Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: erv3VYs+xpJ3n+nctsRTybuDpnVqBZholDkTLY2+ZZo=
Subject key identifier: 2D:F3:F7:21:EF:46:9F:AE:5B:87:84:D4:95:B5:CB:4F:4C:3C:A7:EF
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 0196C126191802CCCB1B90DCA7FB55ED0CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 13B6
Signing time: Sun 11 May 2025 21:00:21 +0000
Manifest this update: Sun 11 May 2025 21:00:21 +0000
Manifest next update: Mon 12 May 2025 21:00:21 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: 83wyAgV1/CPq1LqOcjUTKpdVMPZNlEc9apBM5zJCxoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:19:18:02:cc:cb:1b:90:dc:a7:fb:55:ed:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: May 11 21:00:21 2025 GMT
Not After : May 12 21:00:21 2025 GMT
Subject: CN=2df3f721ef469fae5b8784d495b5cb4f4c3ca7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f1:d3:c7:78:cb:a9:81:a2:22:30:5c:7c:15:
e7:a6:0c:a1:79:c9:86:a6:00:41:1e:9b:38:8f:e3:
b1:c2:63:d0:9c:97:d3:ac:3e:80:89:b4:0f:b3:c5:
27:9d:2e:17:7c:c4:f8:4c:8e:ee:f0:83:a1:36:78:
31:bf:61:84:44:a6:60:02:b3:e9:47:b7:1d:51:77:
ee:cf:53:fe:be:03:8e:ea:13:6e:c2:f8:84:b9:42:
e9:bc:d9:b7:81:1e:16:04:ea:52:bb:69:c1:d6:08:
e8:a8:f0:7d:71:ac:1d:cd:86:bc:c4:67:f6:91:83:
f2:29:15:04:98:c0:9b:7f:36:94:cf:1b:53:55:75:
6e:62:f1:47:d0:3c:30:a1:d4:2a:3a:40:0b:ee:dc:
f2:cc:a7:a0:fb:51:d2:55:a0:bd:30:01:0a:be:71:
3c:a0:f0:f7:50:56:f1:4b:e3:6d:f7:a9:86:a5:de:
00:bc:fc:48:5b:9c:36:1a:0a:ab:b4:29:b8:5c:01:
d1:1e:4e:f7:69:ba:22:79:a1:8a:97:25:89:9f:1b:
68:8a:a2:90:83:3e:72:15:db:1f:8e:6e:25:8f:20:
cc:f9:53:bb:c1:dc:67:d0:e6:63:19:41:e2:f0:1d:
3b:30:ea:28:2e:56:1c:2e:78:5d:65:99:fe:ae:ac:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F3:F7:21:EF:46:9F:AE:5B:87:84:D4:95:B5:CB:4F:4C:3C:A7:EF
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1f:e6:09:94:8f:09:be:d8:d2:19:c0:4a:dc:3b:55:41:1f:
95:e0:ed:11:5e:cf:1c:1e:7a:79:d0:47:61:2f:c1:c9:4e:2e:
ba:b7:13:d3:d5:08:3b:6f:a6:06:cc:94:83:51:cf:6f:3d:2d:
8e:70:61:87:a2:9a:e8:3d:4b:7e:1b:0c:95:19:89:07:0c:f9:
79:fc:37:0c:35:eb:14:47:35:10:e9:7f:93:f9:97:7b:97:03:
d8:19:e7:5b:97:2a:d9:31:03:cc:3c:0e:fa:6c:92:40:4d:f6:
73:43:2a:33:17:2f:8f:47:86:39:00:72:3f:ef:d3:32:bd:54:
be:d0:a0:96:81:60:e5:7d:11:2d:3f:bb:7c:20:8b:7f:59:45:
eb:a7:0e:ff:48:f1:43:23:f4:90:fb:7b:3e:1d:e1:a7:a5:3e:
35:41:6f:7f:55:a8:8a:9f:26:0a:4f:63:f0:26:4a:55:21:68:
c2:fc:b6:99:3e:26:62:ee:fb:b2:da:35:ef:0c:25:30:9e:24:
7d:8a:ee:33:e8:48:5b:ef:0c:98:a5:a2:ad:67:03:9e:4a:d0:
8c:66:18:4d:f4:26:42:62:cc:1a:ac:ea:c9:d7:46:e5:4d:88:
14:74:21:55:e1:cb:a2:31:7b:19:5b:3d:6b:89:f7:6c:71:85:
23:31:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:29:56 2025 by rpki-client