Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: f62eSYVEaq8Nbow7WwQTspgqx10jjkmjrHhmsfOAYP0=
Subject key identifier: F0:5F:87:CB:0C:C7:62:16:6C:24:4B:A7:91:47:88:A6:AA:1A:4F:A0
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019648FCA2DF62F3F15604A32AA59FAFB8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0D65
Signing time: Fri 18 Apr 2025 13:00:38 +0000
Manifest this update: Fri 18 Apr 2025 13:00:38 +0000
Manifest next update: Sat 19 Apr 2025 13:00:38 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: Lm6c1PJnRIrG8C+Y6oP1TTkgeZEY94rhRoT+54HaF0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:a2:df:62:f3:f1:56:04:a3:2a:a5:9f:af:b8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Apr 18 13:00:38 2025 GMT
Not After : Apr 19 13:00:38 2025 GMT
Subject: CN=f05f87cb0cc762166c244ba7914788a6aa1a4fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:99:b2:0c:8e:2d:f1:c4:33:aa:2a:64:8a:
49:a1:04:3c:5d:b5:35:0e:5f:28:5a:87:de:0a:ab:
5a:88:1a:0a:18:5a:e0:27:96:b6:ea:83:ec:70:84:
0a:5f:11:a1:c0:7a:0b:52:12:9e:8d:a1:4c:e3:78:
eb:08:6a:ac:b3:c8:86:26:1f:87:c3:f7:af:9e:87:
34:c1:f0:77:6d:de:df:3c:c7:be:9f:7f:54:ff:c6:
ea:79:22:7b:91:a5:93:53:af:d1:b4:e2:3f:55:e3:
65:44:64:38:81:4b:bf:9c:eb:fe:05:e5:b6:b6:6c:
b2:8b:a9:4d:a6:5d:8d:1d:01:e0:a4:55:6f:92:34:
a5:55:d0:34:ad:31:0e:04:0a:c6:08:49:b3:14:aa:
2c:8e:2c:73:84:d1:bd:37:8f:74:ce:74:36:45:43:
16:12:6f:a0:55:33:f2:91:a6:87:47:e9:90:80:00:
d0:46:13:78:55:16:eb:95:10:91:78:23:6b:e1:e2:
41:9c:bd:0f:c8:01:d9:5a:42:58:81:e9:71:d8:f3:
59:07:55:31:36:30:b5:c9:95:3e:3a:67:de:e2:f6:
0b:e2:f5:2a:32:77:06:3b:aa:dd:11:1b:c1:ab:2e:
da:85:0c:60:09:be:8d:9e:d5:27:26:83:69:98:a4:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:87:CB:0C:C7:62:16:6C:24:4B:A7:91:47:88:A6:AA:1A:4F:A0
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:44:97:0d:96:6d:8d:1e:0f:f2:6a:70:c1:f6:c3:10:f8:07:
d2:ad:8a:e4:e2:19:71:94:fc:0e:9d:cf:3f:15:5f:7e:ae:8b:
c1:d2:53:60:ff:63:18:52:f4:b6:19:e3:89:a1:4d:da:22:bf:
aa:ea:19:73:c3:08:82:c0:57:98:c0:0c:08:4d:df:a9:51:f6:
34:c5:99:c1:eb:21:46:6f:1f:51:68:22:41:43:23:92:6a:b0:
3b:a6:7c:f3:25:57:19:94:e4:e1:47:b3:93:d1:80:ef:3f:22:
39:e1:92:1a:7d:9c:db:d6:3e:37:19:b8:52:9a:74:2f:ee:ea:
8a:99:67:72:b1:82:50:55:26:5d:ad:50:5b:b6:04:cc:3a:32:
a4:4c:96:5c:63:ef:66:af:f0:30:07:45:95:e6:5a:55:ee:27:
65:f8:39:67:17:67:a2:4c:ce:1c:e8:75:08:18:4d:70:41:39:
39:5b:14:d7:d2:28:a5:65:15:3d:81:99:af:18:81:a6:91:fb:
b7:5b:f5:9e:1b:e9:00:e3:ee:f8:63:ad:7b:93:bf:09:7c:ff:
22:b2:73:4b:bf:28:95:ac:83:05:e4:f4:43:89:d0:98:b4:d5:
9f:79:de:5f:9a:b6:10:fd:7b:d8:10:6a:b3:e9:73:d7:90:fe:
a1:61:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:18:30 2025 by rpki-client