Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: C9D5KVTJAWdwK2DdPl+O30GNPQt9gs1+gMSFPpXq7Bg=
Subject key identifier: DB:0E:5A:13:18:D6:6A:FC:F1:A8:49:73:11:0D:99:74:42:03:50:88
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 0196B935D0F843C56FCF5EBE1B8B8D785E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 0493
Signing time: Sat 10 May 2025 08:00:33 +0000
Manifest this update: Sat 10 May 2025 08:00:33 +0000
Manifest next update: Sun 11 May 2025 08:00:33 +0000
Files and hashes: 1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: c4N1PbY10GgL2VcrzvSW5c6tqMkzXmUnp0EfSK98vmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:d0:f8:43:c5:6f:cf:5e:be:1b:8b:8d:78:5e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: May 10 08:00:33 2025 GMT
Not After : May 11 08:00:33 2025 GMT
Subject: CN=db0e5a1318d66afcf1a84973110d997442035088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:21:7b:64:f7:6d:3a:08:13:15:9f:47:08:
b3:18:d9:26:75:0b:20:92:dc:5a:50:d7:20:82:f1:
61:83:50:38:38:e7:4e:78:69:73:22:7e:a9:88:5c:
79:9e:2c:c4:9f:8d:d6:59:a8:5f:b9:6a:ee:5c:ef:
53:64:29:34:37:a7:70:76:89:34:16:c4:d9:f4:24:
88:68:48:80:bd:69:a1:cf:fc:3c:b4:ad:dc:7d:94:
9a:b5:38:60:e1:86:90:a3:60:8b:05:95:d2:6b:1a:
7a:ef:ac:51:45:e0:48:f5:de:cc:19:3a:e9:de:18:
8f:2a:81:dc:ab:80:4f:a9:6c:da:ab:cc:e4:ba:33:
57:87:23:45:fa:87:77:80:1f:aa:19:4b:cd:3f:07:
57:54:93:17:6a:f4:80:09:09:79:ff:31:18:7b:92:
f0:b7:6a:60:d7:d0:81:e1:93:87:78:bb:d1:0e:47:
6c:9e:20:dc:9b:c6:81:ad:10:25:6d:dd:29:dd:ae:
fd:87:df:22:54:76:a2:5f:97:be:de:a6:ff:80:71:
11:3d:e3:12:97:6b:17:84:b3:92:e5:b0:21:cb:ed:
c7:fd:ee:ab:0b:e4:d1:cc:64:50:22:5a:a6:4f:9a:
20:c7:42:77:b8:09:e0:ab:91:11:4a:b5:8e:63:85:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:5A:13:18:D6:6A:FC:F1:A8:49:73:11:0D:99:74:42:03:50:88
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:58:a2:23:70:c9:94:e6:64:fa:c9:a1:bd:01:9f:81:0b:98:
72:b6:ce:4c:90:b5:ea:4e:fe:c4:d1:7c:25:ed:f7:fc:0d:4f:
0c:7f:29:fe:cd:9d:67:2d:79:a0:ff:55:db:18:42:b3:b3:7d:
92:f7:3c:b3:22:e5:e9:e8:67:5a:37:fc:4c:00:ed:8c:0c:03:
b5:54:39:cb:70:49:5c:9c:3c:b1:94:c6:75:eb:08:b5:03:96:
bd:62:66:bd:90:76:6b:6d:ce:ff:ba:4b:ba:fe:bb:a5:14:a2:
09:19:09:59:ca:4d:74:b0:7f:21:61:34:20:cd:11:f7:6f:77:
c5:b7:8d:4a:3b:78:f3:03:e3:2f:e4:4a:34:d4:fe:09:ba:5b:
f9:1b:e3:d7:1f:01:21:fa:00:33:bd:c0:81:79:fb:d5:ec:38:
d3:fa:66:0a:df:91:d0:68:8e:1c:47:be:f9:06:9a:ed:39:cd:
1b:33:98:65:f5:8c:af:07:f3:ca:ec:51:d0:3b:41:2f:6e:ab:
1f:2b:7c:6c:a3:8a:35:f1:1c:5c:9c:bd:73:1a:b3:72:2c:ff:
57:b1:f6:89:34:25:61:47:fe:03:f8:db:3a:a3:70:aa:df:f8:
9c:01:f0:e9:c2:8e:7e:74:65:24:a0:aa:b7:5a:a0:23:85:82:
24:81:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:18:17 2025 by rpki-client