Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: gQFVNLC3TvQMKFW2N7hiSzbWdIkz0qe8eC5vHcSbLp8=
Subject key identifier: 9D:13:13:28:9C:13:89:71:81:44:95:65:AE:7A:61:47:55:87:19:78
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 0196C4CC3B5BE18F59068751BBBDBA34B2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0721
Signing time: Mon 12 May 2025 14:00:40 +0000
Manifest this update: Mon 12 May 2025 14:00:40 +0000
Manifest next update: Tue 13 May 2025 14:00:40 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: ZpYVbhrTWbG0aUf+t5sNtb/uHv9EcRnY1wzSNDjy24s=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:3b:5b:e1:8f:59:06:87:51:bb:bd:ba:34:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: May 12 14:00:40 2025 GMT
Not After : May 13 14:00:40 2025 GMT
Subject: CN=9d1313289c13897181449565ae7a614755871978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:b4:81:2a:3e:28:15:a7:df:83:e1:d9:51:
b7:a8:9f:d0:2e:b1:7b:9c:36:9f:6e:08:bf:e9:29:
7d:63:fd:79:b4:97:33:d8:b1:ba:e4:cb:3c:59:39:
83:9c:0c:5d:85:b8:75:73:da:e5:64:02:5d:bc:fe:
22:63:0a:7a:03:17:fa:83:e7:76:d9:45:56:bd:77:
46:8f:79:54:62:82:8a:53:35:66:1b:d6:68:7c:42:
1b:66:8e:9e:1d:ac:e5:16:00:d8:50:e6:78:8c:2d:
d5:b7:93:4e:3e:60:3d:4f:6b:e6:8d:4b:c2:97:1b:
6c:5d:e8:3d:0b:9f:21:ee:b5:38:07:3b:7b:06:45:
77:4b:88:5f:3e:d4:77:e6:b9:77:3f:48:37:ba:0b:
36:df:a8:0b:e3:08:14:00:7a:a6:62:a5:16:76:ac:
42:79:99:39:23:45:85:7f:6f:75:1a:52:4d:92:ca:
f4:32:17:70:34:71:85:ee:86:78:07:46:8e:0f:32:
cf:f8:a2:99:d6:f7:fc:e6:13:db:f4:69:3a:1c:a8:
d6:ea:64:3c:58:dd:e6:b0:2d:89:ee:e6:74:7b:dd:
b9:ba:c0:b4:77:25:e2:78:b4:45:cc:2c:c1:df:1e:
d1:dc:f1:fc:e3:8c:4d:6c:93:43:39:c8:ad:3a:45:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:13:28:9C:13:89:71:81:44:95:65:AE:7A:61:47:55:87:19:78
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8e:ef:1c:ac:5d:05:63:5c:60:15:c0:70:8a:fb:fd:0c:74:
57:e8:aa:9a:d3:71:e5:e3:aa:07:14:75:26:99:fa:a6:93:fe:
49:61:73:29:54:7d:eb:89:a9:cc:00:4c:44:2d:be:10:18:87:
9c:0f:0d:0f:91:06:92:d8:fc:f6:0f:c8:e2:2c:09:86:07:c9:
68:0f:c5:d2:6f:5b:ce:23:0b:ef:6c:d5:0e:33:22:15:af:9c:
c2:5f:75:9e:40:23:93:ff:b7:bf:77:c7:5d:ae:2b:d4:b1:c5:
c4:04:28:9c:7e:1b:15:5f:a0:0c:1d:0c:07:14:c3:c4:8b:56:
93:2c:07:3d:13:e7:30:d0:5c:db:96:a8:22:41:d1:4d:ea:9c:
1f:01:de:66:32:09:ef:06:fc:dd:46:43:ab:2f:ad:02:1e:85:
68:08:91:ea:33:2d:57:f1:b0:ac:a8:26:ef:b3:24:cc:ce:f5:
8f:7f:f4:fe:43:78:4a:bc:77:1b:4e:ee:68:31:30:25:82:5c:
6a:90:8f:69:63:ed:f3:d1:55:a8:09:76:a3:13:04:09:48:4b:
56:0e:dc:39:5e:01:78:f5:75:54:06:fc:69:6a:6f:ce:4b:4d:
ba:6f:b1:01:9b:e7:53:be:69:ca:11:cf:0b:17:b1:d0:23:8d:
ff:c6:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:55:38 2025 by rpki-client