Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: Z67rk/z1fHlnfLcmP8/b3ADgpXjdoNqFUW71nJAGFT8=
Subject key identifier: 38:92:36:7A:52:70:05:1D:EC:B9:BE:E0:11:3F:C8:AB:E0:EB:E2:D5
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 0196C3824C5B0C6E7C4FED8E16FA7180F3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1590
Signing time: Mon 12 May 2025 08:00:18 +0000
Manifest this update: Mon 12 May 2025 08:00:18 +0000
Manifest next update: Tue 13 May 2025 08:00:18 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: rGHZaPV/kyPscnfLSqVrmkYr9yJP+Phyh48BAAh+87o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:4c:5b:0c:6e:7c:4f:ed:8e:16:fa:71:80:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: May 12 08:00:18 2025 GMT
Not After : May 13 08:00:18 2025 GMT
Subject: CN=3892367a5270051decb9bee0113fc8abe0ebe2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:7a:27:36:99:87:90:a9:c7:a8:3b:47:1f:
01:2f:be:97:19:7e:f9:74:4b:ba:51:21:a3:2c:a7:
1d:7a:34:40:14:df:9b:fb:0d:62:44:59:ae:72:d7:
53:de:a7:51:7f:e5:0c:ec:ca:ae:e6:ba:89:21:fb:
11:9a:db:ae:6e:b4:52:e7:99:8b:fe:65:ac:e7:78:
dc:3c:4c:40:bf:55:13:72:53:53:67:77:ee:d0:ad:
cf:89:8a:2a:ac:65:30:13:8a:ce:5c:af:42:24:9a:
6e:a1:d4:a2:a1:92:9a:c5:bc:06:50:ee:63:20:6b:
85:2c:d9:50:18:0b:8e:2f:bd:f3:7d:1c:49:0d:1e:
22:f2:35:a3:19:e0:10:fe:49:64:6c:46:65:4c:b2:
52:83:71:c2:78:1f:05:50:d1:e2:af:d1:ae:d3:8a:
3a:e0:c5:cb:61:5d:5d:30:ee:4d:8c:91:4d:17:77:
01:a0:51:e5:0f:ec:48:e9:a8:fb:6b:62:f9:69:97:
14:7e:ee:7d:2f:55:74:5e:82:b4:dd:cc:9f:7e:93:
ac:83:92:ad:e2:b3:b3:8a:47:09:08:8a:7f:a6:18:
00:42:50:97:9c:cb:df:07:05:2b:4e:19:ae:2d:76:
68:e1:6d:49:03:1e:5a:8c:e7:e7:f8:d9:05:2f:e2:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:36:7A:52:70:05:1D:EC:B9:BE:E0:11:3F:C8:AB:E0:EB:E2:D5
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b4:0c:6f:34:a2:f7:e6:da:cb:25:e6:65:d1:19:59:3c:7a:
c3:34:9b:16:cd:43:42:fc:3c:95:95:e7:08:29:87:e3:4e:40:
24:68:8e:23:df:e5:4f:6a:9f:1e:ea:ec:88:16:53:ba:6f:a0:
78:bb:b3:4b:d3:36:e5:5c:73:7e:e4:13:ac:c3:fd:28:1e:29:
ec:7f:15:01:5a:4a:8e:97:aa:ba:2e:c6:fd:37:08:4c:8f:e1:
52:73:e1:95:bb:ba:2a:9f:4d:d9:ed:39:88:ed:b3:e9:54:84:
40:e3:98:89:5e:dd:ea:e5:ca:1c:82:4d:a7:1f:5c:d3:13:0c:
5e:22:66:0f:17:cf:46:05:19:df:03:e8:6c:aa:56:81:2d:e4:
b2:33:b7:12:63:9a:09:03:d8:91:53:b3:86:d3:f3:26:65:87:
b0:be:92:ea:52:1e:b9:5c:a3:d5:0e:d5:1b:80:46:16:25:7a:
f6:63:17:98:59:56:8b:13:2f:5c:ea:3a:76:e0:ac:96:73:f3:
9b:6e:f3:84:66:de:d0:df:38:81:39:c7:f1:00:de:e0:be:db:
3b:18:4e:67:ae:ab:28:40:4e:d5:44:8a:f4:89:7a:e4:b7:25:
df:15:0d:8b:00:2d:27:bb:ba:93:a5:43:0b:e2:d8:2d:3d:dc:
8d:4b:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:06:29 2025 by rpki-client