Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: tQucH2/PtwtMPOPAMvcgNCG8z6d7atmacQXEQRKagZo=
Subject key identifier: 66:09:45:00:48:F7:97:90:9F:C0:BD:F8:DD:D8:20:9E:F6:36:79:1A
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 0196BAED0E2CCA6751D597A47070D5E322A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0920
Signing time: Sat 10 May 2025 16:00:19 +0000
Manifest this update: Sat 10 May 2025 16:00:19 +0000
Manifest next update: Sun 11 May 2025 16:00:19 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: oflkQ0RhNujzexKonIELp7WSLorz7wkLuQYGXOqQtPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:0e:2c:ca:67:51:d5:97:a4:70:70:d5:e3:22:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: May 10 16:00:19 2025 GMT
Not After : May 11 16:00:19 2025 GMT
Subject: CN=6609450048f797909fc0bdf8ddd8209ef636791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:8c:d6:28:96:1d:30:3e:11:a0:ed:66:2e:
25:cc:5e:a8:6d:a0:aa:0f:41:39:82:d9:27:04:15:
21:d7:d1:b8:f1:37:90:f5:04:c0:e3:99:3f:7f:f1:
a3:6f:62:fb:f6:20:4d:63:ff:b6:e8:c9:e1:8f:94:
8e:11:00:8f:4c:80:af:37:0e:2f:f2:39:ae:06:7b:
c1:a2:84:d7:1e:ee:0b:84:0f:39:9d:3e:42:c8:f2:
a5:d4:c8:37:95:f5:a6:17:71:bf:85:e0:f0:b4:3b:
1d:25:ef:d5:ae:02:f4:e8:57:ee:38:0b:cb:d5:6d:
cd:8c:96:b5:6a:41:59:06:82:69:34:62:06:b7:44:
ab:b0:57:63:b6:eb:db:05:80:c2:77:77:ac:b7:c4:
99:95:7c:49:41:20:f9:ed:08:f7:be:04:82:be:4d:
dc:96:b4:81:a9:48:ee:96:7e:aa:bb:b3:9e:54:c1:
d1:18:8b:6a:7c:26:c1:35:7c:58:b0:30:58:1b:ee:
76:f9:d8:36:5e:86:40:cf:da:75:8c:5f:36:86:fa:
bd:2c:f1:03:fd:62:46:11:3c:ba:07:a1:ce:b5:af:
79:6d:46:56:cf:92:1a:2e:a8:ce:b8:da:25:81:23:
db:83:1d:0c:a2:a3:02:5c:40:aa:e6:ff:ed:bf:b1:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:09:45:00:48:F7:97:90:9F:C0:BD:F8:DD:D8:20:9E:F6:36:79:1A
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:81:70:d7:77:50:f8:3e:34:09:20:26:b9:dd:de:a1:14:
40:e8:e9:09:f6:33:5d:b0:36:98:86:a7:04:be:81:48:85:8c:
c7:7e:a2:ad:3d:2f:31:92:85:70:f7:b6:78:0a:cb:53:52:3e:
4d:86:96:1d:46:59:08:b3:2b:cd:34:46:6a:a0:bc:ac:e5:4b:
d7:1a:b5:66:da:1e:6b:d7:86:4b:0a:5d:f1:d2:b0:ed:c3:54:
bf:24:72:a6:fd:d2:02:23:6d:b4:f7:c7:c7:f8:fb:5e:59:17:
42:e3:93:86:37:12:0e:38:17:78:b8:b2:a2:6d:ec:67:2c:11:
3a:95:fa:10:fc:38:b8:79:e8:2f:17:9c:7a:e9:06:f3:d2:4c:
38:c7:49:2a:29:b0:a9:b5:e9:b0:fb:f0:fb:20:ad:9f:95:7b:
f3:c9:73:57:67:1b:a5:a0:68:4b:05:96:74:89:03:a7:46:d1:
1a:d1:55:f0:11:90:c6:c3:2c:63:01:17:e8:62:ff:60:13:1c:
5b:69:a7:00:9a:96:5a:b8:ee:11:17:f8:57:25:fc:84:d0:db:
c7:70:48:35:6d:c8:20:7d:93:2f:fa:22:3c:6b:f1:3b:ad:a7:
6a:3a:63:be:9c:b2:ac:49:0b:b2:f1:2a:9a:43:db:d7:b5:82:
05:93:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:04:33 2025 by rpki-client