6e:ce:b8:71:96:2e:a0:97:31:
51:d9:fc:3b:a9:70:c2:36:b4:bc:da:26:6a:8b:ef:
b5:49:6d:35:2d:d7:4c:2b:30:03:6b:23:ec:3b:35:
7d:57:bf:5f:2f:c6:60:78:1f:5b:2b:bc:79:8b:5d:
be:53:12:0d:c4:56:29:92:83:67:a3:3a:6f:ed:cc:
ed:a2:6b:e9:89:86:e4:9b:bb:74:d8:6a:40:7a:f3:
ca:ee:74:56:3b:43:35:2e:8d:58:f1:2d:93:bf:1f:
95:c9:94:a8:75:7c:90:eb:29:4c:34:3c:47:db:f6:
60:08:d8:37:ff:49:70:d0:86:48:4c:f5:8d:8f:51:
d8:f6:14:44:10:8d:cf:a4:10:d9:ef:39:de:76:44:
2a:6a:98:22:d1:23:a4:c4:aa:eb:e1:97:f1:85:a4:
e3:f0:34:1f:ed:d3:ce:2c:d7:d6:02:ec:01:7d:8f:
f2:31:d4:78:0b:f4:0c:29:3e:11:2f:04:8b:54:e3:
1a:b4:b1:ef:42:37:89:25:a8:85:6c:5c:0f:62:b1:
95:49:0c:81:bb:6e:27:76:69:54:90:db:8b:e1:b1:
9a:c5:59:78:34:8f:4c:38:d3:08:e7:cb:ef:7c:e1:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7E:5E:E6:E3:1D:76:59:D8:69:95:26:1E:30:BF:11:24:71:66:AB
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f0:a8:03:1e:12:7b:06:be:3d:18:04:f0:94:f4:f9:7f:cb:
25:c9:dd:96:89:ae:51:fc:30:70:1a:53:54:c2:33:ab:f1:d1:
97:dc:15:8a:1f:4a:2e:88:50:c6:ab:20:54:93:af:81:4c:64:
d6:2e:1d:3b:b9:d4:2d:1d:8f:7e:68:b4:cd:b3:37:4e:93:c8:
cb:25:5e:83:fc:eb:fc:e1:16:3c:f0:70:5b:1d:c0:b9:fe:9f:
cb:7d:6c:45:1a:f9:6c:51:cc:3b:85:d9:7e:68:0c:2a:70:5c:
e8:e2:34:68:26:20:be:63:f0:f8:2c:84:de:14:6d:e3:91:d0:
aa:50:1a:c9:d0:59:69:89:50:70:a4:9f:34:57:39:8b:7d:c5:
62:18:6b:e9:a4:aa:24:ce:d0:38:ed:aa:17:9d:27:08:79:04:
2c:3b:14:62:08:37:bf:06:c2:61:40:cf:0e:62:cb:a2:da:1b:
0e:d9:8e:fd:e6:20:20:1e:94:5f:3a:31:29:a5:fa:b8:9b:18:
f6:6c:ca:e7:d8:09:8f:17:b9:71:50:ab:2f:21:66:1a:f6:5f:
0f:83:bb:86:f1:35:d3:ce:63:aa:ea:63:5a:c7:49:22:82:bf:
7b:e6:fa:3a:be:ca:f2:ba:f0:18:75:7d:84:0a:33:78:1a:d5:
fa:34:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:52 2025 by rpki-client