Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: 04v8PSWL1y9ZCxKYBvza/RKDHubKbjy5v6KJ6zCc4Rw=
Subject key identifier: 23:0A:95:CF:F1:4C:75:C7:3F:69:97:59:54:CA:C1:FE:7C:83:A0:AA
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 0196CFBD5FBA4241613C8BE34D85712BA7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 03AB
Signing time: Wed 14 May 2025 17:00:16 +0000
Manifest this update: Wed 14 May 2025 17:00:16 +0000
Manifest next update: Thu 15 May 2025 17:00:16 +0000
Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: k5AzueUnEQkWy2qPMFvGZxOPnGsOu0TDp1c7VuA/SMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:5f:ba:42:41:61:3c:8b:e3:4d:85:71:2b:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: May 14 17:00:16 2025 GMT
Not After : May 15 17:00:16 2025 GMT
Subject: CN=230a95cff14c75c73f69975954cac1fe7c83a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:15:a5:f2:f3:7c:7b:57:aa:35:ac:a7:92:
79:2b:f9:91:dc:e2:eb:12:a9:a0:a3:55:56:41:4d:
8d:1d:22:c3:48:24:01:43:50:7b:7b:e0:25:12:ed:
b0:28:4f:57:fe:63:93:47:95:26:86:97:d1:42:f2:
15:9c:78:ca:f9:d8:4d:75:bb:45:54:ec:c4:19:e2:
63:1d:b3:36:99:2e:eb:13:81:ad:8b:54:52:b6:fa:
9b:fa:1d:16:12:fa:34:e3:d0:d2:b3:4a:fc:bd:b9:
e3:87:97:ac:0e:95:ea:43:7b:b3:5e:3b:58:74:6c:
dc:32:f6:e4:c4:45:a4:4a:e1:71:49:47:f8:ed:a2:
26:36:2f:a0:a2:5d:36:e6:bf:48:5a:c4:a9:68:ca:
5c:dd:68:40:65:bf:92:52:0e:9c:8e:a2:59:4d:b9:
52:aa:69:96:c2:7c:0d:2d:48:1c:f6:1e:cb:b1:3c:
d7:40:c4:50:c5:f0:6d:cf:93:30:28:05:b8:16:e3:
0a:d1:fa:90:20:11:eb:5c:a7:27:fe:58:f8:d9:d5:
73:c9:a0:1a:de:9a:e2:98:86:38:b3:d2:b3:48:d5:
a2:f7:1c:89:32:17:2e:9b:f2:6f:64:99:7d:ff:4a:
79:90:c5:22:b2:19:2a:52:a6:c2:a9:4d:72:85:aa:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:95:CF:F1:4C:75:C7:3F:69:97:59:54:CA:C1:FE:7C:83:A0:AA
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:4c:1d:a9:4e:b2:0c:dd:81:37:e3:b9:c1:02:ce:5b:0f:
2e:e5:d2:30:b9:6a:b1:08:93:a4:77:62:a5:dd:d7:52:a6:f4:
e2:48:39:35:45:74:45:31:5f:4a:69:92:d4:e7:43:a5:2d:53:
20:5a:f5:60:2a:05:c8:f8:20:0b:9d:bf:50:c7:50:c7:72:80:
fa:8b:b8:ed:a3:cd:4c:18:39:a1:ac:c4:1e:15:45:ea:0b:93:
52:b3:94:b6:e0:c9:10:ed:df:40:07:23:95:d0:58:f6:7f:87:
21:28:69:93:c1:d9:8f:c1:44:c2:1d:b7:f1:0d:a2:c6:67:ff:
99:ab:78:bc:8d:5e:1b:ae:b9:1f:18:16:ab:64:80:09:87:e4:
98:f4:75:c3:4a:07:d9:75:cc:ca:b9:45:10:67:45:07:e9:9d:
59:eb:fb:7a:b9:cc:f1:17:51:96:92:8e:b1:2f:02:60:6f:33:
e2:43:ad:2b:a0:5c:a9:a6:81:7d:36:8c:d7:64:f2:2b:22:f6:
93:be:23:b6:61:a0:7b:1c:a5:aa:e4:cc:27:02:db:2b:12:85:
72:2f:71:3d:96:d4:42:79:26:55:5d:bf:26:c0:9b:91:af:b7:
09:c3:6f:e8:5a:b8:57:c0:40:4e:00:97:2e:7e:1e:cf:5d:a6:
58:a8:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:05:29 2025 by rpki-client