Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File: yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier: JS7UXs4rjRtuLlYv0bnaAXjgNztZn/UAOcMDA+t1y1o=
Subject key identifier: 3C:9E:D0:5D:71:E9:CC:2E:70:77:00:D6:13:B9:8C:FB:EE:D8:FF:3A
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer: /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial: 01967C7C086D4AB1127BA78CD3FF556C1038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number: 143D
Signing time: Mon 28 Apr 2025 13:00:25 +0000
Manifest this update: Mon 28 Apr 2025 13:00:25 +0000
Manifest next update: Tue 29 Apr 2025 13:00:25 +0000
Files and hashes: 1: FU1o4K68ASMHjxslt5agTXMw1Z4.roa (hash: cFpnMXx4SNy55YthuxgRWkF2I8U6u41jmzS8UiT8Yts=)
2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: gTsP5tB16TnD1Pq3oo9bop8PLji0+c2jzLqIHt+96Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:08:6d:4a:b1:12:7b:a7:8c:d3:ff:55:6c:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Validity
Not Before: Apr 28 13:00:25 2025 GMT
Not After : Apr 29 13:00:25 2025 GMT
Subject: CN=3c9ed05d71e9cc2e707700d613b98cfbeed8ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:73:72:57:99:61:fe:f5:63:3d:22:b0:63:
96:5b:69:52:6b:49:1f:d5:1a:21:67:f6:db:4a:23:
c9:40:72:6c:db:39:58:27:1a:78:bc:f6:07:42:35:
49:c9:03:c1:a4:de:8d:65:7e:da:f0:2a:6a:37:d7:
93:5b:86:21:29:fb:5b:c5:19:8f:e7:7c:2b:36:80:
0d:9b:60:e3:11:91:6e:a2:10:94:df:c9:58:51:d2:
67:8b:7a:37:49:d4:13:06:f6:b0:17:a6:18:29:a7:
fe:b5:d7:d4:ce:b1:73:3e:be:f2:5c:1f:f4:28:93:
f0:10:a6:e2:9b:c1:76:3b:57:2c:ee:74:9b:be:38:
dc:60:2a:87:f0:9c:a0:aa:e8:e9:e2:e0:fd:4a:73:
60:d1:00:0d:dd:a8:64:de:78:60:af:75:af:59:cc:
4b:6e:ce:e5:ad:4e:a4:9d:28:1b:ad:8c:86:b3:93:
27:fe:86:9d:ee:4a:bc:4d:d4:aa:c2:d3:2b:4a:75:
5a:96:6f:8d:9d:be:8a:14:33:d0:a2:7b:e0:32:57:
54:a6:9b:66:d3:31:81:86:9b:f5:05:f9:f6:22:c3:
58:4c:31:9b:49:38:fa:73:98:ae:90:63:dc:f6:91:
36:18:14:7a:98:dc:36:97:9a:18:24:03:73:25:02:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9E:D0:5D:71:E9:CC:2E:70:77:00:D6:13:B9:8C:FB:EE:D8:FF:3A
X509v3 Authority Key Identifier:
keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:54:a4:c9:4d:85:d2:9e:f0:ff:d8:43:1a:1a:71:5d:ed:f0:
38:20:fe:33:50:2b:39:0d:e5:73:88:65:c8:f5:07:79:52:cd:
af:21:35:f1:52:27:73:fc:78:16:cb:e1:0c:06:b0:69:d7:a4:
a5:cf:ab:38:61:e3:d6:cf:ff:7e:8b:f0:10:90:8e:bc:d1:0a:
65:b8:c3:14:8d:36:2a:6a:19:87:2d:71:8f:5d:3c:96:2d:ce:
a1:de:71:54:1b:6d:ca:4f:2b:26:9f:6e:60:b3:b0:ee:95:58:
54:9c:5e:ec:bb:a8:61:03:02:00:77:dc:bf:a6:35:58:fb:a3:
43:08:14:9c:24:05:a9:36:9b:6d:3a:77:94:7b:67:69:59:2f:
80:f4:b9:8e:19:a6:6c:ef:15:64:fb:a2:cc:8d:1a:f4:1e:ef:
e5:13:67:b2:e5:79:5c:01:50:7a:94:82:87:1f:29:e7:c1:4a:
34:8f:a3:19:a7:bd:57:c0:76:c8:05:10:3e:c0:a0:0c:e0:9a:
76:a2:96:e8:77:6f:5f:af:49:33:82:67:9a:66:bd:32:a5:e7:
9b:21:3c:77:14:02:b0:93:3c:df:93:d6:ac:e1:b3:e7:d4:19:
b1:2a:30:d6:15:92:2d:44:94:15:3e:22:83:5b:3c:de:2e:76:
68:b7:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:44:16 2025 by rpki-client