
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File: jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier: lkLee68wxWRSdKlEjkxEfR17FAXd1UW5lDTMtRS1CVU=
Subject key identifier: D1:97:24:1D:FA:4B:1F:2E:B7:5D:A5:EC:AA:1F:80:2D:A2:60:31:5F
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial: 019674C25C97D9FC0C498901B1787BECA373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number: 0C
Signing time: Sun 27 Apr 2025 01:00:16 +0000
Manifest this update: Sun 27 Apr 2025 01:00:16 +0000
Manifest next update: Mon 28 Apr 2025 01:00:16 +0000
Files and hashes: 1: M-gXFd7N6RQlOS3FU49vKYSovUs.roa (hash: 3OvRn3YgHg1m6lctKtBNgoRt6uS+lTyZBl7EBoP4/D0=)
2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: /z1K+dXT+l0LXeAfWv3rBeQuNiCx2MjCWCwuJUVCg5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:5c:97:d9:fc:0c:49:89:01:b1:78:7b:ec:a3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Validity
Not Before: Apr 27 01:00:16 2025 GMT
Not After : Apr 28 01:00:16 2025 GMT
Subject: CN=d197241dfa4b1f2eb75da5ecaa1f802da260315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:4c:f6:18:4b:77:84:9a:22:69:71:fc:05:
ab:ff:98:4e:76:93:c0:f7:f4:dd:80:ac:20:2c:a2:
8e:65:c3:b8:01:e4:46:07:00:95:36:05:12:6f:c9:
a6:ba:1c:bf:0b:90:a3:a9:0a:76:b3:13:73:ba:08:
19:55:9b:5c:01:6f:53:fb:c0:cb:b3:a9:82:ad:ca:
f9:f2:d5:af:fc:03:8b:5b:fd:a6:9a:0f:4a:70:98:
28:3d:1d:9d:b2:6f:a8:96:02:13:46:14:5c:99:7c:
10:eb:5e:c3:16:f7:23:9c:9e:d7:59:39:0b:43:10:
85:e4:c4:ec:b7:42:e7:f9:51:54:3e:0f:66:8c:03:
6a:b9:79:99:ec:07:3f:1d:41:6b:67:1b:40:a1:10:
a0:f1:4e:14:57:28:e2:73:10:21:44:87:de:e8:cd:
bc:a1:02:27:63:06:75:61:fe:7c:04:0b:8d:b9:b3:
ff:2f:b3:0b:51:a6:a6:7b:94:ab:e2:ed:39:e0:11:
d4:24:d4:ef:20:ba:86:25:20:65:63:66:55:fc:f7:
df:8d:6a:83:9b:ac:44:c0:60:ff:df:18:63:45:2f:
56:5a:66:ab:69:25:e2:ef:38:e8:2d:5a:4e:14:7e:
b0:e8:c3:d5:5e:13:05:d8:b4:74:31:dd:f2:5a:f6:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:24:1D:FA:4B:1F:2E:B7:5D:A5:EC:AA:1F:80:2D:A2:60:31:5F
X509v3 Authority Key Identifier:
keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c5:6a:92:3b:db:da:a6:9f:09:c7:e8:44:50:ec:39:4c:1a:
02:3f:de:22:04:2f:0c:b9:30:fd:3b:39:ae:f9:7e:68:7b:34:
d1:15:77:14:eb:57:3a:79:31:2a:ad:7e:74:f8:08:72:2f:2e:
45:15:e6:8c:b7:1f:da:8e:60:05:ef:8b:f2:76:18:8c:fd:9f:
30:6d:4e:34:a0:72:22:bb:70:1c:e4:1b:d5:43:df:29:6c:54:
79:1a:e0:35:58:86:32:01:ae:ba:6b:d5:bc:23:fa:40:9b:01:
69:a3:fe:8d:09:c7:7b:98:e4:50:01:4a:98:88:f5:e8:fa:53:
9b:96:98:b3:92:37:6e:36:95:24:a2:1e:bc:5f:96:0d:91:4a:
d1:ef:53:07:f1:76:30:32:81:7b:95:1b:d9:16:06:74:72:60:
d0:00:04:db:ea:a1:25:e2:12:5d:51:fa:12:6c:fc:f1:a6:7a:
84:1b:64:ae:bf:30:77:b5:7f:c0:e0:9f:ed:6a:ea:ad:71:bc:
97:d7:8e:75:ca:a2:35:4b:ae:d9:5f:b8:09:31:39:62:05:74:
2a:ca:01:2c:d6:b6:1d:c7:63:ef:5a:bb:56:40:f2:38:c5:ba:
22:55:30:db:13:b0:6b:53:e3:6d:70:7e:28:ea:42:f3:99:de:
c3:fb:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:14:25 2025 by rpki-client