Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: BPi5DSj15E1eWClNXelviyUVoRp9KbrBhPtxL8kwVeE=
Subject key identifier: 9D:DF:DD:A0:42:FD:C7:B1:A1:FB:44:29:25:EA:85:34:A5:88:B2:14
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 0196A8E6F908195BE61A1502FA4B5E162519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 0CF4
Signing time: Wed 07 May 2025 04:00:31 +0000
Manifest this update: Wed 07 May 2025 04:00:31 +0000
Manifest next update: Thu 08 May 2025 04:00:31 +0000
Files and hashes: 1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=)
2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: RuuXOYqcvG/gPdi6oYQiUDHnoc4eoAI7RMLAGFCeDhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e6:f9:08:19:5b:e6:1a:15:02:fa:4b:5e:16:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: May 7 04:00:31 2025 GMT
Not After : May 8 04:00:31 2025 GMT
Subject: CN=9ddfdda042fdc7b1a1fb442925ea8534a588b214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:ef:65:0d:12:ca:bc:19:e3:dd:3c:8f:20:
28:fe:0f:d8:e9:c1:4f:28:98:f5:7b:75:14:c0:6d:
f3:8b:ec:9e:53:92:b3:92:ef:7f:ef:9b:6a:a6:a9:
62:11:f1:98:8f:63:ba:51:09:44:f8:95:d8:12:0b:
02:98:dd:58:cc:1f:65:dd:ff:4f:0b:71:a7:7f:01:
93:ce:d1:83:36:0c:a3:df:5a:b4:6b:43:cb:eb:54:
a5:91:7d:8b:8c:5c:a3:7e:08:96:fc:51:bb:68:dd:
e6:27:56:71:55:95:f6:97:7a:a7:5f:46:78:50:b1:
33:a4:42:e5:b0:03:51:3c:e1:af:d3:48:72:ad:91:
50:36:39:35:15:8a:58:e7:68:5d:67:b7:19:6f:73:
6f:c9:13:f6:c4:1d:4d:fc:28:f2:76:31:f4:38:24:
67:3b:34:44:08:c5:f1:25:79:9f:28:35:dd:05:4c:
58:a7:2e:73:71:18:f6:26:3c:10:6c:82:47:99:a7:
e5:e2:04:5a:10:29:32:a0:87:6c:28:0f:a0:29:5b:
0c:26:16:87:24:79:bf:16:78:89:3f:02:51:15:86:
7f:d0:93:64:58:2d:1c:4a:d5:4d:e7:83:70:19:c7:
f2:02:90:55:fe:ab:a9:67:39:32:4b:ce:ae:06:af:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DF:DD:A0:42:FD:C7:B1:A1:FB:44:29:25:EA:85:34:A5:88:B2:14
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:b4:01:98:e0:1c:fc:d2:be:c1:08:92:75:64:52:46:bc:
d3:cd:74:9a:89:03:c5:13:fa:45:6e:0c:51:db:a1:f4:29:83:
55:65:36:04:cb:69:11:4d:2a:ea:51:6c:bb:18:01:95:58:4b:
8f:3e:d8:71:fb:cf:66:ab:25:9b:0f:e4:53:4c:c2:80:b4:1a:
c4:99:41:01:74:46:2d:9d:44:a5:58:66:1a:75:7e:3d:2c:af:
07:75:91:06:81:7b:5d:17:36:8d:8e:eb:86:fc:cc:70:6b:c9:
e9:1c:77:85:53:36:c4:4e:03:17:71:3a:c1:b0:5e:00:32:b4:
9f:90:44:b8:cb:d7:73:fc:f0:8e:e4:b4:11:70:c9:f1:40:e6:
9f:f9:56:56:cf:0b:0e:bd:f1:1c:35:f3:38:8c:4c:14:32:a6:
ef:5d:af:6f:1c:c1:e3:65:92:08:af:68:bd:ff:d0:fd:01:b8:
f2:15:a6:b3:54:75:d9:4e:42:59:ed:a9:4c:f8:41:e9:64:57:
56:20:0c:89:56:95:f6:01:16:82:9a:f7:6d:90:6d:22:51:0f:
d7:1c:52:b7:79:4d:57:2a:3b:1f:28:fe:45:cf:b5:31:65:ea:
ee:39:8e:ef:c3:71:fe:1e:fa:fd:8b:92:47:77:11:1b:2f:e0:
2a:69:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:56:18 2025 by rpki-client