Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: j8jcP9DfEwGG83K3a18/lEj8Yxf/snndUiySPn3x1fg=
Subject key identifier: 83:7A:4C:E1:B6:FE:71:F4:C2:AF:4D:76:6A:DC:BE:32:6E:58:4C:5B
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 0196BAB66C946C988B27277B5A4C2747CB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0D51
Signing time: Sat 10 May 2025 15:00:39 +0000
Manifest this update: Sat 10 May 2025 15:00:39 +0000
Manifest next update: Sun 11 May 2025 15:00:39 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: m7UVMNcbKxmi1RokUvc0tvi+FKNXwear4IKyNecflao=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:6c:94:6c:98:8b:27:27:7b:5a:4c:27:47:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: May 10 15:00:39 2025 GMT
Not After : May 11 15:00:39 2025 GMT
Subject: CN=837a4ce1b6fe71f4c2af4d766adcbe326e584c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:22:22:9b:ae:bf:16:cf:df:65:bf:09:0e:
b1:ed:32:85:aa:a6:d7:55:e5:88:b9:56:3c:8f:85:
1f:6f:e2:71:49:3c:16:d6:72:89:68:43:84:5b:53:
eb:87:95:c1:d3:94:89:cf:c6:71:41:48:0e:bc:42:
59:f8:21:b7:a8:91:3d:ec:21:58:ea:20:57:93:a3:
8c:35:71:76:a8:31:15:89:e0:5a:9e:6c:c6:33:79:
09:27:17:73:8c:96:f3:b3:c8:3c:b1:91:20:60:1f:
90:ba:4f:9a:3b:81:b9:f6:7b:9c:bf:de:eb:df:4a:
79:37:18:6c:49:f2:cd:11:7c:55:b1:00:bb:53:d9:
aa:82:f2:14:38:00:30:90:82:8d:c0:d8:33:b0:ac:
b4:58:01:c4:c7:f3:d2:e5:53:42:d6:3e:45:5a:31:
6e:3a:93:df:50:4e:42:c1:40:38:ff:00:fe:36:14:
87:28:c5:0c:92:d0:1c:95:d7:7b:86:04:97:47:bd:
f1:18:64:fc:16:89:7c:54:36:8d:de:88:3a:7f:ad:
54:2a:85:27:13:56:0b:4e:55:af:a8:de:9a:6c:e3:
a4:d1:08:d3:ee:af:e5:30:49:e1:fe:cf:f6:71:95:
53:33:ea:e8:92:2c:ff:14:aa:c4:37:6f:b1:47:b7:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:4C:E1:B6:FE:71:F4:C2:AF:4D:76:6A:DC:BE:32:6E:58:4C:5B
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e6:04:15:7b:0f:28:d2:99:18:28:2a:e8:90:5a:1f:4c:f0:
a2:7c:4a:4a:9b:a0:4d:6e:18:c4:c7:28:30:f4:b5:73:30:88:
b9:1d:3f:e6:d0:85:ce:27:3e:27:6e:95:ae:67:c6:17:7a:30:
54:16:f7:da:dd:7e:23:f1:be:67:e0:a9:c0:da:2c:0a:f5:90:
7f:8f:91:1d:32:a2:c3:9f:d7:52:9f:79:97:60:33:89:38:c9:
dc:c4:04:33:a5:7a:c0:0b:c2:03:72:b7:ad:e6:52:bc:bc:16:
0e:e1:b1:60:d3:d6:b3:76:12:12:fe:31:ce:51:5e:94:5d:04:
5e:e2:6e:5a:18:de:02:e3:cd:64:a2:b5:f1:af:3c:2e:af:25:
0b:f3:59:21:6e:78:75:03:13:70:d8:c2:3c:1b:53:3d:2d:a2:
2c:23:ca:59:89:ff:8c:8d:0e:b7:2a:76:7c:ef:a8:36:8d:46:
d3:4d:93:d8:e9:9e:24:a7:b3:35:2a:09:9e:e7:c8:d8:03:2f:
27:36:f8:c8:fd:29:27:ee:65:f7:05:55:90:f6:3a:96:fc:27:
4d:aa:7b:8d:55:d4:48:51:91:1f:a7:2f:9a:90:6d:0a:51:43:
86:9a:cd:f4:63:8d:ee:9c:2b:1c:e2:d0:17:98:1d:0c:81:b5:
e2:29:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:03:37 2025 by rpki-client