Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: PO6wKeXqy151vwyDV02IDEOVXt4OedEoq5XtWOybgmQ=
Subject key identifier: FF:55:9A:77:E8:17:15:DA:34:12:74:AE:89:78:A8:15:A7:D8:F6:7F
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 01969D87DD84AFD6ACAB00D426DA07DE1338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 054D
Signing time: Sun 04 May 2025 23:00:49 +0000
Manifest this update: Sun 04 May 2025 23:00:49 +0000
Manifest next update: Mon 05 May 2025 23:00:49 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: U5MyGQ5WZJLgp3KcXblbV0EhDjb3Hju5D6++tpRqZPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:dd:84:af:d6:ac:ab:00:d4:26:da:07:de:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: May 4 23:00:49 2025 GMT
Not After : May 5 23:00:49 2025 GMT
Subject: CN=ff559a77e81715da341274ae8978a815a7d8f67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:f8:b9:6e:b9:dd:b0:db:e0:e3:d5:de:1e:
e9:86:54:03:a2:d8:b4:f5:7c:43:8d:c1:b2:e1:97:
a7:06:3c:e6:ff:53:50:ca:33:d9:8f:bd:1c:04:cf:
24:dc:74:4f:37:a8:bb:d5:fa:1c:83:08:ea:a8:bc:
38:73:5c:65:81:af:12:b4:c2:5b:a1:24:b8:25:1a:
48:06:cf:f3:ad:3c:d4:fa:42:ea:fc:22:78:96:3b:
bf:2b:5a:f9:28:c8:f3:e0:28:4c:c3:10:03:29:b5:
18:82:bd:89:12:49:aa:58:34:1f:ba:5d:fb:f6:77:
a2:01:13:c7:bb:5c:c4:f2:2b:98:18:5a:88:26:55:
a5:fd:12:7b:2f:c0:bd:6d:9f:ff:1f:cb:bf:34:99:
a3:30:a8:b2:e6:c5:60:f7:1c:3f:d0:7b:2b:eb:bd:
b5:1c:35:c6:66:58:fc:94:71:99:c0:d7:ba:eb:e9:
b7:17:c1:c8:1b:12:9e:b4:92:0f:44:3e:3f:a3:fc:
1d:c2:31:70:4b:68:bf:c2:46:93:7f:97:57:8a:03:
97:27:ea:df:10:d9:b5:38:62:ca:f9:e8:c4:c1:ca:
b6:37:79:aa:99:12:2e:90:07:0c:43:c9:34:1f:40:
58:68:86:46:e4:e9:ec:f9:36:17:df:34:b5:91:8e:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:9A:77:E8:17:15:DA:34:12:74:AE:89:78:A8:15:A7:D8:F6:7F
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:68:eb:46:f9:5b:0d:42:ab:bf:c0:2d:2f:28:50:02:25:9c:
3c:6f:8d:a1:d4:43:bc:6f:36:c4:50:0b:74:32:fe:01:64:a4:
38:28:24:9d:4f:58:d0:8e:9c:81:8f:c5:13:da:4e:96:8b:f9:
21:a4:d6:16:7d:d8:ed:10:83:ac:2f:26:bc:c8:dc:9a:8b:01:
32:d2:e9:c2:a1:ad:91:56:10:4f:cd:16:bb:2b:de:b8:3d:97:
93:8c:ad:37:34:ff:12:99:1d:40:c4:98:eb:1f:9b:14:38:04:
cb:7e:11:a6:01:a1:7d:dd:7c:d4:e7:db:6f:ed:15:f1:76:1e:
14:cc:22:42:24:8e:72:3e:bb:6a:18:69:c4:d3:ea:be:3d:ff:
05:eb:57:63:65:f5:58:b1:d7:2b:87:ad:b3:2a:ab:da:d3:14:
59:36:38:f7:04:90:f9:84:13:0c:12:25:92:93:c7:46:15:d0:
73:42:93:11:ce:35:42:ca:6f:f9:7f:4c:a6:73:c6:9c:62:b2:
10:02:d9:51:34:02:b8:0b:78:2d:74:4a:6d:16:6a:95:01:e8:
75:a1:c4:49:92:53:82:5c:db:34:54:93:e1:99:65:8d:5b:7c:
a7:38:3e:1e:4f:59:df:90:91:b0:d0:e8:65:50:d5:fc:0d:81:
86:b4:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:33 2025 by rpki-client