Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier: 506xIWJOy3R/bhoJ6Hw05+/easzESJrm3BRLui290gE=
Subject key identifier: FD:92:10:DC:B4:5C:50:21:D6:A9:FE:B3:48:8E:B1:F8:13:00:F3:56
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 019577FD38378D901A79AF78B5C414D341F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number: 148B
Signing time: Sat 08 Mar 2025 23:00:38 +0000
Manifest this update: Sat 08 Mar 2025 23:00:38 +0000
Manifest next update: Sun 09 Mar 2025 23:00:38 +0000
Files and hashes: 1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=)
2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: RRQTW4WV7qlz3fDo9Ze/2vh6dJ7P2N6L8DHgBSOG1pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:77:fd:38:37:8d:90:1a:79:af:78:b5:c4:14:d3:41:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: Mar 8 23:00:38 2025 GMT
Not After : Mar 9 23:00:38 2025 GMT
Subject: CN=fd9210dcb45c5021d6a9feb3488eb1f81300f356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:19:0f:06:2d:09:85:7f:2b:d3:53:a8:d6:
82:2b:38:88:b5:5c:9c:a1:54:e0:40:ce:88:1d:bd:
af:14:1e:33:e6:59:c6:85:6a:ec:11:60:90:93:3b:
e7:1b:fe:42:c8:55:f5:36:c8:2d:00:e9:1d:a1:ab:
e8:b2:21:aa:76:22:57:5f:95:a5:89:e3:a7:9c:b9:
ab:23:4f:ba:d4:34:45:70:19:76:3e:df:de:13:45:
4f:82:18:ac:dc:5d:3c:f7:33:4c:4f:83:d8:80:8f:
25:4e:30:59:49:4e:06:1c:0f:e5:bb:bc:e3:5b:1f:
2e:f6:3f:b0:ca:fa:2a:6f:86:aa:74:a0:53:35:3c:
1c:90:af:fa:e2:f3:b6:48:e5:aa:84:24:54:c6:0f:
5f:56:c9:94:8f:7e:2a:ef:e6:9e:c1:08:ae:c0:b1:
61:79:34:07:34:98:c2:06:4a:25:46:9e:12:c6:7b:
a0:32:ba:7b:82:a3:4b:f3:7c:7e:b7:88:f9:1b:2f:
fe:d5:df:1b:a0:aa:d1:22:52:79:28:a0:07:87:6f:
b6:89:55:ee:ad:86:e3:fd:ec:64:e2:19:a6:cb:92:
ca:ec:1b:ec:1d:6a:84:34:5a:25:be:bc:77:fb:b2:
1f:f6:07:f1:14:f2:7c:9b:bf:ae:00:b6:17:95:7c:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:92:10:DC:B4:5C:50:21:D6:A9:FE:B3:48:8E:B1:F8:13:00:F3:56
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:48:c9:47:36:38:e1:d8:28:5f:3d:46:e5:9e:cc:d0:37:27:
8a:ec:07:f1:29:fb:44:b3:fe:c6:2a:c8:db:5c:71:e2:7c:d1:
26:4b:69:16:f3:51:95:a3:1a:fd:88:4c:fd:84:6b:89:40:30:
60:c0:50:9b:ed:01:26:97:4c:f5:2f:f7:ef:d2:57:81:fb:ef:
e0:6c:5d:41:cf:f6:f3:82:06:59:72:52:95:03:fd:df:24:87:
e1:da:81:88:8b:29:bc:c3:e3:48:44:b9:bc:87:9e:0c:c3:e0:
a9:26:c3:18:cc:79:e7:6c:75:c1:fc:fb:79:df:6f:8d:39:d8:
53:98:3d:37:38:3e:2a:34:72:ba:84:80:d2:cc:57:59:d8:19:
9b:5c:d4:ca:69:af:e7:88:87:6c:d5:b5:6b:f5:03:10:ef:0e:
f0:53:92:d6:40:87:3e:46:fc:c4:7d:5f:91:0f:45:6b:54:14:
ab:42:2b:27:46:dd:6e:cd:95:84:5f:6e:5b:d4:3c:cc:64:4a:
31:ce:6e:95:b6:29:e7:2f:5c:75:c1:f1:b9:23:7e:01:bb:dd:
12:6d:ae:44:da:d3:6c:52:fb:94:6d:4a:ab:d2:eb:7f:74:2e:
42:83:c1:d3:a6:3a:09:29:67:a0:41:97:8d:20:bb:82:86:89:
8a:6d:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:09:26 2025 by rpki-client