Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: bUeA0xcg5u/jD5blQLIexGryZzS4vifAFe9v74As9ek=
Subject key identifier: 5C:52:08:7D:B5:B8:D3:EA:C0:37:CD:DA:E8:6D:D1:FB:6D:A1:8D:37
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 01963FF9B89E637B4FCE296142EE82D28EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0916
Signing time: Wed 16 Apr 2025 19:00:52 +0000
Manifest this update: Wed 16 Apr 2025 19:00:52 +0000
Manifest next update: Thu 17 Apr 2025 19:00:52 +0000
Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: LK1ak6eq/MlrVN/+vR5MpCrSCqqVqTUWht0Gc8vpaKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:b8:9e:63:7b:4f:ce:29:61:42:ee:82:d2:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Apr 16 19:00:52 2025 GMT
Not After : Apr 17 19:00:52 2025 GMT
Subject: CN=5c52087db5b8d3eac037cddae86dd1fb6da18d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:c1:df:12:06:17:f7:1e:d1:b1:33:34:90:
fe:e6:28:65:fd:c1:0c:d0:36:e6:12:4c:4b:3c:24:
7c:e5:b8:49:2a:44:7a:be:d6:80:05:db:f5:fd:7e:
c6:da:a1:81:53:89:09:78:57:ab:f8:58:18:23:7d:
1f:0c:f9:c2:58:ea:f1:1a:81:54:ed:7f:47:69:40:
b4:30:70:45:44:6b:a3:99:b8:df:88:d8:60:75:ec:
8a:53:95:27:21:12:61:ee:b7:d5:8d:5c:2a:ae:0f:
44:d9:0b:0d:c4:7f:85:a7:22:42:5b:35:df:df:5c:
25:4a:29:2b:bd:b7:bf:29:b7:43:fd:ec:5c:16:df:
d2:0c:44:75:50:4f:7a:9e:0c:ed:0d:24:6d:05:85:
cc:81:54:b4:cc:5f:24:90:84:21:12:3d:ac:2b:2b:
bd:30:42:67:0c:0c:b7:cd:d3:1e:61:b3:6e:09:64:
ad:08:1e:9b:4d:5d:10:70:23:89:26:58:e6:75:5e:
f3:27:02:4c:df:41:5f:a6:7d:ea:b3:2e:f9:ee:93:
ad:e8:cf:00:1b:fb:e4:98:38:5f:9e:c5:7f:25:1e:
d9:7a:bc:96:ac:9b:b6:83:52:5f:40:30:38:83:77:
a8:e4:fe:a9:32:81:21:84:e8:d8:03:a1:d0:7f:d6:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:08:7D:B5:B8:D3:EA:C0:37:CD:DA:E8:6D:D1:FB:6D:A1:8D:37
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a0:85:f7:ef:64:90:7d:36:b8:59:71:c4:c8:c0:c0:28:aa:
70:48:59:51:9e:c6:3d:2e:1c:f5:75:15:1b:66:27:36:d4:d2:
70:ec:f4:e3:7d:c5:0b:68:03:4a:9f:65:e3:1d:2e:d7:94:27:
13:a4:75:2b:52:56:b5:f5:13:cd:a3:19:7c:fd:26:73:59:11:
26:2a:7a:7d:9a:9d:7b:2a:51:75:de:b5:2e:99:3c:61:65:0c:
b7:14:47:81:dc:ad:f3:dc:22:4a:af:3a:d2:d2:09:f9:1b:20:
03:67:63:fb:92:99:8a:3a:5f:05:cb:c8:57:4f:1b:6e:c8:28:
d6:9b:c8:9e:73:c4:bd:97:bf:fd:e5:d1:0a:d2:65:df:8d:16:
ec:f7:79:b5:46:93:1f:93:7b:a1:9c:d3:b1:77:c5:08:4f:4b:
50:91:e0:89:75:33:c8:7c:f2:64:30:69:cc:bb:31:ed:71:e5:
c1:76:5f:32:cd:fd:d4:43:27:15:d9:47:92:a7:35:34:40:95:
b7:e3:77:7f:a3:38:6e:36:dd:db:64:e3:9d:f0:e4:0b:dd:8d:
a8:51:f6:b4:f6:d4:73:e3:55:4f:98:9e:83:04:9d:7a:ef:cf:
49:c8:46:9f:2d:85:4b:b7:a9:a2:47:43:92:5d:47:32:92:49:
0d:70:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:58:47 2025 by rpki-client