Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: FTFCA2SzavKpf+frmPAWPxWgg5aIioxsJMoJHeimHTU=
Subject key identifier: BA:FB:63:33:87:DB:18:64:C7:15:D1:3A:FD:BE:43:64:8F:21:33:C9
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 01958B16D8B42A51C8BC8011D1C0F1E46628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 0225
Signing time: Wed 12 Mar 2025 16:01:25 +0000
Manifest this update: Wed 12 Mar 2025 16:01:25 +0000
Manifest next update: Thu 13 Mar 2025 16:01:25 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: dKoYcBXuQm6gpaZTj9zAs2uMOnABO1EBhU/YgSgOeXs=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:d8:b4:2a:51:c8:bc:80:11:d1:c0:f1:e4:66:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Mar 12 16:01:25 2025 GMT
Not After : Mar 13 16:01:25 2025 GMT
Subject: CN=bafb633387db1864c715d13afdbe43648f2133c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:01:b1:10:1c:22:c3:a0:04:8c:d1:65:91:64:
46:d6:10:c4:32:30:f4:ce:b8:0c:58:84:04:5d:d2:
5a:45:ff:26:87:7d:f9:73:10:43:ea:3d:12:8c:c5:
84:96:f1:a6:96:ee:a8:94:32:41:91:3b:1a:f2:ce:
54:6d:94:3d:8c:a7:0a:43:3b:11:33:d2:00:1e:a6:
a4:ed:42:d9:ab:1c:72:9e:6e:c8:c4:3d:c4:c2:bd:
59:54:55:f4:fd:6b:77:eb:71:72:9e:45:36:88:33:
40:fa:5a:39:42:74:27:f3:19:a7:cf:43:eb:5a:c3:
6f:c5:3b:08:14:77:5f:42:6a:42:00:5e:88:2c:10:
66:9d:05:d0:5b:b5:8d:a1:d3:11:aa:12:cc:90:30:
4d:37:ff:d0:4b:bd:14:17:ca:00:6a:bb:28:72:a0:
72:09:76:eb:cf:4b:f2:52:a6:7b:dc:da:6b:c1:ba:
96:ff:fd:e0:0e:0e:b8:ac:07:08:50:11:f6:fa:9a:
c6:f2:12:c5:09:8a:27:c9:16:d3:cb:2c:a0:25:ac:
0a:81:b1:c8:8f:10:c0:55:9a:27:bb:90:73:23:41:
58:06:5f:ac:81:4f:67:22:6a:34:95:86:69:b0:31:
6e:d8:8a:a7:16:ea:3a:29:5c:9b:f2:b1:57:4e:42:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:63:33:87:DB:18:64:C7:15:D1:3A:FD:BE:43:64:8F:21:33:C9
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:43:bb:d7:65:f3:78:79:d2:c9:91:79:9e:13:ea:04:34:ea:
1e:35:d6:ae:1d:f6:e5:e5:af:e1:69:f4:e1:31:d5:66:6b:82:
22:76:c6:7d:40:68:6c:22:51:2c:a2:fa:2a:31:c8:2b:3d:6f:
6b:fc:89:b8:c3:e7:01:82:7b:4c:c3:63:75:c7:d0:f6:92:39:
b8:8d:65:45:56:e0:4a:97:c4:c9:81:50:f4:94:bb:33:77:f6:
70:f9:ab:60:62:b7:27:40:56:d6:ed:72:6a:7e:b5:59:a3:d0:
9b:6a:41:89:c1:44:38:69:9f:43:1c:73:6b:68:01:ba:3c:aa:
93:46:61:e8:66:f8:00:44:e5:35:a3:4f:e0:6c:53:cb:8e:54:
ab:63:c7:9f:4a:38:55:2c:6f:77:ec:f2:27:b1:3d:ef:e0:85:
f2:10:46:9c:fd:a0:32:a4:3e:31:c5:6e:ad:d3:a1:89:80:5d:
5f:16:64:06:ac:18:74:32:6e:83:c1:eb:71:74:ec:5c:1c:49:
37:67:3c:62:86:b5:06:60:af:02:03:2c:33:06:cc:b0:06:8e:
a8:c1:5b:07:3e:40:0d:95:0f:97:59:63:ce:63:b7:e0:4e:ef:
37:30:d5:dd:6b:51:11:3c:cc:62:46:4f:35:f5:11:77:96:d1:
5c:20:ca:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:44 2025 by rpki-client