Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File: ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier: S0xm7nTQBKsmBb84v1SY+W5Uz+4blSnCK9ijxctrfIQ=
Subject key identifier: 2B:B2:6B:FE:F9:84:65:3D:92:17:EE:63:8B:93:86:26:8B:F9:F8:42
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial: 0196AB0C65C6A20989FAA1F1E07BF85104C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number: 0464
Signing time: Wed 07 May 2025 14:00:38 +0000
Manifest this update: Wed 07 May 2025 14:00:38 +0000
Manifest next update: Thu 08 May 2025 14:00:38 +0000
Files and hashes: 1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: ak+t9qGPSnLMh7fY8hXchPXytjk03DCgnBTR1PYzetw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:65:c6:a2:09:89:fa:a1:f1:e0:7b:f8:51:04:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
Validity
Not Before: May 7 14:00:38 2025 GMT
Not After : May 8 14:00:38 2025 GMT
Subject: CN=2bb26bfef984653d9217ee638b9386268bf9f842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:bb:29:7e:5c:11:bf:83:ed:c9:86:f8:ef:
f3:d7:ed:2e:41:55:a7:64:6d:32:24:fb:f4:3f:c3:
1c:bc:b5:28:89:6b:6f:3c:63:6a:c2:22:04:3c:2e:
64:50:bb:d8:3d:a6:b2:02:cf:e6:c7:a3:82:1e:37:
c9:b8:25:1c:95:56:37:46:d8:48:d3:5b:8e:f0:1c:
c3:fa:ab:35:f4:10:5b:7b:0e:04:89:9b:2c:84:ba:
07:3b:24:7e:28:5c:46:eb:38:39:63:d2:91:32:09:
0c:2d:45:bf:c3:3a:b3:05:52:5b:8f:aa:0b:35:ec:
85:4c:6f:9d:62:a8:f2:77:67:58:b6:ea:3d:9d:a9:
5f:67:89:6e:22:d6:8e:cf:b5:4f:75:51:2a:c6:d8:
97:41:75:03:02:e9:28:da:f5:4d:f1:9c:5d:d1:ef:
44:47:91:1b:0a:b8:27:a7:50:03:20:9e:74:a6:72:
2f:d8:ea:91:60:b9:12:18:b0:49:30:c4:07:7d:ec:
bb:79:e3:65:75:fe:10:f0:d2:b6:3f:e1:0d:74:18:
51:01:b9:3a:6e:da:89:4b:86:ac:40:9a:65:a5:42:
70:bb:70:bd:26:de:5b:36:74:1d:3c:5e:93:5e:2e:
42:91:a6:f2:31:03:a5:bf:0d:9e:9e:1a:6b:a0:9d:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:6B:FE:F9:84:65:3D:92:17:EE:63:8B:93:86:26:8B:F9:F8:42
X509v3 Authority Key Identifier:
keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:49:5f:b5:94:23:64:20:81:be:b9:2c:aa:1a:6a:72:87:
99:69:d8:18:96:88:31:a3:70:1a:b9:7f:ab:bd:6a:8d:87:8c:
ad:fe:bd:c3:65:7f:e8:cb:78:b3:e4:3c:45:47:27:e5:ba:34:
a8:0d:7d:f6:f6:82:1d:51:96:5c:61:39:9a:b2:17:4d:0f:b1:
0c:50:e6:12:e1:a0:ae:6d:99:11:df:0a:fe:e3:4b:87:33:06:
4f:c8:bd:9f:c0:f7:cc:fa:5a:42:a7:84:ec:c6:41:db:cc:e0:
c6:8b:6e:d0:57:81:ef:8b:e4:dc:80:54:2e:1c:85:eb:f8:96:
00:b6:e2:3f:a9:cf:34:3b:40:b2:5b:9b:56:16:3d:b8:00:db:
66:05:15:0e:76:5d:bb:99:46:9e:2a:7d:02:93:83:a3:67:c4:
6a:e9:12:21:c6:e9:a3:57:30:e5:ce:1f:09:e6:3d:23:08:e3:
94:4d:ae:28:a5:e5:2b:23:ca:85:cb:99:b5:c3:52:2b:cb:2e:
2b:29:b6:17:d5:4f:af:41:97:0f:f4:51:4e:ed:9b:74:d1:8b:
10:2c:63:0e:7d:b7:55:85:43:a6:c6:66:6a:fd:be:b6:e0:c2:
63:00:c9:62:a4:9b:e8:ce:14:8d:e4:a2:63:64:c6:7d:c1:b4:
99:19:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:53:56 2025 by rpki-client