Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier: AWyeWZFx/ipZ0qVLdAlORnNOJ1DefAq+j79aETbrC1c=
Subject key identifier: E9:83:7F:DE:3C:17:C9:3C:44:F3:EC:8B:24:63:48:BE:C6:13:38:6D
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 01967C44E65BF8A43992BC30745DA0DA4E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number: 12F0
Signing time: Mon 28 Apr 2025 12:00:12 +0000
Manifest this update: Mon 28 Apr 2025 12:00:12 +0000
Manifest next update: Tue 29 Apr 2025 12:00:12 +0000
Files and hashes: 1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: NbDzJ/oLEy51WGg7hdiclJzgsYEcCmQUUzmnaPiluxo=)
2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=)
3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=)
4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=)
5: oLsRck0rfRJTe_DlIobAHiPybik.roa (hash: HITR6UDaTE4KoI724hxLpPj2e++WnzdsOgqIY7veXg8=)
6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:e6:5b:f8:a4:39:92:bc:30:74:5d:a0:da:4e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Apr 28 12:00:12 2025 GMT
Not After : Apr 29 12:00:12 2025 GMT
Subject: CN=e9837fde3c17c93c44f3ec8b246348bec613386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:1c:4b:0e:c7:cf:6a:22:e6:fc:34:31:2e:
80:4a:35:7f:6f:97:d7:55:b2:99:04:30:1d:a8:0f:
0e:95:9d:82:c8:cc:81:cc:61:b2:69:cd:2b:8c:19:
aa:3e:ec:10:bd:34:c8:35:56:2a:31:06:7c:9e:d7:
4f:55:76:5f:3f:a3:4d:cd:84:23:4f:92:da:9c:1e:
13:71:f6:f1:e7:97:a8:a8:9f:fa:27:c0:d1:53:ab:
e8:71:09:4a:d1:68:00:9e:0d:c3:4d:f6:c5:16:b5:
cc:71:a5:e5:56:5b:2d:ee:45:a4:cf:d6:de:e5:68:
15:0b:04:f5:06:c3:2b:0d:ac:b2:17:9c:78:ba:26:
fe:d9:32:25:67:ec:7a:97:b5:b5:93:ad:4f:cc:0f:
e3:d7:85:9b:90:01:a2:28:4d:c3:8f:60:4a:9e:88:
9f:23:61:4e:7b:c3:03:65:b6:70:3c:13:09:ea:1c:
16:01:b6:1f:c1:7c:1b:30:62:76:c0:f0:06:3b:81:
46:7e:59:ef:8b:c4:54:d8:ca:a2:6e:f7:36:a9:7a:
7f:67:74:ff:11:23:dd:97:25:87:e8:1f:a6:fb:7f:
12:c5:97:38:7f:46:b0:d3:71:43:a7:57:8b:55:21:
59:5a:2e:23:43:f2:30:21:0e:7a:87:b4:7b:fd:16:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:7F:DE:3C:17:C9:3C:44:F3:EC:8B:24:63:48:BE:C6:13:38:6D
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:52:36:77:03:10:0a:be:23:de:30:91:ba:3c:76:8a:7d:6a:
49:67:fb:83:eb:f3:e6:92:ba:cb:84:e7:79:62:41:73:21:fc:
28:08:74:d6:f3:5c:e1:df:f2:46:fb:82:b7:9d:9f:8c:9b:ca:
73:aa:de:84:c5:b6:da:e2:3f:76:7a:28:e3:2b:84:d2:00:0c:
e9:e3:9d:1d:78:87:d4:d9:52:60:6e:f2:33:16:4a:00:66:b8:
2e:c2:d5:e8:83:5a:aa:eb:87:91:b7:ae:92:c9:2d:ea:be:07:
fc:67:a6:9b:62:68:f4:ad:30:23:89:05:82:0d:5b:eb:f9:71:
e2:7f:a2:34:e2:61:bb:63:c1:87:d4:a4:cd:69:b8:11:eb:23:
aa:4f:6b:79:a0:e6:75:a8:6e:e2:40:4a:25:8b:47:7e:fd:e1:
7f:af:6a:bb:22:34:bf:e6:c2:08:f9:a4:4b:a9:58:7b:55:af:
b4:e9:da:c6:59:76:97:56:b3:ca:38:aa:cf:1b:15:26:57:66:
cc:0b:4b:09:69:19:49:a7:04:a1:01:a6:b9:e5:91:c2:34:63:
5b:ad:ec:1f:0b:69:3d:0f:56:56:fd:5f:12:d9:b1:75:5e:c9:
e5:fe:e0:b7:bc:f7:f5:54:e3:4b:d1:f6:d4:19:bb:e1:17:46:
52:cd:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:55 2025 by rpki-client