Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: +Xd1HMynkJz7Dv58dEoD2VpGTWf2ZeKDAQGPO7fyIsg=
Subject key identifier: B2:F1:60:7E:8E:27:8E:3C:B1:E5:6D:F3:FA:72:45:C0:D2:2A:33:A1
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 0196C2021D75540C653402CB7B4CAD232F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 0801
Signing time: Mon 12 May 2025 01:00:40 +0000
Manifest this update: Mon 12 May 2025 01:00:40 +0000
Manifest next update: Tue 13 May 2025 01:00:40 +0000
Files and hashes: 1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: jFnx6o0mE+RFe7NKEojOKL+4ho9yCbNe0MMLTszyQ80=)
2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:1d:75:54:0c:65:34:02:cb:7b:4c:ad:23:2f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: May 12 01:00:40 2025 GMT
Not After : May 13 01:00:40 2025 GMT
Subject: CN=b2f1607e8e278e3cb1e56df3fa7245c0d22a33a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:d9:65:e4:2a:fb:79:39:7e:a8:8c:2b:f4:
14:af:68:77:8d:97:22:2c:0c:0c:1d:1f:b8:fe:36:
83:27:b1:08:a3:9d:65:45:4d:8c:a7:76:35:5a:35:
67:0a:b5:11:20:a0:3a:8b:36:93:30:cb:04:bc:fc:
7c:3a:df:2c:73:42:69:92:b9:11:29:9d:28:f3:8a:
06:a4:f5:79:81:c0:46:6d:a9:ce:be:c3:88:91:3c:
4e:28:6c:9e:48:41:c9:8d:87:c6:21:d9:f9:ff:39:
98:3d:0e:98:1e:50:1a:aa:18:23:8c:bc:d1:d5:12:
88:4b:76:f6:1d:a5:37:ce:72:d6:f7:7f:37:46:6d:
ef:1d:4a:f9:98:c4:d0:01:ed:2f:3d:bb:0a:d9:1b:
56:44:f9:f1:ee:99:5a:78:58:ad:26:c7:40:e9:d4:
f6:ac:d0:4b:20:22:fc:ab:11:2a:ce:cb:59:c9:3d:
d3:b5:4f:8b:4e:f7:5c:fa:f4:c1:b3:d1:a8:9a:43:
0e:92:c8:07:41:66:52:7e:0b:19:8f:bc:b6:32:f3:
85:43:b5:dc:4e:8c:a5:8f:9c:33:76:c5:c8:30:13:
ba:8c:dd:35:05:02:71:85:27:68:c6:d7:ac:a2:8c:
d8:d1:ee:1a:4c:c5:a5:21:a4:f1:c4:ae:b6:09:1f:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F1:60:7E:8E:27:8E:3C:B1:E5:6D:F3:FA:72:45:C0:D2:2A:33:A1
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:76:8a:00:97:4f:1c:2a:41:a5:96:67:7e:df:21:f0:e1:f8:
44:67:a8:26:91:ef:c2:70:1d:af:4b:c3:50:ae:64:5b:19:6a:
5e:58:a2:82:9e:1d:ea:c5:f3:01:08:75:0f:b2:ea:12:33:49:
a0:c1:fb:dc:de:f7:8a:15:e7:64:7d:1b:6a:07:e4:e6:f6:14:
73:4a:8f:b9:78:f9:c9:bb:75:5f:d2:c8:aa:da:0d:a7:7c:bc:
b9:ab:a2:9f:a7:15:d7:9f:b1:eb:cb:20:74:f1:49:08:67:73:
b7:a7:c4:1a:ee:46:aa:39:bb:25:86:31:03:ef:f8:b9:bf:01:
3a:59:e7:b1:51:2d:22:71:04:ed:f7:f3:94:f3:b6:96:47:fe:
00:6b:ca:37:cf:82:8a:fb:90:ed:15:11:60:a1:7b:1b:e3:61:
91:c3:04:9c:6b:2b:bb:b2:7a:ef:d5:be:5e:96:97:7d:96:27:
a8:01:d2:3b:ed:04:55:2f:90:59:a1:17:6d:ac:a8:ae:b2:e9:
23:e2:f4:d7:46:9a:e9:24:de:18:23:20:2f:27:2c:04:49:ea:
43:ac:e7:b8:21:e1:66:fe:10:c0:1f:fa:76:ac:3d:61:9a:11:
b0:8e:12:68:57:f4:5b:45:70:cb:24:19:d7:9e:16:e7:7c:fa:
49:a4:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:22:39 2025 by rpki-client