Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: Wj+/tIO26Az4uGb7AYTAQlA4r4Yni1KjuKRxusgwxBY=
Subject key identifier: 5D:08:AD:9F:4A:68:81:22:DB:0E:03:0F:B2:32:55:17:17:AD:E0:96
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019651243332B7CB53BF46FEDF3029111C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 070D
Signing time: Sun 20 Apr 2025 03:00:48 +0000
Manifest this update: Sun 20 Apr 2025 03:00:48 +0000
Manifest next update: Mon 21 Apr 2025 03:00:48 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: dPfVvFtl+Oq1cHfVcN/5FWGhebsrGxogqHYooIc2O+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:33:32:b7:cb:53:bf:46:fe:df:30:29:11:1c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Apr 20 03:00:48 2025 GMT
Not After : Apr 21 03:00:48 2025 GMT
Subject: CN=5d08ad9f4a688122db0e030fb232551717ade096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:8c:60:2b:a0:7c:77:6b:aa:fa:d7:0c:d4:
ba:a6:71:5e:f1:e0:bf:17:3b:f0:a2:25:b1:b8:74:
7e:79:d2:de:ab:a4:8e:86:de:e3:c7:55:e8:fe:bf:
aa:87:f4:9a:0a:6a:56:43:bf:44:aa:3e:80:66:bc:
5f:ac:6a:d3:da:0b:38:c9:74:6d:a3:f1:84:30:e0:
d3:b1:9f:db:0e:23:e3:30:80:23:12:1a:65:ed:13:
a6:07:bd:91:18:14:d0:f2:03:02:0b:53:63:72:c1:
a4:fd:0c:66:27:d1:51:ba:06:ff:c4:97:18:ed:ae:
4c:63:44:c3:02:b8:3e:9a:2d:59:11:93:6f:ec:5b:
d2:be:92:69:d2:9a:dd:1a:df:cb:21:79:e0:78:ba:
f7:b3:62:d4:18:b0:d9:43:03:ad:ee:cd:ba:9a:b0:
06:b8:9a:13:f0:77:1f:2d:e0:92:8b:05:6b:6d:8b:
0c:ba:31:13:11:2d:f0:42:83:f8:6b:96:75:f1:2d:
0a:19:ce:b8:18:34:4e:cf:d3:19:21:59:85:91:12:
cd:61:65:74:d7:9d:92:eb:7d:62:17:d7:d1:b0:02:
e1:af:fe:04:60:3c:30:18:3a:39:56:e8:4b:d7:94:
cd:ef:d6:2f:0f:c3:fd:86:46:30:6f:2c:34:42:d2:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:08:AD:9F:4A:68:81:22:DB:0E:03:0F:B2:32:55:17:17:AD:E0:96
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:42:96:21:e0:80:47:a1:96:f3:53:fd:8a:84:9a:f4:b0:6e:
85:4a:a9:6d:96:a1:d8:66:4d:67:af:10:99:db:02:8b:b1:38:
ec:57:38:17:03:84:e8:b0:41:7c:86:d9:bf:7a:9e:70:c1:f2:
e1:1a:8a:ba:7c:29:8a:51:36:e0:6d:da:5c:5f:c7:69:8a:1c:
5f:7b:c1:59:da:6c:4c:28:4d:f1:99:e4:a0:29:72:ae:55:db:
20:5f:62:7d:61:82:17:56:a9:20:71:16:b4:20:f1:a3:f6:47:
c6:47:04:e8:3d:1d:b4:5b:1a:6b:81:6c:ab:56:e5:9d:33:64:
0c:1c:2b:74:63:9b:0c:f0:7f:8c:26:40:32:8c:17:40:3b:86:
1d:b0:31:59:6a:58:90:f4:58:e9:73:a6:72:3b:49:a7:05:87:
96:8f:cc:45:8e:dc:9f:90:43:0d:06:48:f0:e1:41:c4:5a:7d:
a1:61:53:ae:dc:d5:ae:fd:19:8f:c0:11:51:8e:5a:e3:9e:4f:
5d:9d:9e:00:12:04:62:d0:a6:f4:e6:ac:ea:d7:74:28:c8:78:
83:d0:c9:a5:c1:d8:57:52:25:c4:a3:19:35:0e:84:ed:52:b8:
6c:41:84:83:be:dc:06:90:a1:8f:33:c8:e5:d3:00:7c:10:66:
14:7c:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:44:22 2025 by rpki-client