Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: M3fHVr7dx6x4RAWf3/HSWnQqdn6bQAiChPVcB1G9F7A=
Subject key identifier: BE:8C:EB:59:B3:5F:D4:A6:9F:DD:C1:F0:55:D4:21:C9:93:64:36:39
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0196C382AE5D9CC4DDC53C94E07E0E593061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 11B8
Signing time: Mon 12 May 2025 08:00:43 +0000
Manifest this update: Mon 12 May 2025 08:00:43 +0000
Manifest next update: Tue 13 May 2025 08:00:43 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: teYH2ksASXR4hQpSj6eI5fX8f2Hx99YGUSWgyH3ImDg=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:ae:5d:9c:c4:dd:c5:3c:94:e0:7e:0e:59:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: May 12 08:00:43 2025 GMT
Not After : May 13 08:00:43 2025 GMT
Subject: CN=be8ceb59b35fd4a69fddc1f055d421c993643639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:aa:93:67:4b:45:15:f3:b5:38:09:8e:e8:
e4:a9:94:4f:ce:49:70:8c:ee:8e:03:af:c8:e3:25:
2e:bb:c5:68:69:db:5e:18:70:96:16:01:6b:aa:ef:
9a:d9:11:b6:86:2b:fa:75:81:0a:d6:88:f6:4f:23:
40:b7:94:f8:33:43:23:2e:ae:00:8d:b1:20:a2:68:
bb:a5:05:ad:3e:8b:8b:8d:bf:37:5f:0e:78:88:b3:
9e:cf:37:67:43:5b:ff:1a:60:dc:8b:ac:50:12:5a:
88:1f:df:3b:ee:e9:78:dd:b1:8b:64:1b:52:55:6d:
88:b3:62:18:b9:e9:38:8e:4d:fb:21:2d:82:6d:45:
b3:de:5f:59:fa:d2:82:14:d1:6a:c5:e1:ec:c5:5e:
dc:6a:91:8d:05:8d:0d:01:03:8d:00:96:5f:7c:56:
26:ef:ab:d9:8b:f6:c3:b4:90:18:af:17:d7:05:cd:
9a:19:40:a6:53:ac:09:c9:14:ed:9f:83:0b:ae:85:
f6:9d:e2:86:aa:71:b4:46:69:96:b0:27:4f:f5:66:
3b:9e:56:15:33:ae:dd:b3:ee:fd:5b:af:0b:1c:0b:
89:5c:20:06:b3:36:67:36:b7:c7:e4:c8:6b:47:d1:
64:d5:aa:d5:37:9e:19:c2:b7:41:91:ee:71:08:c4:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:EB:59:B3:5F:D4:A6:9F:DD:C1:F0:55:D4:21:C9:93:64:36:39
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f4:b7:28:b2:62:39:99:16:29:c6:82:d1:9b:b3:45:f4:75:
51:b1:31:d7:bd:12:8f:f2:2e:a6:9a:db:c9:71:f6:29:e2:93:
63:96:6d:16:21:9f:bc:8f:a1:14:36:09:cc:c0:99:96:8b:83:
fc:35:b4:7f:ef:e7:0e:18:c6:a0:38:90:a2:90:8e:9b:b3:40:
1c:ef:5d:75:45:c7:2a:56:81:c9:c5:28:1a:d3:a3:75:a4:78:
e6:7c:3e:69:e2:79:4e:f6:6d:ce:39:a5:f0:9a:e6:10:06:ba:
ff:a2:5c:52:9d:18:3c:53:4f:12:14:79:72:38:e8:2f:f8:a8:
b8:54:b4:ac:20:c1:68:fd:73:77:c6:5c:ee:72:4b:bf:67:b6:
de:65:f5:da:0b:ab:b6:4c:f3:2f:ea:5a:a7:2c:56:d0:80:8e:
8c:75:cf:49:66:a6:a7:43:9b:b1:e5:91:fe:34:80:0f:48:fa:
23:de:79:ac:4b:38:94:e5:f3:f4:ac:2d:91:c9:97:4e:a3:04:
16:5b:5b:38:5a:6c:ff:c8:0c:3e:d7:92:9f:75:04:f7:2a:c2:
4e:71:f4:e6:06:76:d4:01:24:98:f3:81:c5:be:1e:0c:d0:83:
46:76:94:74:a3:31:c2:92:ce:44:7d:76:c6:a8:51:39:cf:0d:
50:6a:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:43:09 2025 by rpki-client