Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: k9eNpeGF7cpoRLGpIXpdvsw24nPlYjp9BacsaNKcdEs=
Subject key identifier: B8:9C:AB:E3:5C:CD:4E:0D:B0:1B:04:A6:67:59:EA:86:73:7E:D7:CD
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 0196C7CD6A157CBCF081D20D2193D124962F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 02C9
Signing time: Tue 13 May 2025 04:00:50 +0000
Manifest this update: Tue 13 May 2025 04:00:50 +0000
Manifest next update: Wed 14 May 2025 04:00:50 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: Q7G3xCnmCXS39LHDhNZlda3vuBYlQ51XqxIPFPF+41s=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:6a:15:7c:bc:f0:81:d2:0d:21:93:d1:24:96:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: May 13 04:00:50 2025 GMT
Not After : May 14 04:00:50 2025 GMT
Subject: CN=b89cabe35ccd4e0db01b04a66759ea86737ed7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:22:ea:57:8e:b0:26:a3:02:2a:af:30:81:
f5:c3:d6:2c:88:8e:d0:50:43:9a:5f:14:e7:81:f9:
ae:7d:a3:34:3a:eb:cb:54:02:6a:6c:03:9a:e5:70:
4b:bd:c9:6d:f5:c1:2d:bd:1d:a5:eb:6b:84:e9:d0:
67:ff:f5:a5:e0:de:2e:00:8b:34:a0:68:cc:5f:41:
a3:87:c4:56:dd:0c:19:22:7e:81:3f:d1:c4:01:d7:
a6:fc:e3:c8:13:45:16:a1:bd:c8:97:a5:4c:cf:48:
dd:66:6c:80:94:23:8f:cf:4f:cd:b2:64:91:6d:5b:
8f:5a:88:98:67:3d:16:92:c5:19:b5:68:12:aa:f0:
fc:f6:a4:66:0a:e1:dc:32:8d:69:47:73:49:40:61:
b8:76:ec:d3:2e:78:be:ec:9a:91:90:11:b6:1e:80:
fa:41:f3:d7:20:20:c3:cb:c7:bf:30:69:89:6b:d4:
b0:20:c4:f6:6a:43:8e:94:9a:e1:b2:f8:95:f8:6d:
27:a2:12:91:d7:01:d0:d6:16:62:f4:0d:eb:e1:aa:
83:be:12:d9:b7:04:3a:07:8a:fd:43:cf:90:02:9b:
d7:28:a8:d6:69:8d:3f:99:dc:5e:30:60:d3:6f:3c:
8a:e5:69:fb:e9:ea:e1:a5:2d:29:c3:5d:b8:06:2d:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:AB:E3:5C:CD:4E:0D:B0:1B:04:A6:67:59:EA:86:73:7E:D7:CD
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:e7:81:fa:03:ce:bd:22:2e:56:88:cd:a3:60:1a:ee:c8:
1f:cd:97:a2:11:fd:bf:f0:f2:25:17:5c:44:a7:25:58:1a:fa:
a5:04:56:58:00:cc:e5:1a:f9:2b:3f:ff:8c:7a:3e:3b:c8:31:
2a:3f:f4:a0:4e:ae:81:f8:d5:bf:5f:cb:a4:44:3b:62:f4:28:
d7:2d:11:0a:c9:84:51:85:48:f6:3a:22:88:45:d2:dc:5e:4d:
23:5d:1c:c3:0b:28:03:06:92:14:91:d3:aa:72:16:b2:8c:07:
16:54:42:d0:3c:67:91:c6:34:7b:5e:ed:71:29:3d:55:09:3b:
f9:68:5e:3e:e3:88:70:25:cd:a5:71:97:ab:05:cd:ba:2b:ba:
da:f1:fd:d6:ed:81:7d:b0:5d:ca:3c:f8:69:76:a3:4d:3e:f1:
1b:2e:37:7c:03:26:32:10:06:8c:b9:a5:cf:c9:ab:df:c8:a2:
26:53:81:6e:65:68:63:0e:12:82:1c:a5:1d:f8:c8:38:e4:de:
65:99:c0:99:32:15:8f:06:be:fe:86:45:1b:f7:a1:5f:59:99:
a7:20:57:d4:c2:46:88:de:64:85:6b:d7:e4:94:9e:32:60:34:
22:cd:ad:39:e4:ae:6f:6f:4c:44:66:48:21:88:03:50:c9:18:
34:d1:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:14:15 2025 by rpki-client