Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: ogmz+xQStZCt0TLCiLdeW+GLUVMGOjlc0ePTbEnJDCE=
Subject key identifier: 54:86:18:A5:59:93:9A:FA:9D:E0:30:B2:C3:2C:A0:93:41:F5:B8:F3
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 01963BAEAF72C9D58C95CE4A89B11B68A050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 1236
Signing time: Tue 15 Apr 2025 23:00:25 +0000
Manifest this update: Tue 15 Apr 2025 23:00:25 +0000
Manifest next update: Wed 16 Apr 2025 23:00:25 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: z67gTgfbgKNCfumFmB6U4KYm538rVfAviaIlaHEUzGk=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:af:72:c9:d5:8c:95:ce:4a:89:b1:1b:68:a0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Apr 15 23:00:25 2025 GMT
Not After : Apr 16 23:00:25 2025 GMT
Subject: CN=548618a559939afa9de030b2c32ca09341f5b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:42:6e:f1:91:bc:60:73:2c:70:17:6e:6a:
38:56:0a:77:52:24:c7:d1:e3:8c:75:a9:c7:c8:8c:
fa:09:a6:fa:1c:3f:47:28:4f:f5:58:39:99:f9:81:
fe:e9:6f:71:1d:29:0e:ce:c0:d0:bf:9e:97:87:c5:
27:69:8a:71:a8:08:c0:cb:0e:41:72:61:ca:92:b3:
07:dd:1e:ba:09:cf:7f:45:f3:98:d7:d9:b5:4c:38:
e6:b2:e0:f3:3a:e0:03:13:2c:35:af:49:62:0f:fb:
7e:af:a2:76:13:f4:08:06:71:76:69:9c:cb:37:0c:
35:ae:60:64:84:36:c5:78:24:45:fe:d3:7e:4b:13:
dc:98:fc:14:83:0b:e2:6f:e0:7a:e3:0e:ef:d6:56:
28:4e:7b:45:2c:5b:b5:b8:95:3b:7d:62:24:aa:26:
01:18:3f:0a:20:9b:9d:25:fb:bf:27:46:ba:e7:86:
81:33:72:db:b5:8c:4b:ba:6f:d3:2f:f0:9d:94:28:
2c:12:3a:17:36:71:e8:5b:a8:23:7d:bf:22:11:35:
9c:00:19:4e:6d:af:48:80:c3:8b:78:08:69:b9:58:
7d:dd:5e:fb:96:fa:ba:bb:a4:a2:58:8e:77:0e:3e:
95:90:e6:4e:46:e0:41:77:ae:9b:43:57:10:7c:87:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:18:A5:59:93:9A:FA:9D:E0:30:B2:C3:2C:A0:93:41:F5:B8:F3
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:45:cd:d1:e9:2f:ca:a9:48:ff:b0:88:07:98:30:0e:55:52:
18:a0:3b:e1:af:33:2c:ae:f5:03:53:81:4a:88:30:28:c8:4c:
94:dd:ef:90:7e:4a:c5:d6:be:6f:16:04:5a:62:86:0b:44:93:
14:9e:9e:d4:e1:79:56:3f:a9:97:a2:20:dd:c5:03:d8:f4:c1:
b5:2c:43:c9:46:38:95:8b:bb:c3:1e:0a:2b:ff:e2:44:11:09:
1a:d7:14:cf:b7:25:f0:27:1c:c8:ab:fb:ed:da:fa:07:d2:9a:
64:88:23:e9:3d:49:55:55:5b:34:37:67:2a:05:15:c3:81:34:
bb:d4:0d:39:67:7a:99:9a:07:62:10:07:77:50:81:f4:c1:dd:
00:e8:8a:eb:73:6e:59:86:34:61:a9:c1:17:e6:b4:84:57:e9:
c3:dc:f7:8d:24:29:91:12:6f:f1:53:1a:1f:ab:f1:f6:a4:e0:
9b:dd:de:f1:95:df:73:98:df:2f:9c:03:53:1a:15:74:16:b0:
cf:99:4a:64:7e:53:92:64:3b:85:95:ab:6a:a5:f5:33:78:57:
91:2d:7f:98:da:da:32:7a:29:f8:a7:f5:6c:7b:df:e7:98:ae:
cc:bc:aa:8c:d7:9a:d5:3a:86:5a:37:58:7e:e1:cc:3b:0c:85:
f9:3e:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:23:12 2025 by rpki-client