Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: Xbwox30oOHIEENJus4ny9YSFGvXWQap3/nqDXUh27OY=
Subject key identifier: 0D:33:A6:E2:4A:23:E6:58:73:A3:E3:DF:2C:6A:2B:D6:A6:46:BB:C8
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 0196A12DA8A3DB8F41AC634DE53AF699F4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 16:00:45 +0000
Manifest this update: Mon 05 May 2025 16:00:45 +0000
Manifest next update: Tue 06 May 2025 16:00:45 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: IQuTv8Y83JestZf82jR16PymttchhnVf9FcpSZ20WTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:a8:a3:db:8f:41:ac:63:4d:e5:3a:f6:99:f4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: May 5 16:00:45 2025 GMT
Not After : May 6 16:00:45 2025 GMT
Subject: CN=0d33a6e24a23e65873a3e3df2c6a2bd6a646bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:bf:84:ef:4f:2a:9d:ce:56:fc:db:6a:e9:
ff:68:0b:99:53:2c:26:95:11:a5:15:3c:59:4a:d9:
e4:2b:b5:5a:a8:8a:f7:d5:5f:38:90:3d:78:ed:1a:
cb:3d:38:55:b9:13:8f:2d:16:f6:bb:db:62:5d:44:
27:34:a8:53:17:36:47:59:55:40:c6:3b:38:eb:c9:
50:f5:c8:5e:02:c4:d0:a0:1f:ed:e5:73:97:a5:75:
07:24:9c:b3:73:ab:25:59:ea:4b:2f:fe:12:d4:87:
a2:c9:04:f8:4e:92:11:47:0b:a7:bc:43:8e:58:aa:
b5:e2:5c:9c:2a:2d:0f:ef:f9:0b:5a:bc:ef:2a:a4:
8b:ec:3d:f7:52:88:a4:4a:ce:31:01:a1:20:b9:44:
b8:6e:58:d4:91:41:60:da:93:37:e1:a7:bb:f5:dd:
8d:38:ef:b5:07:2e:4b:7c:2a:e4:5b:d4:e8:e6:1e:
04:a7:4d:a7:75:fa:f2:19:8c:25:f0:83:45:a6:89:
93:4f:94:a1:15:fc:b5:30:68:a4:07:94:33:55:6b:
a9:03:1d:6f:8a:a3:fb:27:f2:83:37:fb:c1:84:40:
54:40:5e:a9:64:64:9c:dd:e3:07:e2:89:e8:b3:87:
55:db:7f:01:48:0a:b9:19:0d:17:c6:3d:02:dc:02:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:33:A6:E2:4A:23:E6:58:73:A3:E3:DF:2C:6A:2B:D6:A6:46:BB:C8
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:7e:c5:63:5f:b6:1b:90:36:10:47:72:34:5d:30:2b:1e:
e3:a0:8e:76:cb:70:56:e9:f5:bf:9e:ef:15:e5:ad:e7:58:09:
f9:0a:65:57:d5:80:a5:14:4b:84:4f:21:74:83:6d:d6:5c:e6:
95:8f:4d:4c:05:f2:4d:cd:cb:b5:7e:7c:d3:5a:40:40:12:60:
1e:31:d5:ec:ca:0d:2a:78:44:b2:4f:c1:4c:97:8c:eb:8a:de:
40:8f:fd:cd:ad:9a:30:70:7f:81:9b:10:ae:7c:00:31:7e:06:
5b:e5:2c:e5:37:3e:c4:91:17:24:1e:c0:70:24:fb:87:c7:09:
8d:e2:d7:cf:b8:b9:1d:37:99:c1:19:f6:82:5a:ab:b8:76:13:
57:20:e1:49:94:29:f4:79:57:ed:83:a4:f6:64:57:b2:33:87:
6d:f3:5d:13:2c:b0:2a:ca:3e:63:54:9b:95:67:ed:22:db:65:
d3:1e:fb:0d:d6:66:3d:a1:d0:6c:17:c3:e6:b6:d0:46:d4:c5:
82:f1:92:48:ba:7a:59:df:47:65:9d:ac:0a:7a:31:74:b2:71:
16:aa:e0:e0:27:53:3b:fb:c0:4e:ee:ab:bf:db:80:b4:63:5f:
b2:e3:14:f0:79:b8:07:b7:a0:a1:3c:78:a2:55:d1:19:a2:18:
ee:53:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:28:22 2025 by rpki-client