Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: SlCjd6ijPy8VQTy3BA6kww6zxoUnuiim/bo8FNUq+hY=
Subject key identifier: 1C:C3:08:B7:92:3F:0C:49:77:09:3F:E1:98:CB:EA:1B:D3:16:88:94
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 01969E2C85AF6A71345FB5060FAFF46639DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1511
Signing time: Mon 05 May 2025 02:00:40 +0000
Manifest this update: Mon 05 May 2025 02:00:40 +0000
Manifest next update: Tue 06 May 2025 02:00:40 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: h1oelfFmFiP7RX2EScKgV6eRKEwyf9mbUxwA68tlKeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:85:af:6a:71:34:5f:b5:06:0f:af:f4:66:39:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: May 5 02:00:40 2025 GMT
Not After : May 6 02:00:40 2025 GMT
Subject: CN=1cc308b7923f0c4977093fe198cbea1bd3168894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:88:64:ce:b0:28:f4:ae:82:66:d4:b1:e0:
99:53:fb:be:8d:7e:57:19:f7:b5:7f:f7:91:59:32:
6b:2c:85:0e:0f:b2:72:41:7e:c6:d7:c9:0a:ad:58:
d4:c3:10:76:b8:8a:9b:b8:50:dc:4b:29:11:d3:d6:
90:c3:7c:0e:ae:01:27:47:35:f8:10:74:91:1a:20:
14:1b:7a:59:98:c9:65:a7:35:71:24:82:bb:c7:9d:
da:02:cb:f6:5a:e5:aa:45:8d:60:32:2b:8e:82:39:
96:3c:d9:d7:02:99:c2:e2:48:a6:d8:f1:d9:bf:73:
9c:32:07:c6:d3:c5:95:2c:ae:3a:64:cc:f3:3f:a6:
08:36:3f:f6:0b:4a:57:ec:91:d8:1e:a3:94:86:ca:
e5:3a:70:ee:c8:5a:4a:35:c6:dd:ec:53:2f:ab:2e:
b7:ad:f5:8b:a9:b6:26:85:88:38:4e:cb:1f:20:fc:
27:e6:a2:57:5d:9f:da:50:48:a6:c2:c8:a7:13:a6:
e2:64:3a:a7:ab:fb:93:29:14:cc:eb:96:c3:0c:78:
b0:3f:81:f2:93:f2:e8:41:f7:05:25:20:a8:db:b6:
97:4e:d7:df:a4:c6:1f:a3:3e:14:c7:8e:0b:f0:47:
60:a6:ad:7a:63:5d:9d:4b:f5:a5:4d:ca:68:00:a6:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C3:08:B7:92:3F:0C:49:77:09:3F:E1:98:CB:EA:1B:D3:16:88:94
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:cf:23:fe:b6:85:1d:52:c7:9a:a4:ac:23:87:6c:1d:2a:
98:5b:63:33:27:6a:81:12:d2:ff:5c:82:71:04:97:90:36:fe:
a5:b2:0a:19:2b:15:97:69:6c:7b:09:c6:68:21:d9:4b:f5:83:
fa:51:cb:98:48:8f:d4:ac:60:e4:b2:c2:77:59:a2:bc:15:74:
68:62:00:64:48:1c:2f:3b:8d:27:fe:91:b5:fc:d6:49:c7:06:
c9:0d:5d:0f:12:a0:a0:f2:e0:93:b2:f9:43:bd:21:56:cb:cc:
6e:1f:db:f1:d3:3f:58:80:5d:ef:1b:24:ea:bb:bb:3a:59:18:
5b:ee:31:18:70:f7:08:70:c8:9c:38:53:79:70:35:a8:04:d1:
64:d5:ae:3f:34:6f:cf:2a:0d:94:77:d2:16:a6:a3:48:fc:8d:
1b:41:f4:b3:60:b5:9b:cf:e1:ef:2f:f1:10:2d:d7:08:36:cc:
27:db:65:04:9d:b1:a9:02:4f:29:37:39:d8:1f:09:61:d2:1c:
d4:a0:ed:e7:ba:bf:1e:b9:31:fe:e4:8e:71:a6:f0:65:4e:e0:
3e:69:a3:d9:5f:69:0d:15:ac:f2:af:9f:92:19:dd:b5:e7:5b:
8e:9d:6c:e7:52:8d:5a:a9:6a:12:03:32:30:88:0f:24:86:11:
2b:ee:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:15:33 2025 by rpki-client