Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: 9Ae1GEPmeQ+gx2gIQobrID/6XfEmttEeT30RPk+JH/s=
Subject key identifier: 5F:DB:0F:84:AD:5E:AF:77:B0:85:79:0F:C6:B9:57:96:35:73:E0:9C
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0196B8C7BDCF468CF16132286C2372A0B7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0ED1
Signing time: Sat 10 May 2025 06:00:19 +0000
Manifest this update: Sat 10 May 2025 06:00:19 +0000
Manifest next update: Sun 11 May 2025 06:00:19 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: ZuDKsTWaztzOIGu9e7+OZAimrkOC8wpRo7f2/3zKToE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:bd:cf:46:8c:f1:61:32:28:6c:23:72:a0:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: May 10 06:00:19 2025 GMT
Not After : May 11 06:00:19 2025 GMT
Subject: CN=5fdb0f84ad5eaf77b085790fc6b957963573e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:c4:b3:1c:da:6b:81:6f:28:57:0e:2f:b5:
87:70:78:9e:23:20:1c:46:6c:92:37:a1:70:b8:0f:
bd:a3:a6:79:de:a9:ce:52:da:d9:87:73:ff:12:97:
96:37:eb:34:a1:da:f7:3e:85:6f:65:22:8d:e1:63:
8a:57:bf:ee:8c:d5:e9:1e:04:98:21:e0:56:19:47:
6e:c0:54:6a:9a:7b:73:66:46:de:5d:08:e3:e9:ea:
06:c4:ec:98:b2:01:b5:48:e7:17:a9:58:2d:fc:83:
a2:10:00:b7:06:a3:f0:ca:42:16:b4:32:0c:3a:c3:
82:92:85:69:a3:b6:a8:d5:1f:2c:cc:42:94:10:65:
81:21:fc:c3:b4:c3:2f:07:ab:22:3a:10:64:3d:77:
93:92:49:62:ad:22:9b:8f:3f:d7:f9:96:0e:6f:7b:
41:d8:ce:3f:da:8c:d7:49:d4:58:c4:3b:a7:05:df:
0a:3d:a7:e1:a0:f5:2e:23:ee:61:a5:90:b1:a0:91:
30:a2:2e:e7:b7:53:b6:cd:19:b6:7c:e0:31:69:13:
46:87:6c:a0:a9:79:54:5d:bf:12:32:74:45:a8:f7:
31:01:95:f0:f1:f7:03:a4:5c:87:ce:f6:95:e7:7d:
e1:f4:aa:37:02:29:22:ab:15:bf:e4:cd:47:dc:bf:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:0F:84:AD:5E:AF:77:B0:85:79:0F:C6:B9:57:96:35:73:E0:9C
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:99:d4:5f:46:15:7c:b4:f1:9a:0e:52:ca:92:db:fe:5a:52:
0f:72:06:24:7f:4f:8e:05:41:f8:b3:df:3e:0f:f3:d8:19:6b:
6c:4a:37:fc:c2:20:0e:4c:c3:28:46:c6:39:1a:d6:63:5d:fb:
50:93:37:85:1b:a1:ba:bc:7c:60:58:9a:b3:6f:81:ff:49:77:
d7:dd:6d:64:94:f3:ac:88:b3:17:82:da:28:3b:ea:56:31:6c:
6e:3d:af:59:53:27:8e:66:28:b4:27:66:67:34:13:7c:74:a8:
3c:38:57:19:b4:ab:85:30:fe:4c:0f:1d:89:72:03:d1:4a:6f:
90:a0:97:bc:41:de:ce:13:b5:44:f0:8f:db:73:7f:7c:f9:c9:
d3:85:a2:68:a6:9a:89:91:fc:1a:88:ef:0e:ce:34:fb:48:3d:
af:eb:7e:ab:99:f5:ca:38:bf:c8:51:b5:76:62:3c:f0:37:f5:
a5:32:ac:9b:49:c0:40:4a:11:d9:4c:68:10:d1:81:60:46:89:
4e:a8:93:8f:0e:ba:85:c1:7b:e3:b2:28:32:8a:cf:c2:7d:ff:
cf:f0:a0:c0:b4:e9:70:b0:d2:da:b0:78:e6:b4:1a:97:52:14:
65:69:5b:fe:b4:8c:88:77:6f:ac:4f:5e:f2:73:e8:18:95:27:
42:50:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:23:07 2025 by rpki-client