Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: 1SD1xZvh8Gsb+8iWtMe3tIysbod0c032DqOsuSTuifs=
Subject key identifier: A4:00:B2:07:D9:ED:91:AA:2D:0D:FE:AA:DA:51:01:05:E8:76:AA:5E
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 0196A1D29DA83F4F113ADA0F263FFD9699D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 0E76
Signing time: Mon 05 May 2025 19:00:56 +0000
Manifest this update: Mon 05 May 2025 19:00:56 +0000
Manifest next update: Tue 06 May 2025 19:00:56 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: 61+R9R/Jtxcrxjb2E24qjtzMgxJXT4LcV1GaIrTLZEg=)
2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:9d:a8:3f:4f:11:3a:da:0f:26:3f:fd:96:99:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: May 5 19:00:56 2025 GMT
Not After : May 6 19:00:56 2025 GMT
Subject: CN=a400b207d9ed91aa2d0dfeaada510105e876aa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:af:8b:19:4a:e5:5a:14:ef:d9:e8:26:c3:
0a:55:04:06:c0:3f:3f:19:b5:50:79:4b:e6:dd:6d:
be:e2:96:dc:6b:86:33:4e:e6:f9:e9:3a:62:28:b1:
d3:8d:67:bd:ad:90:ea:82:5a:cd:41:b3:f9:0a:d2:
97:a9:7e:b4:51:83:9f:c6:fd:84:20:be:8a:fc:a4:
ea:33:13:66:cd:d6:df:27:83:82:be:03:ac:23:6e:
e7:03:8e:62:7a:95:05:94:11:06:a1:52:73:3d:81:
6d:d2:51:bf:31:56:f1:62:f4:fe:87:4a:1d:05:ea:
a9:85:b7:52:bd:f0:00:89:9c:b4:bc:c2:d5:db:ad:
73:53:92:f0:cf:68:09:41:03:61:1b:2c:fd:c9:5b:
96:51:bc:cf:fd:34:08:5d:c6:f9:28:20:46:1e:cc:
55:f0:41:32:32:87:d6:66:ec:2e:03:7d:1c:f9:8b:
f6:04:64:c2:aa:f3:87:35:20:d7:ff:5a:fc:20:8c:
d6:50:05:13:0d:eb:dd:3b:a5:4a:11:d7:1f:6c:a1:
21:8d:b8:f6:04:0a:7d:fd:f6:e0:d4:eb:ad:fb:d2:
93:36:21:d4:46:93:40:7f:2f:3f:b7:b8:ec:54:d7:
d8:ec:fe:91:1c:e8:af:a8:9f:5f:3b:34:40:ce:3f:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:B2:07:D9:ED:91:AA:2D:0D:FE:AA:DA:51:01:05:E8:76:AA:5E
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:15:0b:5a:04:88:69:c4:81:f8:fe:39:20:fa:aa:36:0a:3e:
f3:3e:c6:2c:3c:f5:8d:10:e3:30:a4:c5:5e:d0:5b:71:e6:5d:
1a:fe:00:58:36:ea:44:eb:d3:44:b7:c7:b1:01:aa:22:d7:f4:
66:2d:52:4f:57:52:7a:a8:eb:91:8e:12:54:69:0c:54:ee:a1:
a6:10:87:9e:ce:b4:04:3d:c9:81:f9:56:c4:24:e8:4c:60:af:
10:96:15:27:57:d7:b8:0a:51:61:c3:52:5d:0b:56:55:1f:de:
4e:d9:a6:b9:c4:bc:e9:7b:08:90:c5:0e:26:ac:72:c0:61:51:
55:d8:49:e9:ac:7d:33:31:61:d4:c3:1c:b4:bf:f5:a3:42:cd:
db:a6:0d:09:1b:a9:b6:1f:31:02:69:59:72:d0:e4:50:0d:8e:
90:f1:b3:4f:f0:e4:3c:87:7a:ee:82:f9:b9:a7:b4:bc:41:74:
a8:18:d1:16:6a:e7:4c:72:89:34:ab:85:7b:b1:a3:46:79:c7:
0f:7f:46:67:9b:a2:01:a0:af:fe:46:dc:a6:aa:dd:fe:02:71:
fa:da:e4:31:16:a0:e7:d7:fd:6d:72:d1:6a:e5:2d:0a:cb:ab:
0b:c9:34:f0:2e:3d:c0:35:b2:81:b3:cd:e3:28:58:d0:ac:47:
d8:7b:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:20:20 2025 by rpki-client