Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: zJXMZUPn4w3eJzRy0Ktl/fl1/0Cj26svcGBIP+JikT0=
Subject key identifier: 95:E7:62:2C:FE:2A:6E:69:A2:AD:85:7C:00:23:20:5D:B3:81:2B:7B
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 0196BD128661D13B0CE745F3EFAD2B453B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 14D6
Signing time: Sun 11 May 2025 02:00:29 +0000
Manifest this update: Sun 11 May 2025 02:00:29 +0000
Manifest next update: Mon 12 May 2025 02:00:29 +0000
Files and hashes: 1: Vm2xySa3TZzRcufAzxt4hRBLNss.roa (hash: O5+b4nw4CSapOt9ANvlpqmvnfoL7HE4era1klJG6PPo=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: ti2ji7rN1L9CWGFe9RSF/c6oKhHvmX0jVI0OSnuK1Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:86:61:d1:3b:0c:e7:45:f3:ef:ad:2b:45:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: May 11 02:00:29 2025 GMT
Not After : May 12 02:00:29 2025 GMT
Subject: CN=95e7622cfe2a6e69a2ad857c0023205db3812b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:20:b0:5f:42:0a:86:76:07:e7:1d:ee:ba:
32:de:ff:1f:ec:2a:8b:87:31:84:4b:c0:ce:74:7a:
eb:96:1c:16:4a:0e:92:14:20:0d:ef:a1:a3:16:71:
5f:e6:c4:e0:23:5f:9a:54:14:09:94:7f:6c:2a:4b:
db:08:15:fc:d4:7b:e5:f0:8b:4b:4b:22:53:20:9d:
df:43:a2:2a:7e:75:14:c9:ed:78:99:da:52:75:03:
0b:c3:32:9e:75:12:0d:b4:33:d8:26:ab:8c:90:0d:
db:49:32:86:23:04:42:f3:2e:a0:54:f0:6b:b6:e9:
90:80:13:29:4b:42:0e:fb:7b:3d:47:f4:b7:e9:8b:
2e:96:87:49:2d:2a:50:fd:ac:23:7b:70:46:33:50:
db:ea:a7:11:3f:2a:96:7f:21:04:90:38:73:61:44:
fd:bd:8d:9b:f4:80:c3:ac:c4:83:59:90:68:ff:06:
89:85:0c:0d:81:17:2d:00:65:21:4b:8d:80:7a:b3:
86:3d:48:3e:4c:a1:2a:f6:4b:2e:0b:b8:29:f1:c4:
d4:cf:94:7b:0d:21:bf:25:c1:8e:6e:f8:4b:e0:53:
70:60:6d:b9:f6:6a:31:e0:ae:82:d9:f6:80:58:29:
2c:43:b8:f6:02:f6:be:81:93:b3:2f:d1:ce:9a:1e:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:62:2C:FE:2A:6E:69:A2:AD:85:7C:00:23:20:5D:B3:81:2B:7B
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:36:c4:5b:cd:a6:b9:d2:99:ef:82:80:d5:b6:6c:54:04:91:
3c:67:af:ed:c6:d6:e7:cc:38:1f:49:3c:17:85:92:c5:b4:b2:
5f:fa:36:a8:3d:81:4f:a7:74:76:d6:c0:31:15:d7:33:13:32:
6c:48:04:cf:36:48:be:bb:7d:75:b5:22:f8:9d:f9:a1:9b:20:
2b:2a:f0:fc:56:cd:fd:be:20:cb:47:26:85:75:59:c9:81:db:
2c:be:8e:1a:23:d2:40:84:37:47:fe:8a:f8:82:38:b2:61:41:
e2:10:7a:bb:5a:ad:b2:1e:8f:88:76:11:d0:51:81:5b:e9:91:
0e:79:02:41:95:c2:1c:07:72:91:8a:86:70:00:46:b2:2c:a7:
95:33:aa:b2:8d:ef:fe:41:48:25:c0:01:93:52:13:03:a0:d4:
2d:db:c0:f3:3d:56:61:3b:a8:6e:3d:81:32:31:c4:70:9f:27:
d2:3c:3e:5f:59:70:56:c1:75:46:05:b9:c3:82:50:71:a4:0b:
77:a4:03:0e:b4:e6:d1:7d:8f:38:0c:bd:db:44:50:b5:1c:19:
df:80:e1:38:14:3d:a4:2c:d0:e9:66:5d:77:67:26:fb:c7:16:
74:5c:22:29:07:ae:cd:bd:57:78:07:44:84:2d:4b:cf:ce:ff:
5f:af:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:35:25 2025 by rpki-client