Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: wMwjtNsaTM2BqOHicK3yDQpZPz3CJq3HnhO52oXkEDM=
Subject key identifier: 9F:4F:D1:F2:42:AB:4D:CA:FE:DD:AE:10:D7:03:8B:FA:39:64:47:1A
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 0196D28792D17FA59E03E08E6537282FB731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 153E
Signing time: Thu 15 May 2025 06:00:22 +0000
Manifest this update: Thu 15 May 2025 06:00:22 +0000
Manifest next update: Fri 16 May 2025 06:00:22 +0000
Files and hashes: 1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=)
2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: L4Si0FSAd/lHKJhutUzqr9obKW35d8qoCjIGjCfvBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:87:92:d1:7f:a5:9e:03:e0:8e:65:37:28:2f:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: May 15 06:00:22 2025 GMT
Not After : May 16 06:00:22 2025 GMT
Subject: CN=9f4fd1f242ab4dcafeddae10d7038bfa3964471a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:46:60:39:72:6c:e7:5f:fd:c1:af:c8:b5:
76:2a:ee:0f:3e:e2:5a:25:eb:fb:1c:5c:8b:fc:f3:
69:d6:e8:08:68:b1:8e:bb:cf:2a:a4:cf:7b:74:21:
f7:c7:c4:78:7a:09:89:b0:f0:13:c9:3a:f9:03:5c:
1a:77:41:70:f9:80:2c:c3:97:95:80:68:13:e9:f4:
56:17:8b:f8:67:ca:ce:4f:61:d4:df:60:06:b9:19:
2e:d3:a2:f0:e6:3b:12:be:a9:dc:8c:8b:ec:63:63:
f8:cd:53:53:fb:44:d7:0a:de:78:2d:dc:c3:de:cd:
45:21:c9:75:0b:20:d4:b1:d6:e6:9d:e3:e3:2f:81:
76:be:48:1f:63:70:bd:b9:9c:d3:17:d7:5c:54:ae:
79:80:72:74:2a:44:a4:4e:c7:72:5b:d1:21:de:d9:
42:33:cf:e8:f5:d2:6e:0e:3f:29:df:b8:57:dd:c8:
cb:c4:ba:97:aa:ff:3a:0a:2d:b3:5d:7c:4c:44:87:
5f:05:55:d7:22:67:c5:e2:97:d0:5a:d2:cd:5a:ef:
ba:94:0f:bb:af:75:e2:63:56:a4:65:ef:30:73:f0:
cb:f9:30:fb:ad:5b:d9:4d:e7:12:03:33:30:19:88:
a2:9b:8f:92:68:98:de:de:e5:6e:b6:cd:62:65:70:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:D1:F2:42:AB:4D:CA:FE:DD:AE:10:D7:03:8B:FA:39:64:47:1A
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:57:19:d6:37:58:e9:1c:a4:e0:b7:8b:54:3a:f9:1b:8f:1e:
b0:ab:dd:2e:db:e0:b3:36:cd:22:3b:3e:5a:ef:a6:82:03:25:
f7:65:3b:50:0e:37:43:4a:66:43:8c:3c:ff:09:ed:06:81:1d:
f0:c8:0d:9c:6c:d9:27:e0:ec:47:32:3d:85:d6:1c:33:d3:21:
66:88:15:c6:bb:27:a2:8c:a1:c9:61:3d:8f:13:b1:fe:33:48:
9b:7b:37:73:93:a7:23:64:45:f0:88:53:ec:2d:69:a0:03:75:
a4:f6:19:4c:4f:2f:9b:7e:1e:53:4b:cd:2d:5d:e8:c6:b0:ab:
41:14:4b:2f:7e:59:05:3f:7b:89:7e:16:39:59:10:8e:2d:35:
e3:19:94:29:aa:b0:d2:60:55:e0:b5:37:8a:b0:f7:9a:f4:5b:
a6:cc:e9:a0:04:0c:51:11:5a:dc:d6:15:b2:52:7d:31:8e:ca:
13:26:75:77:a3:8d:1e:4d:52:37:0a:fd:20:bf:5d:d9:14:af:
c2:f7:23:9b:da:56:8e:8b:2c:61:3f:2c:78:73:5d:a5:6a:9a:
42:0e:d3:c2:e4:fa:cc:57:da:1c:cf:5d:f0:84:df:66:44:fb:
84:c6:2e:a8:0c:2e:ea:06:e8:be:9b:c6:b2:cc:f8:94:bf:4d:
56:43:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:11:04 2025 by rpki-client