Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: rfCY3s2lJkcPoqc7kNBijnTVI2HiZk8W9DuN+61VwbM=
Subject key identifier: 6A:42:88:C4:03:79:24:0C:32:DF:5A:4A:97:66:2E:7D:81:80:DF:14
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 01967755C57AFDA91B97A294D8ABAA2304E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 13:00:31 +0000
Manifest this update: Sun 27 Apr 2025 13:00:31 +0000
Manifest next update: Mon 28 Apr 2025 13:00:31 +0000
Files and hashes: 1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: cs9gfQ/jJXInKG1jeN0crcn7mSxmLSZHqG9NV5vxKWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:c5:7a:fd:a9:1b:97:a2:94:d8:ab:aa:23:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Apr 27 13:00:31 2025 GMT
Not After : Apr 28 13:00:31 2025 GMT
Subject: CN=6a4288c40379240c32df5a4a97662e7d8180df14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:ef:4d:1c:81:0b:32:ec:87:5d:3f:94:90:
1e:85:9d:5a:46:6e:4a:5b:c2:83:57:ae:91:71:7a:
df:d0:20:22:4f:c6:80:48:a4:0a:a3:fe:48:e4:a0:
50:81:b0:b0:1d:2e:f3:20:24:88:34:ab:21:99:dc:
39:78:0d:08:77:18:7e:e2:2a:22:28:91:41:13:e3:
8b:a5:82:46:da:cd:f0:ac:99:86:9a:b1:33:32:b1:
67:a4:22:a6:76:15:98:0d:23:5f:b0:e6:f5:7c:43:
53:1f:09:eb:64:6c:2f:f0:a4:a6:34:1b:56:ea:ca:
b0:b9:6d:4e:0d:91:2f:ef:e4:65:71:39:17:1b:de:
85:73:7e:83:12:d4:fa:c6:bc:e2:8c:30:39:97:a3:
c8:e2:27:24:57:a0:79:56:a0:03:a9:84:8b:c7:37:
3b:7f:7f:0d:a4:05:db:41:5a:b6:f2:f8:23:83:a0:
96:92:6f:85:cf:17:5e:92:66:be:cd:ce:4e:e7:f6:
2e:11:b6:f1:c4:90:fe:c5:68:e4:85:0e:69:a2:53:
08:fd:34:0e:06:32:ba:bc:8a:91:c1:50:a8:36:70:
81:40:64:f8:cf:f9:d9:45:c1:ab:40:e7:8f:0e:60:
0c:5b:22:b4:43:51:e7:6e:76:ae:50:cc:e5:bb:2d:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:88:C4:03:79:24:0C:32:DF:5A:4A:97:66:2E:7D:81:80:DF:14
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:98:49:0b:4a:2d:46:fd:10:cb:de:02:af:f3:4c:7a:67:62:
b4:3d:6c:df:22:81:73:27:50:70:89:b9:2c:d9:04:ef:46:e4:
c0:7d:ff:c6:76:ab:be:84:ab:cb:0f:d1:3b:31:12:b2:86:58:
33:19:37:3d:5e:82:8d:2b:6a:f4:63:fc:bd:a1:a4:80:36:59:
7a:ab:1d:e4:bc:e7:41:af:56:89:22:9d:1c:8c:56:e1:24:99:
93:08:3f:45:ce:16:da:c5:13:55:c7:ca:29:6b:37:e5:1d:0e:
95:81:53:ea:71:3a:a3:74:6d:30:60:02:82:91:c3:dc:01:71:
7f:d9:4f:13:ad:a6:83:9b:47:7e:a9:32:3f:8d:51:60:8d:ab:
3a:9b:5c:a3:d3:17:05:48:37:e1:e4:d5:5e:85:3d:d7:2d:68:
3c:eb:d0:38:84:f9:bb:df:89:4f:84:e2:be:71:1d:f6:5a:1c:
d1:dd:08:1c:15:12:ba:d6:c0:7f:66:4e:d8:04:e4:51:d7:e5:
76:f8:cb:58:ac:fe:ad:ee:63:3b:78:6a:3f:32:4d:eb:53:bd:
ac:b3:37:f3:9c:35:50:51:89:14:3d:22:ca:0e:0c:36:bf:d9:
c3:c4:79:31:d7:9d:c4:b4:2e:bf:1a:e5:06:11:6e:b4:d9:ee:
a9:f6:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:37:41 2025 by rpki-client