Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: VE5KIs7UawSmIgnBxVUneRr1d72ApAu+awoHTOCqtFI=
Subject key identifier: FA:28:EC:37:8C:3E:62:73:39:B5:11:C2:2A:F5:B7:8A:E5:55:AC:7B
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 01961132C8927BDD9F54C657CB8D9FB93F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 0FF6
Signing time: Mon 07 Apr 2025 17:01:02 +0000
Manifest this update: Mon 07 Apr 2025 17:01:02 +0000
Manifest next update: Tue 08 Apr 2025 17:01:02 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: qOVY5Ev4h60Wlh4ZF+1nA1IOob9b7bj2F1U8enybfk8=)
2: mkwCWTxmc30gqkOebhkEdIG_cF0.roa (hash: 4rCdfiogFwUs2SpdCyxEcJMMRqRddcLgQufEvr3KNGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:32:c8:92:7b:dd:9f:54:c6:57:cb:8d:9f:b9:3f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Apr 7 17:01:02 2025 GMT
Not After : Apr 8 17:01:02 2025 GMT
Subject: CN=fa28ec378c3e627339b511c22af5b78ae555ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:a5:2b:ab:e5:a8:16:67:03:7a:51:b7:06:
3e:ce:8e:99:2c:22:d5:a8:15:c5:8a:c0:02:88:c9:
55:94:f2:f6:c8:05:6d:8f:36:0d:45:39:51:2e:6f:
0a:3f:6c:df:92:b1:2a:8c:8a:19:58:90:12:81:76:
5e:e6:16:ba:b5:e6:b5:8d:56:5a:88:61:16:f0:55:
1e:fd:20:ee:36:46:a6:7e:21:fa:b1:5a:b5:91:4d:
85:e1:6a:c5:86:4d:9d:82:88:11:90:ec:b4:3c:72:
0c:ca:5e:e1:b3:89:34:71:f2:c2:05:9f:59:32:48:
42:2d:93:4e:4e:f6:85:d0:59:ee:93:9b:ab:4f:74:
1a:d0:0b:ce:1e:6d:bb:ab:f9:2f:82:c6:ca:f5:05:
20:41:ed:bf:88:b3:b9:bc:20:a1:0b:34:0a:7b:8a:
43:a8:2c:07:71:f1:26:76:08:0f:2c:ed:bf:c1:01:
a8:fd:5f:5f:0e:56:7f:fd:d0:b6:d8:6c:d8:d3:8f:
8f:d2:d6:59:1c:6a:f1:61:9b:32:86:d9:25:fd:b3:
a9:2a:ee:5b:22:17:55:6b:94:1e:d1:ba:37:93:c3:
ba:4b:26:1b:16:9c:8f:c3:66:12:27:73:d1:20:b8:
ef:96:cc:e3:35:42:ac:24:d3:55:44:29:eb:b3:6e:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:EC:37:8C:3E:62:73:39:B5:11:C2:2A:F5:B7:8A:E5:55:AC:7B
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a0:08:09:0b:d2:e2:af:43:f6:43:92:45:c2:23:e4:4d:5f:
0a:59:50:b1:64:ed:b9:2a:5a:d1:7c:70:74:65:15:5f:92:3f:
a6:69:df:cd:fc:24:52:f5:4e:4b:9e:e5:7b:03:dc:28:50:ae:
bf:1c:4a:44:35:31:d9:61:6d:88:29:9f:ca:51:10:d8:3d:b3:
ee:4f:c0:f1:40:b4:70:52:82:a6:d3:bd:2a:a7:13:5f:e6:2d:
09:4c:07:21:b4:c9:a4:26:1e:1d:03:4e:50:a1:13:f7:b2:a4:
23:5f:4d:27:f6:b5:c5:f4:5a:f0:71:47:61:ee:6f:c8:44:1f:
f9:da:d4:4b:bb:56:ec:1b:10:ce:27:db:b7:44:c1:80:e6:cd:
b3:14:0d:d7:86:61:01:98:3a:fd:25:25:e1:94:a4:17:75:c4:
27:6f:2a:1e:db:87:42:ec:c8:19:42:31:cc:dc:72:80:4d:ec:
da:99:12:67:52:56:a1:64:4d:f8:b4:d0:11:0f:25:ab:66:16:
9d:28:6a:72:ce:d1:26:cf:1a:3f:54:2f:f2:ac:e7:5f:55:e7:
d2:bb:34:ae:08:fc:58:2e:4e:c9:05:17:f0:64:59:ee:8e:f9:
4f:08:fd:c6:88:e7:5b:1c:1f:30:4a:cd:97:50:b7:16:df:be:
86:3b:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:04 2025 by rpki-client