Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: SMXciGjUjHZ8A9kuRQw1Un6jADRuAEj2FNOj6nBAWX8=
Subject key identifier: 8A:40:BD:92:45:5C:69:C7:86:B0:98:B5:17:2F:CA:75:29:11:F3:9A
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 01963C1D90E66252044838313D09C05F9294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 022C
Signing time: Wed 16 Apr 2025 01:01:32 +0000
Manifest this update: Wed 16 Apr 2025 01:01:32 +0000
Manifest next update: Thu 17 Apr 2025 01:01:32 +0000
Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: OUYkusc9nes5UaQyLMoegViWSM5EZY22Eh1Srk76IeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:90:e6:62:52:04:48:38:31:3d:09:c0:5f:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Apr 16 01:01:32 2025 GMT
Not After : Apr 17 01:01:32 2025 GMT
Subject: CN=8a40bd92455c69c786b098b5172fca752911f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:af:72:81:fb:e3:67:bd:6a:99:21:75:15:
3f:42:04:6d:82:9c:a8:05:b6:67:4c:5f:79:8b:92:
3a:7d:4b:71:1c:b8:ab:66:20:e7:44:2e:75:70:4c:
30:1d:db:71:43:0d:cd:cf:bd:09:dc:a0:50:c0:b1:
79:a5:e7:43:7e:58:c1:35:da:52:29:d5:88:40:28:
36:10:e4:30:cf:a1:55:24:75:4b:47:f5:90:57:e6:
c1:f0:77:f6:fc:28:29:9d:5f:55:8d:f4:91:2b:6a:
7b:17:43:54:e6:e6:3a:36:d7:8b:2e:91:ab:73:1e:
54:a4:b9:f2:0b:dd:0b:26:91:62:c7:57:e9:b0:53:
3a:f5:ce:98:41:93:3a:a4:cf:3e:cc:b2:71:4b:b7:
fe:87:7d:d4:f3:c9:96:39:29:07:1c:78:da:af:46:
7b:50:ee:28:b4:f7:1c:80:44:bc:5d:e2:20:27:30:
a7:d9:9e:a6:24:aa:b0:94:13:2a:4d:43:b8:22:bf:
a7:c8:24:ae:14:a7:54:6f:f4:37:6e:a6:d1:f9:68:
5b:8a:e1:1c:4b:5e:ab:40:2c:00:90:cd:3b:5c:29:
9f:37:bd:82:93:75:c8:a9:7f:60:d6:6d:47:80:5a:
87:c2:9e:92:b2:48:04:19:53:b6:58:d3:e7:e8:a8:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:BD:92:45:5C:69:C7:86:B0:98:B5:17:2F:CA:75:29:11:F3:9A
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d2:4e:78:95:40:62:ba:cd:bf:ff:29:81:5e:db:10:6f:1a:
8c:af:52:20:1e:38:c4:a9:dd:a4:8a:5a:87:ba:cb:05:4f:e2:
f8:81:9d:20:91:2e:b2:26:9c:1e:b3:40:b4:1e:94:eb:69:d9:
39:d9:02:11:ba:b6:f8:7b:10:e3:09:ba:e2:61:ff:26:53:f6:
88:a1:7d:48:b6:d5:8d:e0:3e:1d:95:dc:bb:80:ce:0d:22:1e:
00:73:3d:9d:88:8c:9e:b9:4f:68:40:4b:7e:47:36:e7:da:9a:
56:b5:ff:a1:87:5c:43:00:00:a5:34:ac:3d:a2:ca:7f:c8:5d:
d8:8c:eb:d6:25:46:58:16:af:80:5e:28:89:f7:9e:ae:8e:e1:
3e:2d:2e:39:64:83:9a:c3:55:37:5f:b9:78:ec:9d:b1:96:c9:
3b:6d:84:ca:c8:db:07:9d:ea:65:72:46:d0:73:b0:36:1a:dd:
bd:1d:56:47:4b:09:5b:61:50:2e:f0:b1:a7:b9:34:35:aa:42:
1c:79:2f:fc:45:f7:c8:fd:18:c6:84:ac:b5:0e:61:40:7a:d9:
83:3f:8b:9e:cf:a3:48:e8:3c:ff:da:d3:08:2b:39:9e:4e:7d:
54:02:a6:89:a1:a9:fc:a8:3f:1a:2d:63:96:e0:74:5b:f7:d1:
e6:47:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:37:49 2025 by rpki-client