Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: 8w5/lCf7VvsjFFyFYRJnxeoRKhP3cEb350wI52Fn4oU=
Subject key identifier: D5:89:E8:6B:8E:8E:76:CB:46:55:BE:34:3A:C8:B8:75:51:57:57:55
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 01967FEB39965D42BE47B9BDA68BD12DFFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0716
Signing time: Tue 29 Apr 2025 05:00:44 +0000
Manifest this update: Tue 29 Apr 2025 05:00:44 +0000
Manifest next update: Wed 30 Apr 2025 05:00:44 +0000
Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: bmbPOgdYFQlC2c3dvYDR3Oedp3hmy8DOuY/PiK8FeLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:39:96:5d:42:be:47:b9:bd:a6:8b:d1:2d:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Apr 29 05:00:44 2025 GMT
Not After : Apr 30 05:00:44 2025 GMT
Subject: CN=d589e86b8e8e76cb4655be343ac8b87551575755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:e8:c4:8e:79:cd:10:b8:16:34:ac:7e:57:
c2:41:d4:55:a7:56:e7:76:86:b1:3e:0a:4e:d2:0c:
61:17:9e:ba:2a:64:15:2b:a7:16:f4:ce:e3:c3:04:
08:bf:5f:f2:6f:00:ea:45:66:c2:8d:5c:9d:97:77:
f0:c7:de:9f:fc:ca:da:26:f1:57:05:5b:08:5b:73:
9a:2a:14:11:1e:41:70:d4:d6:23:23:3f:22:c8:fc:
48:ad:88:9d:7c:fb:8f:32:46:3f:2d:3d:f9:13:c8:
4f:17:75:fb:89:3a:b9:48:e2:e1:8b:c0:88:28:6e:
e8:41:2a:b0:d4:a1:ee:97:5e:57:ca:e6:59:65:47:
ee:04:2c:7d:ee:a8:0b:dc:e3:4b:f4:29:ff:aa:d3:
95:ea:cd:d8:81:aa:83:3c:f5:da:7c:eb:7a:e7:22:
10:ab:08:72:83:01:96:86:8b:a7:a0:e4:d0:e6:fd:
35:5f:dd:8d:27:76:c4:29:aa:85:81:5d:07:97:55:
3c:80:c1:1e:3c:19:22:55:b1:57:48:0f:57:50:a8:
75:63:11:fd:56:ff:b4:3b:1b:58:f8:43:da:96:49:
7f:e7:b6:46:51:7d:85:72:99:29:05:2b:51:3c:05:
94:88:98:80:8e:7b:c5:4b:6c:d8:3c:ad:88:b9:d4:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:89:E8:6B:8E:8E:76:CB:46:55:BE:34:3A:C8:B8:75:51:57:57:55
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:33:47:cc:07:0e:af:9e:e6:62:57:9e:3e:41:19:c9:49:3c:
b2:77:62:be:43:15:f4:16:f2:bb:1a:0b:39:c0:7b:2b:88:82:
5a:36:7a:c3:4a:55:79:57:26:6c:20:02:13:e1:be:c4:5e:c0:
a1:14:f4:dd:27:3c:ef:4b:95:83:c2:b9:e9:e3:6c:dd:22:b4:
8d:5b:e9:5f:cc:bd:ea:9b:84:0a:74:a0:8f:4f:c2:fc:42:19:
ae:f1:0c:59:69:32:06:5b:e5:1a:48:99:78:f8:60:01:86:7f:
c6:08:b0:8c:64:c8:3c:05:69:61:99:c4:24:72:f5:0b:d3:b0:
c3:77:b5:4f:b6:fe:0a:6f:1d:7d:38:1d:74:12:2c:f7:d6:ac:
a7:42:54:03:a4:b9:db:62:ce:01:33:01:10:5a:f5:8c:cf:f4:
d0:0f:24:0d:41:e5:56:2a:98:50:b5:ee:27:6e:d8:45:35:7a:
7d:56:7c:6b:14:a4:a3:10:2b:0f:cd:a1:f8:e7:9a:4c:6a:2f:
8e:60:72:4d:9d:cb:6f:fe:40:ef:15:64:30:b9:1b:5e:fc:3e:
a2:4b:fc:ac:f7:5b:8b:4e:57:c6:7c:ac:7b:66:2c:28:93:7a:
fe:85:6c:3d:b4:9e:2b:b5:18:47:79:f6:d6:0f:3e:64:d6:fe:
14:95:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:17:26 2025 by rpki-client