Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: EW4Rdmo5uhQrYsdS+ogKSpGHZVM6lQYq9hSIuKi1aVQ=
Subject key identifier: FF:DD:50:56:BC:06:D1:05:53:64:98:C1:43:BC:8C:49:50:2A:13:1F
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 0196C5A86209029F22E52674F5AC579772D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 1544
Signing time: Mon 12 May 2025 18:01:08 +0000
Manifest this update: Mon 12 May 2025 18:01:08 +0000
Manifest next update: Tue 13 May 2025 18:01:08 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: zPxbshwwcMbz4eyfuMUqmr2XvEedIP3pAlQ0r0lLXkQ=)
2: 7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa (hash: 3q07zOwK9FpR/xxKetT0w53QAdYnEKsI1+bhtbTPVBE=)
3: XK3m5m9D-x9fvYelJ012WnW2Xog.roa (hash: uj4ER+AdCmGKRZXl0/zG8YdqqGFuaXIIxndencWXdmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:62:09:02:9f:22:e5:26:74:f5:ac:57:97:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: May 12 18:01:08 2025 GMT
Not After : May 13 18:01:08 2025 GMT
Subject: CN=ffdd5056bc06d105536498c143bc8c49502a131f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:10:5d:20:c0:28:b4:01:3d:b7:b9:35:df:
fe:a7:4c:a2:e7:c9:1d:5c:f6:52:fc:88:d8:3c:53:
d6:06:07:34:46:f9:e5:cc:c1:36:1c:98:47:70:34:
2b:d4:ca:ff:f0:fd:f3:81:0b:c9:b2:ce:6d:a2:23:
0f:21:04:ea:b5:20:c1:a3:69:1a:a0:77:8e:5e:fb:
b6:d1:ea:07:00:1c:6f:9a:09:66:5f:2c:0d:19:26:
18:b5:b5:98:ef:4a:fd:a4:69:f3:33:de:1b:32:3c:
6a:54:7d:a0:fc:f1:0f:6f:10:b4:8c:52:eb:62:b0:
78:6c:96:2f:4e:5e:ca:fd:05:c3:1b:2a:f9:8a:a3:
52:1c:d9:9b:d0:25:ec:75:36:5c:c8:92:fd:22:d8:
39:ca:3b:10:8e:6c:e0:d9:be:05:ea:cc:aa:b6:18:
13:2f:af:8d:2c:70:64:ca:bb:39:40:5a:5d:20:72:
0f:83:fa:d3:a3:9a:eb:30:be:d3:16:2e:d7:15:b1:
9b:88:89:0b:8b:e7:17:ee:1a:bb:ec:d4:48:8a:c1:
de:f6:85:ca:5e:5d:10:8e:97:d2:a6:fd:e7:45:13:
83:42:50:7e:cc:4e:6c:e9:7e:d5:af:d1:19:e1:62:
b3:44:74:5c:97:f5:af:a8:07:53:a7:bf:61:a7:9c:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:50:56:BC:06:D1:05:53:64:98:C1:43:BC:8C:49:50:2A:13:1F
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:34:6f:c2:46:93:30:4c:4a:75:75:89:7c:1b:ca:8c:33:68:
0d:14:5f:67:45:57:15:8c:9f:df:98:74:98:08:f6:41:e7:aa:
49:3e:c2:c6:f3:51:08:44:f5:60:06:41:b8:bf:93:9c:3d:e0:
62:a4:30:f5:65:c7:fc:93:60:c0:5d:ea:49:62:e2:57:d6:b9:
dd:ef:9c:6f:1e:08:aa:06:09:43:18:57:12:4b:b9:97:47:b4:
06:b3:1e:ff:ea:ae:70:b6:37:d1:0f:80:e4:8c:03:b0:79:71:
6e:58:29:bc:4b:21:c6:db:cd:bf:a1:14:e2:ba:43:49:6d:39:
df:4a:00:ad:25:a3:b5:04:b6:9f:c6:c9:c5:1b:a4:c4:89:60:
13:6f:65:88:b4:2c:45:6a:d8:fd:e1:c1:f7:64:cc:9f:f7:0f:
24:48:4c:82:dc:00:18:ae:f1:8f:b7:34:f1:27:07:42:13:b9:
27:a5:8a:5b:de:8e:1a:21:cc:fe:23:1c:ed:0a:07:d4:bd:de:
a2:21:12:83:a1:98:e5:b7:c0:ca:f5:83:16:41:c4:02:ad:5a:
68:a3:3e:d9:f0:a3:8b:2d:3d:bb:b6:3f:c2:08:bc:bd:b2:87:
b9:d1:8c:e9:7b:27:9f:3e:b4:65:f9:fd:dc:54:7f:03:73:88:
0b:f0:d9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:15:59 2025 by rpki-client