Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: Yq/zC/5+iN2sSAfAw32n7fix418dvMdp0P5NuPnSs5A=
Subject key identifier: 3D:4C:4C:8A:40:57:A4:16:34:66:9C:1C:CB:C9:71:FF:AE:C0:36:C5
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 01969E637D19ACE7DD75BDF3EBEB06B68ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 04DC
Signing time: Mon 05 May 2025 03:00:42 +0000
Manifest this update: Mon 05 May 2025 03:00:42 +0000
Manifest next update: Tue 06 May 2025 03:00:42 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: PT2bbi2RpherEtQo3cbyKY5rldP3LzFl0dcsIcT0fDU=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:7d:19:ac:e7:dd:75:bd:f3:eb:eb:06:b6:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: May 5 03:00:42 2025 GMT
Not After : May 6 03:00:42 2025 GMT
Subject: CN=3d4c4c8a4057a41634669c1ccbc971ffaec036c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:09:fb:68:12:7e:71:01:51:f8:87:94:20:
4b:cf:90:f6:22:e6:4e:12:95:5b:70:f0:37:c3:e6:
9d:bd:ba:51:8c:b0:52:6d:b1:a8:d0:85:8d:06:4b:
37:91:77:88:1d:e5:c3:4c:cc:62:a6:fc:6e:07:82:
f8:f4:c8:b0:6a:71:e1:6d:4a:b6:d2:8b:20:0e:dc:
c3:18:51:9b:2e:ec:eb:ed:93:5d:fb:87:11:95:d5:
49:49:65:93:45:5d:8f:b9:8d:02:91:5c:41:e8:8f:
4a:14:99:fb:ca:1c:e6:b5:e3:04:50:3e:38:46:a7:
2a:cb:7c:fc:91:d6:1c:93:dc:c9:d2:db:01:a2:e4:
f6:47:2c:02:7c:b4:ad:8f:69:d4:9f:90:1a:c7:36:
ed:f6:89:cc:e1:43:61:59:48:b5:2f:7f:cb:66:e6:
10:3e:c3:ab:92:07:2e:59:dc:39:aa:3b:f5:42:d6:
2f:11:aa:1f:38:23:14:74:5f:1a:b6:d3:2e:2e:5d:
c3:06:26:8b:02:fd:c9:70:c6:87:d8:3c:1c:a0:18:
bb:a3:f1:d0:18:e0:d0:77:53:9b:23:ce:cb:ea:53:
82:eb:85:cf:60:b6:bc:74:f2:66:4c:1b:9a:b6:0f:
a3:97:37:bc:66:3f:f0:d7:2b:0b:67:42:ed:ae:5e:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4C:4C:8A:40:57:A4:16:34:66:9C:1C:CB:C9:71:FF:AE:C0:36:C5
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fe:ee:98:30:4d:26:29:19:5e:ad:fd:ed:06:b8:c0:a8:3a:
88:1e:3d:c4:66:db:dd:4c:40:55:62:5d:83:fc:7b:e8:86:21:
ca:4b:c8:49:6a:a9:bb:40:66:17:39:ab:b8:e0:7a:84:11:61:
5c:c2:ab:50:7c:e8:da:2b:72:bf:ef:e4:77:23:b7:48:44:5a:
96:d3:6c:6b:76:a7:1b:46:d6:4a:59:b2:71:26:a6:df:d6:0b:
12:22:36:27:05:54:ae:67:08:14:a3:a5:c6:4c:7a:e0:f7:39:
ec:8a:49:55:87:1d:0e:41:36:f3:36:ef:b2:49:d0:3e:0e:cd:
19:0e:1a:86:80:c2:a8:16:7e:ba:86:d6:1a:73:b0:25:13:36:
ea:e2:cd:5d:ba:f9:ef:ef:f1:1f:0e:48:16:48:b3:63:38:63:
ae:f6:9e:46:ed:29:6c:df:18:8a:47:87:4e:da:92:64:80:c2:
a7:b2:7a:dc:c0:22:9a:0f:fc:a4:cb:6c:b2:84:b7:9c:cc:34:
02:1e:2c:ce:07:cc:8b:a6:94:76:dc:c0:d4:67:31:b2:d5:17:
27:fc:3b:36:99:74:eb:74:4c:28:11:03:6e:a8:46:e1:41:09:
94:c9:1b:72:99:09:53:d5:b3:d2:30:4d:fc:00:43:f4:39:ca:
56:5c:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:00:23 2025 by rpki-client