Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: 3PQ3Nj84idn86Z6WKdBsi4072NIzwLF1Tdkj+oHizHo=
Subject key identifier: 99:2D:92:E2:E6:3C:02:93:C0:D2:D4:E3:AA:63:70:39:30:CA:70:94
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 0196A766698A15F7EB9793294F72C29F89D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 04CB
Signing time: Tue 06 May 2025 21:00:28 +0000
Manifest this update: Tue 06 May 2025 21:00:28 +0000
Manifest next update: Wed 07 May 2025 21:00:28 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: OxFwabxTu6UJcJBnrRxoF3pIIQDVVBYwtfAuXu6wa4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:69:8a:15:f7:eb:97:93:29:4f:72:c2:9f:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: May 6 21:00:28 2025 GMT
Not After : May 7 21:00:28 2025 GMT
Subject: CN=992d92e2e63c0293c0d2d4e3aa63703930ca7094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:96:28:26:13:12:88:93:f5:7b:00:ec:06:
2f:dc:8c:c3:16:7a:9d:99:6a:23:5a:e3:dd:0a:44:
70:6d:69:b1:8b:71:9e:93:68:eb:0a:a1:80:96:80:
96:82:bd:a9:80:7c:b0:1d:46:25:4c:f1:6f:59:4e:
fe:16:bf:09:ed:a8:0f:7c:de:c2:36:14:6f:69:41:
6f:72:a1:37:bd:8f:1d:7d:12:9b:32:42:0c:88:38:
aa:68:79:a3:84:ce:8b:bd:f4:b4:63:64:c6:dc:12:
51:e8:c7:68:7a:9c:25:27:e7:0b:45:ea:5c:ab:1c:
f9:93:17:57:dd:76:17:b0:b9:05:07:0b:58:f2:ad:
d3:19:68:7e:c9:e3:92:80:7f:eb:c9:72:ee:b4:6d:
73:1d:f8:a3:87:8a:75:81:53:a9:2d:35:8f:8a:fc:
8b:f7:f3:ad:ac:f2:d3:f3:51:e0:42:02:b8:89:2b:
40:0f:e0:d5:a2:22:75:03:17:8b:7b:5c:90:51:53:
12:f3:9d:4c:94:0c:d5:48:91:ac:bb:a9:d8:4f:2b:
20:30:ba:a0:a0:33:60:94:f7:b9:20:a8:15:9b:62:
89:63:7a:55:14:a5:5f:cb:88:b2:30:4c:85:a5:b4:
c0:a4:e0:62:6a:e8:7a:45:37:8d:80:a2:ea:8f:52:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:92:E2:E6:3C:02:93:C0:D2:D4:E3:AA:63:70:39:30:CA:70:94
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d6:02:eb:b4:13:e8:87:93:49:17:3a:63:5d:4f:11:22:b5:
f7:b4:86:7b:12:b8:f7:1e:87:f4:17:b0:4c:fb:33:94:35:0b:
49:ea:ed:cb:dd:cc:8c:f2:4b:16:96:9b:a3:fc:5d:d1:21:c2:
6b:cf:e8:8e:8d:e8:a0:04:b7:d7:8f:8e:db:f9:6d:15:d0:d8:
fd:c0:e8:17:c0:96:8d:36:d4:ea:42:16:ba:f5:9d:fb:de:aa:
7b:67:a5:45:79:20:86:f4:f2:a7:99:b7:9e:58:07:0e:5e:7d:
1d:b0:ef:9e:56:7b:7e:d8:89:01:19:85:51:5a:ed:5b:12:12:
59:5b:d7:16:1b:14:4f:2d:e1:bd:5f:6a:6c:dc:7d:d2:10:12:
88:ef:d7:ea:f3:89:96:e1:22:71:3b:94:35:9b:16:bf:cb:0a:
d7:81:5d:3c:98:c9:19:b1:24:d9:47:21:b7:b8:85:f7:03:06:
08:98:94:cc:21:cf:4e:1c:7b:84:a0:14:e8:e2:66:12:d6:ed:
dc:f2:9e:39:ef:43:4d:d7:86:c3:9f:0d:7c:71:98:46:ce:37:
10:6a:3d:2f:d2:c6:19:f3:ae:b2:e8:f4:f8:4d:55:ad:e3:ae:
51:fb:35:a4:fb:c2:cc:5b:4c:8f:18:28:cc:14:b6:78:d7:82:
f3:cf:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:16:12 2025 by rpki-client