Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: FrYGqCF4L/ZxxkE7lrmW8ekFR1JlSoB6QzaIBYNGN5w=
Subject key identifier: F1:77:97:E9:CB:FF:5E:85:AE:4A:CB:D3:82:95:D3:54:89:A5:48:31
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 01968134723BA9E443A79A34CCDB8D214C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 11A9
Signing time: Tue 29 Apr 2025 11:00:20 +0000
Manifest this update: Tue 29 Apr 2025 11:00:20 +0000
Manifest next update: Wed 30 Apr 2025 11:00:20 +0000
Files and hashes: 1: SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa (hash: FllvrAA0IFuRu04U/PVVcunONsM/J0wPDkjc5E97TCo=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: KO814JvlKohiOD8URvWC0NFY7rF8ePGdAM9ZpagaNDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:72:3b:a9:e4:43:a7:9a:34:cc:db:8d:21:4c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Apr 29 11:00:20 2025 GMT
Not After : Apr 30 11:00:20 2025 GMT
Subject: CN=f17797e9cbff5e85ae4acbd38295d35489a54831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:23:3a:71:bb:7e:a2:e2:08:2f:28:6f:13:
cc:c6:91:e9:1a:9b:80:ba:eb:7e:65:26:77:50:59:
2b:66:43:5a:78:63:99:02:5d:b3:d1:bd:b6:c6:07:
73:e5:42:dd:c4:31:47:31:53:22:4e:10:2f:b6:67:
88:80:a6:85:a1:d3:a8:63:45:a4:ca:f6:8b:9e:17:
af:cc:60:b5:f0:11:35:de:00:dd:ee:ec:43:24:ef:
e0:e3:b0:f5:52:5a:19:6d:ab:e4:e4:2a:ee:12:de:
05:42:5f:f1:15:34:93:ae:1d:d7:31:0f:aa:1d:14:
73:4d:31:5f:64:7f:7b:9c:1c:fd:42:df:96:5e:c9:
fa:85:59:fa:bc:1b:dd:bf:49:3f:ef:48:bf:db:19:
03:66:69:55:d9:d0:8b:b9:d7:6d:20:6f:9a:97:2b:
7f:ca:2d:b6:d7:c9:fd:d3:e4:77:1e:6e:be:cd:31:
58:00:7f:2d:b7:e7:bc:ed:bc:7f:d3:cb:cf:51:c7:
00:27:aa:52:fa:85:20:45:48:d8:d8:51:d4:da:67:
a9:00:39:82:42:de:fa:1e:1e:75:81:16:df:71:f6:
d2:74:f5:af:4f:1c:cb:63:df:b2:aa:ec:17:3e:f9:
df:6a:ba:8b:64:c0:b9:d7:1d:64:59:81:b0:69:a8:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:77:97:E9:CB:FF:5E:85:AE:4A:CB:D3:82:95:D3:54:89:A5:48:31
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:b0:13:57:55:9e:cf:ca:c3:cd:c3:ba:be:e6:17:8b:14:da:
62:c5:70:06:c1:12:f3:23:af:dc:af:0b:b2:84:e0:c2:8f:01:
76:5c:d7:c5:e1:5d:35:33:76:65:ef:42:3e:45:b0:96:e3:d1:
5a:10:a6:6d:bb:c7:63:2b:dd:ae:cd:a1:30:70:bc:98:32:a4:
6f:9f:49:d4:27:aa:95:a6:4d:4a:47:09:60:a9:83:01:80:ee:
c6:d5:22:80:57:d3:a7:ab:f4:25:f2:08:c4:8c:03:55:6a:51:
71:cc:68:36:95:d8:a4:05:f6:ee:6d:e1:3a:a7:a8:f6:5f:a4:
2c:89:2e:12:0b:60:a5:df:8d:dc:fc:b8:92:c3:42:1b:c5:90:
e8:79:70:10:ea:1d:90:15:a6:03:7b:79:9e:01:1a:6e:85:17:
42:e2:73:98:29:ec:70:e0:72:9d:4f:9a:8d:aa:cd:97:ab:de:
9d:9a:0d:65:03:04:f6:37:0f:00:f5:ae:3c:ef:67:ff:1f:f3:
0f:9b:1a:5c:91:00:06:6b:a3:50:2b:a9:0b:48:ad:88:ce:07:
e9:ad:0f:48:ef:6a:84:53:8b:0c:f1:79:24:28:aa:fd:43:0f:
83:ff:38:05:84:ee:7f:64:04:6a:f1:94:a9:d1:aa:b8:14:7d:
12:ad:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:40 2025 by rpki-client