
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier: 7fAzZhNkEKsWYiQjJ6/8eGj21cy/g8TVM0KT89fgEM0=
Subject key identifier: B8:54:93:6E:2B:9A:6C:93:68:3B:DB:42:28:67:DC:E5:11:E3:79:90
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 0196C427817331B5EDC8FE20D447D3435119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number: 052D
Signing time: Mon 12 May 2025 11:00:45 +0000
Manifest this update: Mon 12 May 2025 11:00:45 +0000
Manifest next update: Tue 13 May 2025 11:00:45 +0000
Files and hashes: 1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: iKk+6vMIv2mVtWfDpuThxw2SDAyyd2bG48mUbOe0IW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:81:73:31:b5:ed:c8:fe:20:d4:47:d3:43:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: May 12 11:00:45 2025 GMT
Not After : May 13 11:00:45 2025 GMT
Subject: CN=b854936e2b9a6c93683bdb422867dce511e37990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:32:86:91:76:29:72:f4:17:67:4a:3b:5c:
2d:6e:70:ed:b7:aa:ed:47:78:70:23:06:6b:ff:85:
cb:fd:9b:4f:06:6a:3a:79:87:21:d7:2e:3a:eb:de:
2b:4a:5f:f6:4e:94:0f:ef:52:c3:34:bf:d0:6d:33:
bb:c6:e6:7b:0e:61:fe:9b:71:66:72:dc:4c:51:4f:
02:19:0f:06:d5:8e:0b:87:05:2b:45:10:f8:5c:19:
62:a6:8b:6b:a1:ef:7a:14:e7:8d:bc:43:36:92:52:
68:45:e3:f3:85:f7:5d:91:eb:f6:06:be:c3:b0:cc:
79:38:a2:80:a3:c5:c1:97:cb:ab:f1:9e:b7:0d:33:
94:23:f5:6a:13:2e:75:54:89:a2:9c:60:d3:d9:a6:
26:f6:28:7b:c4:50:ea:0a:5e:26:a1:48:b7:f2:48:
b7:71:78:2d:52:fe:a1:f5:47:af:61:14:dd:d0:f7:
23:fc:bf:44:d1:56:32:d6:8a:d6:5c:5d:a1:6e:96:
12:6e:49:94:d4:84:13:4c:de:51:dd:d0:03:df:f2:
96:b7:80:c9:34:ab:ab:35:c2:e0:47:58:a7:06:83:
af:79:5d:f0:8f:57:c3:43:49:60:be:ea:95:71:c5:
85:0b:bb:77:2b:90:f3:60:1e:2d:15:94:f1:67:ae:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:93:6E:2B:9A:6C:93:68:3B:DB:42:28:67:DC:E5:11:E3:79:90
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0c:78:0b:cf:d4:df:f0:2c:e2:13:f2:39:ff:c9:ec:c6:ef:
ab:99:4c:7e:14:0e:6a:3f:1d:36:fc:31:71:4a:e0:38:15:9e:
58:47:67:01:50:7c:7e:71:88:3d:02:3c:6e:6c:3a:b1:e0:2a:
60:03:79:44:34:8f:04:1a:ef:83:fb:4f:9e:83:ad:bb:33:ad:
f7:00:ee:80:da:4a:bf:0a:a4:f8:a4:76:f3:e3:90:50:22:a1:
af:25:7f:32:7c:6e:bb:57:94:bd:51:4e:ca:03:89:c4:3b:23:
14:19:a1:47:e6:1d:4e:9b:81:0f:ec:2f:f5:04:f2:1e:16:0d:
f9:b5:91:2d:8b:40:20:9f:b2:55:a7:8e:7d:65:f9:68:a1:ca:
16:20:2b:6e:e3:a0:7b:74:d3:32:c9:b3:12:f3:65:44:90:ee:
58:b6:4a:8c:30:ce:bd:53:1b:50:63:12:62:88:f4:1c:30:73:
b9:eb:31:f4:8b:42:62:05:47:b7:25:b1:11:fc:e7:da:d1:1c:
db:b6:64:09:6f:eb:d5:9e:64:6f:f5:11:ba:d4:0d:d3:5d:75:
0d:a9:e2:4f:82:99:26:41:b6:18:da:a9:a6:de:7f:20:bc:5e:
eb:68:7a:1a:2c:76:f4:f4:0e:bc:c7:d8:4e:5d:ce:85:6c:4c:
4c:c1:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:16:25 2025 by rpki-client