Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: /RSE+N8gDZ0cKEs/H1Rk6JUA+1icsd0m7H+ORtzUBUs=
Subject key identifier: 0A:9C:92:54:93:18:AD:A3:EB:8C:4C:54:B6:41:AD:BC:F3:EF:40:8C
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 01968021CA4951AFA1571FAECA913B01604D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0B0D
Signing time: Tue 29 Apr 2025 06:00:20 +0000
Manifest this update: Tue 29 Apr 2025 06:00:20 +0000
Manifest next update: Wed 30 Apr 2025 06:00:20 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: PVihuyc+zWjUUKDEYtrOHkG5CXRUEVM5z/r5ZlNTnRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:ca:49:51:af:a1:57:1f:ae:ca:91:3b:01:60:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Apr 29 06:00:20 2025 GMT
Not After : Apr 30 06:00:20 2025 GMT
Subject: CN=0a9c92549318ada3eb8c4c54b641adbcf3ef408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:0a:a7:c6:ff:7d:57:28:65:07:bf:2d:9a:
4e:df:5a:53:a3:d0:f8:3d:4c:aa:11:3b:21:db:21:
a1:f3:41:ae:d6:0a:3d:36:2c:87:80:94:d4:c6:58:
06:c2:10:94:46:69:77:36:12:92:c1:0f:cf:98:95:
18:ba:8d:04:4d:9a:99:6c:f5:5e:f7:87:00:f6:ba:
8b:20:6c:6a:81:bd:62:99:ef:fd:56:75:49:1d:50:
c0:23:d1:b1:dc:65:81:95:e9:ea:17:73:60:d2:a4:
c0:05:74:d6:b7:5b:73:dc:e3:32:80:95:33:35:60:
f8:0e:d2:b2:60:c2:61:7a:e1:05:46:36:b8:a4:52:
f8:bc:5e:57:4b:0a:98:cb:78:22:a9:f3:0a:fb:d6:
40:e3:8c:7e:32:59:45:53:63:1a:aa:a6:9a:48:78:
51:ae:15:db:c1:3a:9c:6d:b7:14:17:3b:6e:2b:0c:
72:a5:70:a8:a7:7f:f0:9a:00:cc:1e:ea:1c:9e:1a:
2c:2b:8f:66:cc:95:da:73:aa:61:ef:a2:8a:95:1d:
87:b1:c4:17:58:51:49:b9:9d:34:0f:21:bf:ac:09:
74:7b:bf:e4:a9:f6:ec:5b:06:ad:40:fd:0b:1b:c5:
3c:36:55:89:13:54:e6:f7:4f:36:6e:3e:a9:fd:73:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:92:54:93:18:AD:A3:EB:8C:4C:54:B6:41:AD:BC:F3:EF:40:8C
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a6:db:d8:91:3f:3b:12:1b:0d:8b:d3:51:e3:d5:f8:fb:a0:
48:b7:07:ce:93:69:3c:a9:dc:1f:cb:8e:f2:ec:a9:1a:e4:61:
ae:f7:34:0d:03:12:0a:52:3c:47:58:08:93:a8:c2:db:5e:5b:
de:59:45:40:73:99:db:65:56:e8:91:9b:4f:40:c2:51:21:32:
77:cf:7c:75:2f:86:25:d8:11:99:c1:55:ff:44:a8:98:ea:a7:
91:35:74:70:14:34:76:2f:95:68:38:e2:d8:a6:b1:4c:80:55:
bb:2d:62:09:ca:47:c6:ee:39:a8:e7:d1:1e:2b:f3:72:62:74:
7b:d5:e2:9f:41:2c:19:97:de:9f:f1:12:32:ff:08:dd:15:fe:
f1:ab:3e:72:b0:23:02:f9:22:6d:68:0d:bb:bb:83:f6:0b:46:
3f:14:f6:97:ea:c0:4e:85:ea:bb:0d:d9:d2:a9:f3:0e:9d:8e:
af:ad:86:e1:b4:67:50:52:12:15:6d:35:63:ad:b6:93:e6:b8:
80:de:f1:8f:ff:97:4f:01:a8:b4:1b:90:e8:15:b3:8b:09:6f:
c7:d0:d6:35:7a:81:98:74:fa:9a:fe:ea:f3:59:6e:b1:81:5f:
cc:3c:5c:d0:e3:c8:9c:2e:96:f4:c5:1a:6e:b6:19:1b:06:c0:
40:1b:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:43 2025 by rpki-client