Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: yEd8WMdfuDCi28q4gl0XiIah9WmPo6oa30WinWyRdE8=
Subject key identifier: 30:D1:7D:18:25:67:99:FE:C3:A7:CA:7D:FD:03:27:6B:87:3F:1C:2F
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 0196CA605A05D892D1E178AB457B8C04DE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 0398
Signing time: Tue 13 May 2025 16:00:34 +0000
Manifest this update: Tue 13 May 2025 16:00:34 +0000
Manifest next update: Wed 14 May 2025 16:00:34 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: XKu3TuXikNKc6jlUZks8gD9UPzwTW3zMxhk65KclvdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:5a:05:d8:92:d1:e1:78:ab:45:7b:8c:04:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: May 13 16:00:34 2025 GMT
Not After : May 14 16:00:34 2025 GMT
Subject: CN=30d17d18256799fec3a7ca7dfd03276b873f1c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:95:f9:5d:ce:e9:ab:54:a6:e9:e9:b1:8f:
ed:29:74:e0:37:50:9c:06:c0:72:96:28:63:ec:3c:
58:ca:dd:44:6d:87:eb:15:db:61:71:ec:bb:b4:57:
fb:94:ce:41:8a:68:0f:f3:7d:a4:b7:6b:54:9c:62:
fb:ca:6e:a6:41:90:59:db:67:3c:fb:09:d5:29:0c:
65:a0:79:4d:45:42:cf:df:8a:b3:9d:90:48:42:88:
c6:90:82:ef:06:99:7b:7d:06:73:ce:b4:41:fd:fc:
da:7b:89:32:57:93:90:c9:4b:fb:a4:5d:f8:31:72:
b7:4a:b6:7e:60:0e:4c:76:03:45:56:26:d0:07:40:
f0:5f:ef:7d:0c:6a:c9:c5:4e:ad:3b:95:48:24:35:
7d:26:33:6c:3a:27:cf:df:87:db:51:37:da:d7:f9:
e7:3e:26:67:0a:a2:61:61:a8:86:25:d9:ef:44:1f:
65:3b:89:fe:8d:58:30:b4:b1:db:de:25:99:f4:5c:
ea:6c:38:b9:c3:aa:5a:71:50:6d:d0:d6:00:d0:f2:
fa:d5:c3:7c:2b:2c:72:ca:7e:b4:97:d9:1c:24:ba:
e7:a8:22:56:49:47:8e:9c:6c:1e:4d:83:c8:cf:0c:
0a:2b:c3:ed:84:d4:e8:20:fa:c6:19:9f:ad:a9:b9:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:7D:18:25:67:99:FE:C3:A7:CA:7D:FD:03:27:6B:87:3F:1C:2F
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:26:98:07:15:7a:b4:15:07:cb:3f:08:1a:f7:bf:49:bf:
ad:a6:c0:5e:a8:f2:8d:83:a5:48:12:fd:7a:11:cd:c9:b6:93:
fe:7b:c3:7c:01:c2:e9:c3:46:39:75:cc:09:91:c9:29:7d:6b:
9d:95:49:ad:2d:40:83:c3:f3:c1:d1:e9:d8:2f:e7:79:b3:8d:
26:41:a9:7d:7a:37:c9:bd:d7:99:b5:e7:4b:14:62:d2:64:e9:
84:fc:f0:fc:e4:bb:5b:b6:ba:30:66:70:8e:06:fb:5d:1f:47:
8d:9e:f8:0a:10:54:32:1f:66:1a:b0:8a:02:c8:51:58:e6:80:
88:78:4b:20:e6:d6:58:08:7b:a1:03:47:2d:01:60:3a:8f:eb:
5c:17:51:90:34:8e:1d:a4:aa:ec:2a:4e:db:e9:70:96:6a:a1:
a1:0d:9a:94:b1:b2:ed:87:44:9e:dd:02:23:4b:53:52:61:e9:
32:b8:f3:2f:02:82:19:11:36:45:a7:9a:fa:c2:64:f2:53:d8:
78:f9:e9:dd:32:03:30:b5:a0:97:c4:6b:ce:e9:61:a9:af:da:
43:40:44:08:99:77:c4:02:a9:ac:bc:e6:cc:da:8a:2a:8a:04:
ba:bd:61:d8:dc:17:20:ee:3a:98:8c:b7:9b:dd:ba:80:3d:a7:
fc:c5:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:55:01 2025 by rpki-client