Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: nChWM79cwsZPyf4rxoHYMBgpM0oroj/B31Gk8mQDIyo=
Subject key identifier: 96:16:6F:62:81:FE:C2:1F:01:50:C0:F9:F5:AD:73:24:91:A5:94:27
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 0196AF8E155AF1B2243E0F52AAD40520E7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0838
Signing time: Thu 08 May 2025 11:00:46 +0000
Manifest this update: Thu 08 May 2025 11:00:46 +0000
Manifest next update: Fri 09 May 2025 11:00:46 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: 0ZOw6OhyZzAtEGbBBuJqFz6UEgIGLBtDBUZLdBeeYV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8e:15:5a:f1:b2:24:3e:0f:52:aa:d4:05:20:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: May 8 11:00:46 2025 GMT
Not After : May 9 11:00:46 2025 GMT
Subject: CN=96166f6281fec21f0150c0f9f5ad732491a59427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:f8:5f:f6:f1:6b:b0:e0:73:f1:a5:1a:0a:
ac:ae:d1:31:17:ae:99:d2:7b:dd:18:34:45:a6:4c:
f0:e3:2c:85:6a:1e:4b:52:47:3f:c6:d0:87:10:63:
19:d1:c6:6c:08:c6:7d:11:bc:16:cb:a7:8a:83:a3:
56:20:09:84:47:dc:f6:b6:cc:71:91:51:07:ec:f3:
cb:c8:73:af:1a:c4:ff:c8:a6:92:96:a2:29:3e:93:
6d:86:4b:82:ed:d7:0f:4a:32:05:67:7a:44:a7:4a:
62:2f:99:a7:d9:f7:ac:e5:41:68:eb:08:f1:6d:ea:
5c:22:32:b1:f0:05:2c:fb:ee:34:3b:f0:06:1e:dc:
40:e8:88:f0:59:30:67:53:44:7e:d6:e9:e2:24:75:
2e:55:42:98:f5:7b:26:57:1b:b0:7b:53:7e:f9:33:
1b:4b:12:e2:43:d2:82:8d:41:83:61:c6:9c:11:d6:
a7:30:9a:41:5d:e1:67:c6:9f:2b:e6:73:f4:66:56:
47:6a:d5:bc:a3:15:3f:a3:13:f2:3f:79:7e:f3:cb:
57:ea:a5:2f:b7:95:7e:10:4f:56:72:c7:6c:62:eb:
1b:70:ca:ab:c5:63:f2:ec:ce:ba:52:2c:be:ed:5c:
b5:c4:95:50:56:e0:ff:dd:ac:32:67:3e:8f:cb:a5:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:6F:62:81:FE:C2:1F:01:50:C0:F9:F5:AD:73:24:91:A5:94:27
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1f:15:5b:b1:06:b5:c8:f8:cd:d9:59:ee:a2:0f:df:1d:38:
b0:8d:69:99:62:41:fa:de:97:10:ce:d5:66:80:5a:cf:60:eb:
cf:a3:72:31:93:06:ce:ed:91:ab:27:57:a1:fa:32:3e:e0:17:
34:6d:ec:05:76:01:e1:3a:e7:73:5c:1b:99:67:f3:80:a6:b5:
d3:63:6c:2f:43:67:18:0b:3f:80:ac:54:aa:4b:cf:e3:a0:fa:
ad:cb:26:ef:15:7a:61:d5:de:95:24:18:59:f7:3f:03:c4:5c:
2b:50:bc:ad:03:61:40:55:40:da:cc:8c:a5:a9:7c:d0:02:7d:
44:90:aa:e4:17:17:9e:48:0b:98:7c:a5:13:bb:51:f8:a2:ac:
e9:15:ed:0a:0d:e6:9c:7b:82:9b:d4:dd:8f:38:28:c2:14:29:
d5:78:e0:ac:3e:51:d5:78:3d:9b:48:5b:dc:69:36:79:05:18:
c3:7f:a0:10:6b:51:1d:64:42:43:98:a6:57:88:9f:5f:9c:24:
ee:d9:e7:90:1d:05:0e:15:79:16:22:37:c2:6c:ec:e5:6b:38:
c8:fe:76:1e:19:06:7d:a5:09:b6:b7:55:69:14:1d:84:e8:2a:
fb:1a:89:20:17:7c:63:75:8f:2f:05:11:3f:fd:0d:9b:da:a0:
fe:8b:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:47:27 2025 by rpki-client