Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: 2mfjmM2SzE5ON81B/xBg8g4PLZLshwzZzsZeLnouRyE=
Subject key identifier: 0C:A0:FE:8C:8A:FF:13:07:F5:A2:68:56:A8:E6:7C:F3:2E:40:81:67
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 019651FF9E4B69BED7CFB7BA9967D1380EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 07C7
Signing time: Sun 20 Apr 2025 07:00:28 +0000
Manifest this update: Sun 20 Apr 2025 07:00:28 +0000
Manifest next update: Mon 21 Apr 2025 07:00:28 +0000
Files and hashes: 1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: m49dE9tnd7H0B4V4zY3oVGkwD2s3IYznKa+FphnNfUc=)
2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:9e:4b:69:be:d7:cf:b7:ba:99:67:d1:38:0e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: Apr 20 07:00:28 2025 GMT
Not After : Apr 21 07:00:28 2025 GMT
Subject: CN=0ca0fe8c8aff1307f5a26856a8e67cf32e408167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:96:9d:94:41:49:34:2c:55:9c:ca:c4:e6:
f2:72:96:99:05:e4:ea:b3:12:a7:8f:ba:cf:bf:88:
4d:2b:ab:50:c3:7f:43:03:3b:4e:fd:dc:aa:86:34:
c7:2f:46:4e:68:87:f5:ce:bf:ac:7f:58:e7:26:85:
93:ed:93:34:24:4b:99:d2:3d:49:af:ab:e6:81:5a:
dc:fe:06:19:9e:f7:62:4d:f9:7e:9e:64:78:90:96:
e4:89:6e:b9:2b:83:f9:a4:c8:d1:56:c1:47:bc:8c:
d8:64:e7:de:76:51:1e:98:6e:1f:72:a3:00:84:b4:
39:d4:74:22:b2:f1:52:8f:ff:0f:2e:8a:cf:6a:99:
d7:c3:03:80:30:92:dd:2b:d1:ca:50:e4:68:4e:3a:
72:09:fb:67:45:8c:ae:da:c2:dd:1e:98:bb:03:16:
cb:d6:89:b3:f9:dd:2f:3b:5f:e6:7d:39:f7:ed:c3:
d5:ba:67:1c:24:73:25:c8:9b:5d:1c:e4:a9:94:9f:
05:76:7c:da:d5:6e:1c:26:b7:94:18:ed:bd:91:2e:
51:0e:1b:de:82:a8:c1:f2:2b:28:a0:a2:f0:be:95:
5e:e9:3e:47:9b:d6:61:0b:6b:17:3b:a4:a0:fe:07:
ba:02:ff:29:00:0a:8f:53:ea:2a:63:e3:0d:ae:49:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A0:FE:8C:8A:FF:13:07:F5:A2:68:56:A8:E6:7C:F3:2E:40:81:67
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:b5:1e:bd:06:c1:a0:4e:dd:d5:f6:4c:ec:be:ea:7b:c8:
7e:73:ef:e8:e5:1a:db:44:66:d8:5a:d1:14:07:de:e1:64:ff:
a0:82:03:c3:ad:36:77:8c:41:40:d1:d0:63:db:95:bc:34:0d:
41:a8:77:2f:2a:ab:91:69:cf:1b:4b:0f:7c:ec:66:51:85:1a:
07:02:af:b8:8b:ae:24:1c:d3:9c:3f:29:24:b6:29:da:26:b9:
ce:bb:58:41:76:6b:27:24:a6:08:64:3c:06:cd:ee:1b:86:77:
c7:2c:c0:5f:52:2c:e9:6d:8e:ea:c4:8a:fa:bd:46:c8:f0:8a:
eb:4f:3f:0e:5a:11:ef:05:77:99:b6:88:9f:25:85:48:8a:21:
09:b5:f0:5a:80:cd:ff:28:be:b1:32:bd:51:3b:46:89:fb:52:
71:f3:a6:87:8a:80:14:90:55:ed:c2:c9:b3:10:93:85:5c:96:
9d:d4:a5:73:ea:fe:b6:2f:f5:7a:bd:eb:a6:e2:5a:79:c3:fd:
43:3e:c3:cf:c2:44:13:51:a8:06:ab:f3:ce:f0:3f:19:ce:8d:
b8:f8:78:7b:cb:3f:91:aa:bc:91:d8:30:52:d5:b7:97:8e:ac:
77:68:ff:5a:2e:e0:2b:94:ff:ae:f4:53:7c:a9:78:11:fd:cb:
8a:3c:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:16 2025 by rpki-client