Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: p8XnaeTQqQvDcvpA/8uVyj/QYggwJiyiuuFXfyNwbKU=
Subject key identifier: AB:55:46:1E:50:F3:44:59:27:AB:CA:03:57:01:E0:20:13:97:33:A8
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 0196BB2401B7C4568BC81754CFA001E89943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0E44
Signing time: Sat 10 May 2025 17:00:21 +0000
Manifest this update: Sat 10 May 2025 17:00:21 +0000
Manifest next update: Sun 11 May 2025 17:00:21 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: lgK0mVAwwzDWSAjl9D2QrwsHye3/aCDwIX73fijD1K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:01:b7:c4:56:8b:c8:17:54:cf:a0:01:e8:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: May 10 17:00:21 2025 GMT
Not After : May 11 17:00:21 2025 GMT
Subject: CN=ab55461e50f3445927abca035701e020139733a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:59:73:27:28:e4:c8:c1:c1:a2:49:94:ea:
14:49:3e:2d:bc:6d:77:37:2e:71:10:9f:a5:4b:98:
40:6b:5b:57:a1:d9:7e:9e:c3:05:89:4a:e8:c9:07:
fd:df:89:f1:e8:43:eb:10:5c:6b:6d:4d:fd:4e:c0:
cd:2d:3b:6d:59:d8:62:b3:6d:73:25:00:31:e2:24:
35:d0:81:f2:cd:13:38:2d:dd:a2:12:22:50:fe:11:
a7:3e:35:11:d4:e8:9c:e2:52:7b:0b:1f:f5:2f:f3:
69:78:ce:d3:9e:d5:f8:f3:68:23:6e:d3:89:05:46:
b4:3c:ef:95:e0:55:61:05:bf:2b:71:75:9d:d5:a6:
46:a1:58:e5:2d:7f:3c:41:3c:89:85:46:d6:18:cb:
f6:08:19:48:2a:79:d5:9e:f1:f5:ce:34:22:38:7d:
25:ca:c7:71:bd:06:67:b7:7d:62:c5:f6:ac:6f:3b:
1c:9c:c7:8f:28:b5:dc:95:59:c2:cf:58:7b:7c:ac:
a5:fb:e8:a5:7c:25:4b:c8:2e:4d:20:fd:fb:1b:0b:
7a:9d:bc:30:e4:df:50:7f:e1:47:74:2e:07:9b:63:
07:56:48:bb:ad:9e:4c:5c:77:90:ba:66:49:a1:e3:
26:30:cc:a4:72:fc:38:09:b3:cc:6d:b7:4b:ad:77:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:46:1E:50:F3:44:59:27:AB:CA:03:57:01:E0:20:13:97:33:A8
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:16:4f:16:3e:96:c6:14:76:e9:a9:63:2c:b4:da:63:7f:bd:
48:b1:05:63:80:c2:da:cd:34:97:e0:fa:43:21:57:cd:49:b3:
a0:dc:af:f9:7d:58:aa:58:86:8c:f3:45:2e:3c:7a:4e:5e:09:
2d:2d:2c:54:98:06:59:62:43:67:73:a0:56:9b:72:2b:79:de:
11:a2:a3:8a:5e:52:4a:21:4b:00:2c:b5:5d:83:03:28:f6:7e:
67:0e:77:5e:3d:f3:05:80:4c:4e:2e:a0:cc:f6:b3:eb:e6:49:
77:15:3e:ec:aa:10:17:4b:95:b2:55:ca:00:e9:4b:68:53:92:
73:48:0c:c0:33:33:ab:4d:a5:34:fb:0d:c4:ba:06:68:7d:2e:
bb:f1:76:c2:de:66:67:9f:db:d2:cb:c6:02:a3:85:7c:20:be:
d7:63:d0:93:45:61:58:f3:1c:f3:46:14:77:94:b7:00:6f:93:
30:b7:21:27:2b:d9:f7:cb:e8:53:c4:6a:db:ac:97:bf:70:9c:
8d:ee:f7:55:63:be:98:b6:f0:87:05:1e:d9:93:51:0b:dd:80:
ab:f0:23:fe:7b:dc:bf:09:3c:4e:ce:66:5f:9e:a3:52:6e:fe:
86:61:ec:fc:09:e7:8e:ca:9f:a9:06:44:f8:97:8d:d5:6b:5b:
62:85:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:34:09 2025 by rpki-client