Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: rHGAhfNgn4pTz9YFNgUq5UkjMhXmOlqgqt+sAl+Kf/E=
Subject key identifier: 95:E1:81:FC:C3:94:88:72:1E:6E:EE:5E:53:E1:7F:CA:A6:66:4C:44
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 0196BA7F6524BED4D4E26F5B7861E7C98EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0CC1
Signing time: Sat 10 May 2025 14:00:33 +0000
Manifest this update: Sat 10 May 2025 14:00:33 +0000
Manifest next update: Sun 11 May 2025 14:00:33 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: +4QIU2g40ufV0+8J8jc5EzSUyjLjBm8KDOvtpHCDZX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:65:24:be:d4:d4:e2:6f:5b:78:61:e7:c9:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: May 10 14:00:33 2025 GMT
Not After : May 11 14:00:33 2025 GMT
Subject: CN=95e181fcc39488721e6eee5e53e17fcaa6664c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:12:6a:26:52:32:80:33:d1:67:74:39:6c:
d6:c9:1e:c4:e6:d8:af:36:74:fa:27:ae:67:74:0f:
6e:75:92:ac:e8:6f:d4:b6:31:54:34:d0:8b:f9:1f:
99:84:81:b4:e7:c6:4b:ae:8b:a1:08:ea:a1:23:12:
0e:f1:3f:d0:c3:d8:d6:c3:64:ce:00:05:c9:3a:10:
41:87:34:f1:76:50:21:ae:c9:f9:1f:9d:72:6e:f3:
37:17:24:62:93:8e:1d:ce:d9:55:6a:0e:b3:95:17:
3d:71:02:b5:13:30:d2:aa:55:e1:f0:2a:b3:f6:35:
42:e6:5e:0d:26:da:ba:36:19:1d:1e:1c:99:06:98:
61:da:79:c8:ff:1b:3b:60:f4:53:32:8b:a7:d1:1e:
58:b8:d3:fa:a1:c2:cc:6e:e7:65:ce:be:3c:38:e0:
79:a0:a4:bd:bc:10:82:84:68:f8:13:a4:47:77:9d:
e9:e4:8e:fc:d7:1e:ba:77:a3:fb:83:96:2f:3b:d3:
05:0d:01:9e:7c:d8:a4:36:68:b9:d0:a4:fb:5a:89:
41:cd:46:f9:a3:4c:2c:7f:71:2d:57:48:de:30:91:
9b:e3:38:11:19:44:8b:10:43:a9:eb:54:74:c6:e4:
84:f1:fa:42:43:9a:b5:02:7d:04:bb:86:4a:86:b1:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E1:81:FC:C3:94:88:72:1E:6E:EE:5E:53:E1:7F:CA:A6:66:4C:44
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d6:1d:69:32:f1:fc:04:ac:5f:41:50:e3:ca:59:69:03:25:
a4:e2:1f:3b:30:95:e8:d0:e8:29:e9:f5:d9:6e:ae:1c:ee:d5:
35:b1:8b:b0:03:a1:f3:6e:91:9c:e8:55:b1:60:bc:b0:9c:63:
98:3a:de:87:78:f0:71:22:71:57:d7:ef:b4:a3:e3:f5:32:b8:
2c:de:0f:23:b4:28:6d:77:21:02:c3:f7:be:01:21:be:80:aa:
a9:2b:76:b8:b5:39:76:28:38:68:4c:c2:12:f5:9c:45:17:4c:
39:87:98:ac:8c:0e:a2:af:35:28:45:7e:c6:e7:a5:e1:35:82:
71:57:c7:94:09:a9:25:f6:55:1c:5c:12:79:b9:33:82:6c:6e:
d6:a0:a6:45:ef:24:3c:d7:42:d7:94:af:09:dc:99:f2:ac:df:
8a:c0:5c:df:c7:91:45:f3:78:9c:06:9c:85:6c:6b:9c:36:fc:
7d:f0:88:e8:d9:d1:02:45:db:f5:54:7a:10:79:67:fb:ef:6e:
8a:98:c4:fc:1b:bd:a3:76:cb:29:8e:c1:77:d7:fe:23:67:6f:
65:77:2b:80:5d:38:ed:ae:e7:5d:39:dd:ca:da:25:83:7e:43:
d1:e6:39:df:c6:87:72:14:42:de:20:dc:7c:f8:56:2f:95:96:
c9:64:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:03:45 2025 by rpki-client