Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: z8Av60WjUdP3LZPhLU3F/M+8dY9mkR4lmYKR8LPs10c=
Subject key identifier: 83:74:B3:6F:D6:76:96:1B:49:EC:62:82:FB:71:D6:95:49:A7:D3:6E
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019677FA9A9C91858A69828697A8DE4C570C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0933
Signing time: Sun 27 Apr 2025 16:00:34 +0000
Manifest this update: Sun 27 Apr 2025 16:00:34 +0000
Manifest next update: Mon 28 Apr 2025 16:00:34 +0000
Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: Bp/Xq3tS67vYJZGt7ztcSIjYDlo5JOJyXTkRXgm1VwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:9a:9c:91:85:8a:69:82:86:97:a8:de:4c:57:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Apr 27 16:00:34 2025 GMT
Not After : Apr 28 16:00:34 2025 GMT
Subject: CN=8374b36fd676961b49ec6282fb71d69549a7d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:3b:74:0a:43:84:54:b1:8e:04:2b:69:40:
9e:d7:93:2d:c1:76:77:be:64:f2:52:19:dc:fe:1a:
72:16:d2:02:c8:fb:44:06:2d:6a:80:34:27:44:57:
f9:c3:89:d6:cc:e2:32:43:fc:48:cc:31:c0:6a:2a:
f0:74:a5:ff:75:bb:10:9d:ec:a3:11:33:41:a5:76:
76:be:a0:2b:1a:92:63:bf:25:0f:ad:f2:0c:7e:c5:
29:97:ec:c2:21:db:eb:8e:b6:45:7e:ab:f9:5d:0a:
67:41:dd:a2:1b:ad:69:33:06:bf:04:ca:3a:c1:ee:
4a:c2:a5:22:7f:38:0d:92:44:b7:53:8c:16:0e:3f:
c2:9d:63:02:48:bb:86:93:31:30:b8:8c:7e:56:9e:
d8:bc:79:12:c9:33:ed:0b:db:41:fe:b3:3f:d9:78:
a6:6e:b0:d0:69:61:95:c7:dd:d4:75:18:48:d6:ea:
25:1b:07:7e:d6:a0:ed:b6:9b:04:1e:1a:d8:33:e1:
62:50:94:ab:5b:eb:43:d8:8d:e1:0d:dd:66:ea:3e:
72:fa:57:57:9e:a0:ef:1e:c5:c6:cb:91:3f:86:b5:
68:f1:db:b5:de:4a:f6:a4:26:b6:7a:28:42:06:2c:
d1:11:ee:ae:ee:1e:19:21:d4:50:ee:4b:34:1b:82:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:B3:6F:D6:76:96:1B:49:EC:62:82:FB:71:D6:95:49:A7:D3:6E
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:d9:a2:13:01:00:e0:61:63:90:99:de:5b:a3:c1:9c:ff:
31:5e:0e:bb:ce:3a:43:a4:57:73:53:eb:8c:84:6e:4c:b6:45:
72:4e:ea:a1:f1:e9:8a:7e:12:73:7f:7c:86:df:e1:3c:02:d9:
1d:8c:94:fc:79:25:6a:8f:9f:0a:83:4c:9e:68:09:20:1d:2a:
5f:9e:dc:f5:d6:2f:22:64:e4:08:94:c0:55:cf:df:a0:c8:09:
97:24:51:bf:64:3d:44:b1:ce:be:7e:2b:35:b8:b6:5f:68:9b:
58:01:54:b2:c1:ea:e1:f5:5d:50:e6:ae:35:42:2b:c0:49:d9:
a2:8e:8e:23:8d:38:65:a6:02:d6:bd:68:2b:de:fa:69:2e:21:
4c:a0:b3:5c:36:11:bc:8d:18:44:cc:53:7e:97:ae:54:26:f4:
f0:f0:ac:4d:b7:e7:00:d9:bf:13:d7:5c:c6:e0:ae:bb:a9:b3:
3e:23:80:3a:c9:36:f4:58:f7:bd:98:b6:cb:c6:56:6d:f2:56:
32:87:4a:5e:c8:14:0d:86:34:4a:32:7e:ad:5c:ab:5b:20:28:
75:2c:fb:f7:73:3c:0c:a1:2d:0a:92:ae:f5:d2:d4:4b:19:ee:
b5:79:0f:52:d3:eb:10:1e:57:9c:ec:c1:a5:65:39:bf:00:80:
41:1a:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:34 2025 by rpki-client