Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: gvBQ/dJq0gglcyXVCDO+fHEIHpxGgDij+gF5SBOtO9U=
Subject key identifier: 81:6B:61:A7:22:F3:F9:87:4B:29:28:0C:DA:20:80:40:79:0D:C8:6E
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 01963EAFC6E3CD08D322683AD2227F447B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0C27
Signing time: Wed 16 Apr 2025 13:00:28 +0000
Manifest this update: Wed 16 Apr 2025 13:00:28 +0000
Manifest next update: Thu 17 Apr 2025 13:00:28 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: H8R8tOvDVK76WgJ7zdN5IUDbOhB8+BDVIuKtISVHLEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:c6:e3:cd:08:d3:22:68:3a:d2:22:7f:44:7b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Apr 16 13:00:28 2025 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=816b61a722f3f9874b29280cda208040790dc86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:c3:09:19:a0:06:d2:04:8d:10:57:70:64:
2c:b8:68:0b:46:a0:cd:42:06:a7:56:ec:fa:e8:73:
79:67:54:3f:16:82:d1:b8:2d:88:94:03:5d:45:26:
be:14:34:c6:54:6c:dc:cc:2c:ad:82:d0:a6:fd:a9:
ae:ff:4c:e3:b9:95:0e:c8:43:bb:ca:c9:7f:2c:81:
24:8f:80:0d:db:47:9a:61:1f:3a:d3:1b:7c:0e:84:
b7:88:1e:db:bb:61:ce:b6:bb:9f:83:e9:f1:b6:2c:
45:6c:cd:1a:d2:a6:34:06:c6:34:34:ad:8d:90:9e:
a0:75:40:e1:dc:69:c4:bb:ec:ef:e1:20:84:4d:00:
8f:42:3b:52:82:21:38:fd:3c:b7:51:21:9b:b0:ff:
30:cd:3a:b5:fa:ca:6f:d5:99:41:d1:d4:5a:de:7a:
a9:6a:25:5f:1b:6e:c9:38:7f:cf:f3:01:2b:de:7a:
2e:04:3b:19:9c:90:fe:54:23:a6:e0:83:e5:08:68:
75:32:cd:b9:ec:e0:03:4e:52:aa:12:38:74:ac:84:
82:93:aa:b7:83:06:5d:80:f5:9b:b3:77:44:55:35:
c9:bb:65:c6:85:e4:1b:f2:e4:31:2b:d2:62:bc:16:
70:70:f6:85:52:9a:fb:54:db:b9:97:8a:4d:3c:68:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6B:61:A7:22:F3:F9:87:4B:29:28:0C:DA:20:80:40:79:0D:C8:6E
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:2c:22:3c:47:76:23:a1:06:ac:bd:7c:b6:2c:8e:07:ee:
88:f4:42:eb:20:5d:0d:a5:39:ec:2f:dd:99:e1:4e:03:79:61:
ae:77:50:0e:99:99:a1:18:59:98:f0:5a:f9:55:ca:68:88:31:
a7:fb:f9:f0:5c:7a:19:31:f5:65:de:4f:94:a0:fb:5d:94:6c:
5a:63:0a:c1:ce:d2:66:7a:2f:56:87:0b:b2:1a:0e:45:ab:9d:
56:0d:93:0f:5a:d2:6e:0f:b0:b7:2e:b2:92:d6:fb:fb:42:58:
35:98:19:4b:c2:e3:0a:50:58:35:dd:a1:8d:9a:eb:1d:20:ab:
1f:47:b9:6e:9b:36:3a:b4:f8:ee:fa:4e:ba:d5:23:5d:78:30:
32:43:ac:87:1b:cd:a9:6a:d7:8d:ad:f7:f2:df:14:e2:45:a9:
64:44:bd:0d:08:5a:59:ac:19:ef:a4:46:82:66:9b:0f:e3:30:
17:09:5a:c1:20:99:20:1f:29:e0:1f:17:2e:5f:55:0a:e8:96:
46:b9:c2:f1:22:98:83:3c:b0:2b:ea:da:72:9e:fd:ac:ff:46:
bc:1e:ed:3c:a9:0c:af:24:e9:64:93:f8:40:76:48:0b:c1:c4:
f5:3f:ff:41:72:fd:9a:01:88:e8:29:85:b2:ba:31:79:01:ea:
c1:8d:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:42 2025 by rpki-client