Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: 82ONDKiPST1yKBta4r+NGVvWwYNXO3JtE4XpLDIO7I0=
Subject key identifier: 12:09:42:AA:9C:73:01:58:CB:30:B9:23:25:8F:DD:2B:53:89:02:03
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 01967AC4F2CC162A92880A83040CB84FF110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 037F
Signing time: Mon 28 Apr 2025 05:00:49 +0000
Manifest this update: Mon 28 Apr 2025 05:00:49 +0000
Manifest next update: Tue 29 Apr 2025 05:00:49 +0000
Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: 8TYkCancLzxEuLNpUAmiW0vKMKs+zEtycwTHNeouKh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:f2:cc:16:2a:92:88:0a:83:04:0c:b8:4f:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Apr 28 05:00:49 2025 GMT
Not After : Apr 29 05:00:49 2025 GMT
Subject: CN=120942aa9c730158cb30b923258fdd2b53890203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:d8:dc:ff:71:6e:8a:ca:9f:ff:a4:53:eb:
86:d6:96:3e:25:f1:7b:b2:9b:4d:cf:b4:58:96:d6:
98:d0:70:76:7e:81:2a:8e:20:18:96:64:5d:fb:5b:
9d:56:66:1a:fc:24:eb:da:c5:44:63:19:51:1e:b4:
41:ec:a8:f3:75:af:c5:12:e5:33:71:10:a4:08:90:
0c:d7:8d:8b:d9:86:c7:6e:7b:a2:9c:04:ab:b4:a8:
47:3c:17:3a:3f:44:16:3f:32:67:0e:45:ad:5f:06:
12:64:76:13:10:23:c8:13:05:f4:a8:9b:b3:a1:63:
e1:75:2a:48:b5:23:0c:af:c9:61:e7:1f:08:3f:d8:
fc:bc:16:96:d4:43:32:d8:8e:c2:22:f2:70:f7:d0:
56:58:ce:c0:44:4b:11:31:a1:84:fa:89:8a:35:a8:
8d:90:6e:b1:8d:63:bd:de:f9:70:f0:59:79:c8:de:
e2:e7:4a:ef:62:ab:fa:96:85:68:09:43:5e:2e:21:
3d:6f:3e:92:04:ae:73:f9:f1:20:b3:8d:6c:7d:22:
c8:1f:5c:de:55:8b:a1:43:c1:2b:4d:b5:d7:6a:86:
85:c8:3f:93:a0:e0:4a:75:da:6e:20:ff:84:be:f9:
2b:38:3f:00:a9:93:30:7f:24:19:06:63:fb:ed:de:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:42:AA:9C:73:01:58:CB:30:B9:23:25:8F:DD:2B:53:89:02:03
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3d:54:36:48:72:1e:48:54:99:67:a3:7a:73:4e:4d:b6:76:
49:eb:df:8f:26:11:47:79:75:12:73:1f:6b:25:80:53:08:af:
81:ab:59:d7:ee:3f:44:a8:f4:bb:6a:35:3e:62:d5:0e:4e:30:
76:16:b5:c3:4c:c5:a4:32:9c:46:82:d7:41:33:e3:a6:ea:37:
a3:32:70:6a:ed:15:ae:0d:f6:ea:b0:aa:8e:7d:a9:89:7f:f3:
81:35:94:f3:50:1c:ad:b6:50:61:ba:9a:a0:ff:1c:5b:cd:ba:
08:4a:1b:05:33:f6:37:c7:86:32:bc:53:1c:c5:5c:a5:de:8b:
d1:68:9f:ae:86:d2:1a:bd:26:98:b4:b1:12:25:9a:4e:1f:53:
e5:e0:c7:81:d6:36:bd:ec:5e:84:c4:0e:ef:b9:ce:2a:a3:f3:
11:64:50:00:57:ad:6e:bf:a0:d7:2d:25:91:b3:f8:48:41:7d:
7d:2e:cc:26:e2:8c:36:c3:45:e8:f9:40:f7:5c:21:4a:94:64:
07:46:e2:95:18:e5:7a:f5:27:6f:1b:01:ca:4b:f1:e7:cc:22:
ca:b7:22:62:dc:c1:1e:e6:d4:c5:b0:93:14:2f:2f:45:1d:0c:
d4:cc:fd:9e:9b:9d:9d:3f:40:a1:a1:c2:30:fd:6a:9f:0e:13:
3f:1e:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:02 2025 by rpki-client