Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: f0s4xCw6tVpLU/tF408J04y9QRFpHxAC8rs1/frQ/pg=
Subject key identifier: F0:FC:65:B5:D8:94:B9:F9:40:60:64:BD:D8:06:AD:CF:4C:06:C5:19
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0196BECA06C1D4441088BCB1382D247D7157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0DA2
Signing time: Sun 11 May 2025 10:00:33 +0000
Manifest this update: Sun 11 May 2025 10:00:33 +0000
Manifest next update: Mon 12 May 2025 10:00:33 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: 17tqpiNa3vwbBQZ0I+XISRSe6OGmGNWwNi7elIePOSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:06:c1:d4:44:10:88:bc:b1:38:2d:24:7d:71:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: May 11 10:00:33 2025 GMT
Not After : May 12 10:00:33 2025 GMT
Subject: CN=f0fc65b5d894b9f9406064bdd806adcf4c06c519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:90:77:96:d8:ff:5e:64:2b:1e:08:41:ce:
6b:8f:75:3a:b1:dd:e1:1d:24:7f:2b:9a:d4:e5:a8:
a6:22:33:b2:91:88:18:97:17:e6:13:46:a5:c9:60:
be:b4:8a:f2:1a:4e:9e:d8:d1:09:79:c4:05:3e:d8:
c4:ed:c1:20:42:27:8d:9c:64:73:41:4b:c9:b6:81:
ba:86:d2:f0:10:74:21:69:0c:7c:ea:ae:cb:b2:81:
cc:77:53:7b:6f:96:03:5d:db:e9:ba:4c:8a:51:f3:
ac:b1:ce:b9:2e:05:f4:6c:dd:39:91:ae:0f:5e:a6:
96:84:7b:05:34:f9:3d:ae:3d:ac:55:be:28:93:9f:
48:3b:d0:1a:89:d2:3c:f9:0d:da:54:cd:5c:ea:aa:
94:c7:2e:74:c2:72:c4:74:04:e1:30:08:ef:5c:ff:
41:b3:d2:b1:57:5f:6a:1f:89:f6:d0:96:3f:4f:50:
e3:22:ee:4b:eb:3d:31:bd:f0:f5:b2:21:87:7f:0d:
12:0c:57:5a:63:e7:28:cc:17:fc:a2:ed:c7:61:98:
21:cc:fc:c1:f5:bf:1a:6a:94:dc:87:e0:7e:b3:49:
23:ff:b0:b6:78:d9:8e:38:ac:72:8f:e3:18:46:40:
f6:96:f2:75:fd:fb:fb:db:14:db:ad:b0:b4:05:80:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:65:B5:D8:94:B9:F9:40:60:64:BD:D8:06:AD:CF:4C:06:C5:19
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:14:38:3b:a0:4d:e0:6b:8b:c0:a0:65:35:2e:b4:36:93:02:
ea:3a:a1:58:85:3a:1a:b8:32:ee:6d:14:85:3c:47:2e:f5:7d:
6e:85:a5:4a:c5:b3:ab:6b:86:8b:79:c4:38:c0:fe:06:20:52:
6c:2e:e5:d0:8f:84:02:11:e2:e6:08:fd:ec:3a:a9:71:a9:15:
b6:56:0d:69:1b:eb:98:a6:04:73:1b:27:41:33:4b:9f:9a:9a:
69:93:5d:ea:ed:a3:dd:de:93:14:61:fd:fe:dd:9a:0a:28:0d:
42:35:3b:9e:82:ae:d0:a7:5a:47:14:5c:2c:4d:36:f5:96:18:
b1:aa:97:23:9e:5d:d8:94:97:29:60:a7:70:73:84:e4:3c:ff:
57:3e:39:47:d4:7f:98:67:ae:41:23:97:b9:5c:b7:d2:12:87:
76:64:5c:39:e5:c9:0a:02:13:03:c8:fb:34:c2:17:67:2e:08:
61:c0:b4:27:ab:8f:06:cb:f1:f3:8f:5d:7f:97:62:53:f7:d7:
9a:e6:22:c5:61:dd:a2:42:bb:37:91:9c:17:a9:bf:8e:9d:6d:
9c:bf:bb:df:e3:7f:04:b8:80:5f:e1:bb:25:ce:af:3e:7a:9f:
5a:65:5d:6b:ea:52:89:cd:cb:b3:1a:2c:b1:41:f7:cf:b6:5d:
c5:36:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:05:51 2025 by rpki-client