Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: itQRyqSvnB6x16SM1UasnJZxp7xbFMMOMPf5SmecD7Y=
Subject key identifier: A9:BA:0A:C3:5D:F1:16:18:53:82:0F:04:F9:F3:C4:66:A9:D6:33:88
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 0196A72FD60BBFA6FFB9DE35C7FCCF449D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0BF2
Signing time: Tue 06 May 2025 20:00:52 +0000
Manifest this update: Tue 06 May 2025 20:00:52 +0000
Manifest next update: Wed 07 May 2025 20:00:52 +0000
Files and hashes: 1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: E098Flx86weZS79WY8CwBkhuO9Hu4Dtg0XhpM0PV0XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:d6:0b:bf:a6:ff:b9:de:35:c7:fc:cf:44:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: May 6 20:00:52 2025 GMT
Not After : May 7 20:00:52 2025 GMT
Subject: CN=a9ba0ac35df1161853820f04f9f3c466a9d63388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:6b:fb:f5:36:42:3c:6a:a4:0c:48:19:73:
66:52:4c:cf:7a:b4:52:8f:2b:4f:4c:6c:9d:4e:67:
2b:21:82:61:7b:2c:f1:ec:85:33:0c:2d:00:43:97:
54:4e:32:75:4a:95:5d:ca:7f:99:2e:1b:4c:f7:e2:
de:7a:c2:4a:a1:8a:61:05:9b:ef:1c:7a:71:26:f2:
4e:f3:46:9f:45:34:14:12:88:3d:8f:98:40:c6:2e:
22:99:38:d0:c4:02:02:49:67:ed:30:d8:34:cd:a1:
2d:51:dc:0a:d4:21:8a:9a:f1:f5:f1:2f:45:c8:5f:
23:bf:08:cd:9a:4c:82:9f:50:07:bc:d0:a8:a9:65:
af:0f:ee:08:33:4a:8f:c3:8a:93:75:3b:33:86:2e:
4d:d1:0d:2f:5a:fb:35:ef:8b:84:51:73:b1:6a:30:
88:db:a9:2e:8c:d7:45:d9:f7:9a:c9:34:36:dd:6b:
cf:21:ac:72:e2:ff:04:78:04:74:9b:de:54:fb:2e:
1a:48:0a:eb:7a:1a:59:3e:ac:9f:1d:e5:16:fd:bc:
63:5d:50:96:a1:77:b5:87:ee:e5:a2:51:c4:04:a7:
c9:74:0e:42:0a:42:44:74:f5:10:dd:7a:85:d9:28:
4e:d0:11:47:6b:b4:e6:c8:ce:bf:71:74:bd:c8:af:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:0A:C3:5D:F1:16:18:53:82:0F:04:F9:F3:C4:66:A9:D6:33:88
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:64:08:ae:21:4d:08:d2:ba:d8:a0:6d:90:fe:2b:ee:4b:50:
41:73:93:82:68:de:6f:94:7f:b8:e6:f0:e5:f9:9b:df:68:7b:
2f:7d:03:2c:b5:4a:7e:5d:49:28:e0:ec:65:b3:70:4b:68:f9:
8f:2f:1e:5c:3c:38:cb:bf:17:c1:ae:c1:dd:d0:88:9d:85:f5:
49:80:67:07:2a:11:1c:5b:16:18:a9:12:ee:e4:51:28:2c:5d:
27:4a:56:87:fb:9b:ed:1a:09:5a:5a:5a:21:63:3d:53:bb:5a:
35:1b:a0:75:95:00:31:6f:6f:05:dd:4b:f2:d6:6f:2b:34:83:
13:72:21:f2:95:b8:77:99:39:3a:e2:e7:4c:df:e8:17:55:21:
0e:a4:dc:1e:2c:1f:fe:91:ad:21:be:76:a0:a6:86:cc:e9:cf:
43:24:ff:f1:42:78:ad:9f:e1:55:38:9f:09:65:7f:cb:91:0f:
61:6b:b6:d0:22:c7:dc:f1:71:49:13:ea:29:d0:b6:9a:2a:95:
9d:26:c6:66:1d:61:8a:78:64:9c:48:52:c3:d0:a6:be:bf:2b:
12:3d:8e:a1:b5:c3:2f:2f:86:d9:72:fe:b1:45:d3:49:59:da:
03:a1:e8:9d:78:0a:51:19:a2:8a:e1:21:18:db:d0:96:24:8f:
16:39:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:04:17 2025 by rpki-client