Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier: NlaJsNli67hIVFgtgD13g7fDY/rvzSqWTQa2DcYJCY4=
Subject key identifier: 10:70:7E:8F:FB:D6:40:42:49:75:9B:02:98:6D:84:93:F9:03:B4:58
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 0196B89117F12FA8D2C1A676C1A7A3850E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 05:00:38 +0000
Manifest this update: Sat 10 May 2025 05:00:38 +0000
Manifest next update: Sun 11 May 2025 05:00:38 +0000
Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: XSIKV0/7jhOttfIp3ZWFDBr+P6uqngJa+OJDifCMMMc=)
2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:17:f1:2f:a8:d2:c1:a6:76:c1:a7:a3:85:0e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: May 10 05:00:38 2025 GMT
Not After : May 11 05:00:38 2025 GMT
Subject: CN=10707e8ffbd6404249759b02986d8493f903b458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:de:37:29:07:20:0f:59:c3:d1:3b:c8:5e:
b4:50:77:83:e7:b9:4b:79:62:63:c8:67:63:aa:88:
a2:d1:c3:d0:a8:ad:a2:99:60:b7:5d:62:93:f8:7d:
a4:16:d0:34:ea:7f:6b:d7:de:4f:bf:0c:a1:9a:c7:
47:68:d6:f3:b6:9a:b9:2c:60:f1:75:38:b2:ed:65:
2c:25:bf:aa:de:35:59:7b:c6:ff:f3:9e:05:83:3c:
69:77:73:53:38:5a:c8:d7:b4:57:f5:8a:07:8a:2c:
4f:6f:61:f9:f7:c3:33:86:20:7e:63:9c:21:0f:19:
7a:6d:09:e4:f6:0c:d8:7a:7c:a9:66:a9:75:8b:2d:
ee:0a:b6:2c:e3:a9:52:76:a9:72:87:f1:c1:f4:ab:
80:c8:89:bf:86:69:6f:50:06:1d:f7:df:19:f0:ed:
a8:5d:75:75:be:5f:13:23:73:1b:cc:2c:bf:bc:a9:
a9:8e:1d:93:af:ce:77:c7:39:89:e7:7e:4c:e3:f7:
81:e1:b9:d8:2a:4d:b7:9c:51:af:2e:48:e4:d6:66:
57:5d:74:a6:07:7d:3b:c8:b5:13:a6:0b:23:78:00:
b5:88:16:70:70:b3:51:0a:d5:6b:24:73:2f:00:b9:
80:e5:d1:3f:24:7d:73:a2:8f:33:68:1b:b7:14:f0:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:7E:8F:FB:D6:40:42:49:75:9B:02:98:6D:84:93:F9:03:B4:58
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:58:4e:64:66:44:e6:90:fc:83:59:81:71:4b:2b:cc:3c:5f:
7e:4c:5a:9c:3d:7b:74:bf:a2:8c:ed:f9:b1:6c:70:36:b9:43:
59:84:b6:f4:80:40:83:20:ce:84:97:de:c1:27:54:72:33:f6:
77:d1:bb:48:31:66:cc:22:78:72:ff:d9:9e:a5:00:b4:3c:e2:
fe:f2:ac:cb:1e:7a:03:bd:81:ae:f0:4b:27:ee:e6:22:59:50:
11:c9:85:d5:4a:23:f3:f6:7b:ca:34:6c:af:5e:e4:16:7b:89:
61:3b:0d:11:62:50:4d:3e:f2:01:aa:54:56:f7:8d:77:fe:70:
84:0e:5a:d3:d6:ca:68:be:20:cc:79:7a:b8:7e:39:9a:97:f6:
60:16:e7:c0:3f:a3:17:81:e6:bb:10:d4:77:cc:2c:1b:c3:f5:
c5:f7:9f:7f:0b:2c:9b:13:44:cb:af:51:73:bf:66:3c:c8:68:
4b:1d:d9:48:42:0e:01:56:d8:98:87:2e:0d:e0:d1:81:e1:47:
b5:bb:a8:c3:82:b2:2f:33:ff:ee:c4:96:82:fc:2c:bd:02:c6:
10:39:12:b6:c6:d7:04:b9:60:a2:8e:76:e6:a4:dc:13:53:00:
2f:70:e8:7d:7c:2e:c6:dd:cc:a5:a8:ee:9e:2b:29:15:d1:56:
f4:f8:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:43:03 2025 by rpki-client