Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: +CYPsGV7+fOA1UjGWY/EhlujwlD5ncQZUNL2jg3c9YU=
Subject key identifier: 56:96:6F:B5:93:50:65:6C:D3:6F:52:BD:A2:11:77:A5:0F:D5:49:F6
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 0196B3A1D4EC6C1CFB0452FF4A56E0BC2527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 0383
Signing time: Fri 09 May 2025 06:00:49 +0000
Manifest this update: Fri 09 May 2025 06:00:49 +0000
Manifest next update: Sat 10 May 2025 06:00:49 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: sex+mH3xSNTMBEgoOFBVrKoigWj82Ie/w+S3Y5Boo2s=)
2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:d4:ec:6c:1c:fb:04:52:ff:4a:56:e0:bc:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: May 9 06:00:49 2025 GMT
Not After : May 10 06:00:49 2025 GMT
Subject: CN=56966fb59350656cd36f52bda21177a50fd549f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:51:d2:b3:18:cd:7a:7a:68:c1:19:20:83:
ff:82:6f:c7:19:63:42:d0:53:b8:5e:4e:95:c6:90:
fe:28:b1:d7:5e:33:72:d2:5f:9a:68:37:ca:ff:5b:
3f:89:ba:2e:a1:ba:75:12:ac:61:d7:23:1b:67:d8:
90:34:d4:f3:f3:f8:a0:9e:df:ce:d4:a8:e4:6d:a8:
d8:50:81:7b:67:aa:32:53:2a:e4:c3:8a:29:b0:1f:
e6:eb:0b:d6:3c:76:87:30:de:07:59:4f:d5:0a:3c:
02:34:d5:b6:79:9a:7d:bf:26:af:97:67:c9:85:fc:
65:6e:3d:17:f4:b3:47:42:40:84:ae:28:c4:13:03:
aa:fd:9a:b6:0c:75:82:e7:01:ff:fc:0b:62:94:e2:
1d:df:93:40:4a:21:2f:f6:06:6b:f1:bc:7d:84:b5:
c5:d5:b8:ac:68:cb:9a:de:12:7d:0a:3c:d8:e9:2a:
1d:80:d4:86:75:56:a1:a1:01:01:30:f2:91:5f:7c:
ce:31:95:91:ab:71:17:0d:eb:64:73:35:1c:5a:bf:
22:9d:f9:6b:73:3e:a6:dd:87:03:fe:ad:e1:e5:71:
c7:c2:21:95:3b:5d:e0:6c:79:03:a8:4d:e7:e6:55:
8c:34:71:d7:ca:7f:33:b3:87:e0:9c:d5:e7:a7:97:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:96:6F:B5:93:50:65:6C:D3:6F:52:BD:A2:11:77:A5:0F:D5:49:F6
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b6:82:de:2b:89:52:b0:f8:48:37:ed:c5:f4:fb:df:d4:cc:
7b:2b:d3:a5:ff:7c:8f:bb:79:3d:45:50:b5:8b:7d:d2:4e:a4:
cb:09:6d:29:96:f1:35:fa:f6:0c:de:0b:07:0e:c2:c2:a0:21:
2a:19:0d:ab:dc:62:02:74:7d:84:4e:68:d5:29:88:94:24:f2:
3b:8e:c9:4b:30:8c:df:ea:06:b6:2a:c2:1e:2d:ce:43:5d:8f:
38:9a:6e:b3:99:ac:9c:24:e3:c0:de:ab:2b:14:28:fd:46:84:
8a:ab:ad:98:03:32:60:69:41:9d:7f:57:c1:94:22:43:58:10:
23:10:14:9d:86:89:2e:c9:bf:4b:ee:79:a2:17:92:26:fd:aa:
56:36:f8:87:b6:92:85:04:63:33:18:06:cd:12:b5:f2:c2:49:
57:8d:c5:c6:86:fe:2f:70:b8:4a:f9:b2:81:e5:41:f2:d6:ad:
b7:a9:c3:0e:7a:25:b1:ae:97:d4:92:9b:0a:fe:18:c0:47:61:
9b:9c:d9:cd:1d:64:85:ee:a1:43:99:f0:ab:6c:49:75:dd:8e:
b9:52:a1:23:53:e7:78:be:c4:99:5c:31:aa:2c:76:87:d3:fb:
48:73:6e:c8:c5:5e:dd:38:e1:4e:b8:87:ec:1e:db:78:32:f0:
f7:a5:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:18:41 2025 by rpki-client