Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: SuZ4gA57HWTCxgY940nHmSxBWRCeOjGByeyCkdsxB6k=
Subject key identifier: 05:7F:DD:0E:39:03:9F:3C:69:08:EA:5D:DA:05:FB:3A:4D:7B:22:58
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 01968F27BE5392E65B0543ECB038133DF0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 14AE
Signing time: Fri 02 May 2025 04:01:08 +0000
Manifest this update: Fri 02 May 2025 04:01:08 +0000
Manifest next update: Sat 03 May 2025 04:01:08 +0000
Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: oOTQjwRKX47PW5J6yOZXJyXXH69mRQDIM5YatKIxcU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:be:53:92:e6:5b:05:43:ec:b0:38:13:3d:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: May 2 04:01:08 2025 GMT
Not After : May 3 04:01:08 2025 GMT
Subject: CN=057fdd0e39039f3c6908ea5dda05fb3a4d7b2258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:17:1f:d5:ab:1f:9f:bc:16:9b:12:52:a2:
49:b9:ac:3d:11:68:73:d1:87:2b:bf:32:56:cb:12:
a8:d8:83:dd:d0:70:af:84:cd:91:c7:93:a6:b5:f8:
4a:f4:34:3b:c3:55:39:32:16:d4:cf:9a:c6:90:24:
32:af:80:b3:d0:1c:a9:92:3c:e5:40:16:91:1d:40:
02:f5:93:de:04:c3:bf:7a:7f:f5:77:fc:b7:80:32:
14:d0:09:c3:50:7a:de:3c:0a:3f:4c:10:9a:0e:7f:
e8:ea:5a:48:5d:3d:9f:43:0e:3a:73:9b:d9:54:db:
f5:8d:52:2d:15:da:fd:05:23:32:76:6d:54:3f:39:
1f:63:26:89:fd:84:14:9a:00:81:fc:71:a4:ec:3f:
e4:08:43:a0:5c:44:19:b0:57:7d:33:4e:f3:2a:2c:
66:ca:20:db:0c:f0:0b:fc:6c:44:b1:76:c1:34:ca:
39:62:5e:e4:7d:bc:85:13:df:7f:5b:d5:fc:85:72:
2e:a5:65:a1:9d:cf:42:c5:97:03:f5:3f:8a:3a:cb:
47:47:b0:92:02:17:e0:49:f2:5e:41:42:43:a6:cc:
02:90:41:2f:bd:db:a8:33:d7:a8:66:d7:a8:97:ab:
9b:33:51:e9:f8:04:e2:e1:b6:82:aa:e2:21:1b:28:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7F:DD:0E:39:03:9F:3C:69:08:EA:5D:DA:05:FB:3A:4D:7B:22:58
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1d:8f:b0:ad:0c:ca:bc:4c:13:75:19:8e:6a:90:a3:b4:ff:
b5:ba:43:95:46:e6:86:5c:f7:c6:aa:ad:5e:b1:4f:f9:4f:24:
ac:35:73:c8:58:ed:66:25:20:47:40:61:e9:03:57:39:e6:45:
77:a1:cd:03:63:c0:06:54:a8:0f:de:f6:61:05:e1:98:c6:08:
ac:af:0c:06:ac:13:ac:6c:c7:fb:d8:f3:26:2f:f0:e6:2c:e0:
2e:de:c3:04:6a:9f:71:3b:10:65:2f:de:c1:8d:25:fd:87:e9:
86:16:13:91:44:36:f6:9f:83:7b:6f:ca:27:b5:4d:ba:ba:8a:
7b:ac:c8:4e:98:1f:de:48:6a:aa:d8:9c:41:29:3e:50:b7:ff:
82:1e:7f:31:7b:3b:03:57:1b:d7:31:b7:56:cb:8c:b3:b4:8f:
7e:55:68:d9:52:e1:91:45:3c:b8:0c:a8:de:50:43:a8:e5:b2:
1a:9f:bf:45:54:92:e9:71:9d:8b:6e:9c:5a:c6:dd:2f:e5:4a:
51:58:53:a6:b1:5c:f5:f7:65:ad:80:88:0d:ea:e1:57:2d:51:
26:f7:d2:06:c8:8b:8b:ac:39:75:e3:c5:3c:48:22:36:b2:06:
f3:47:cc:9a:f2:68:3f:fb:0f:40:b0:14:6e:da:93:e7:89:c7:
27:3a:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:25:11 2025 by rpki-client