Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: IcQMSSreDnoIUY8g3zNRAq7b9lr6+TAYP+j7VRSxTCU=
Subject key identifier: 7E:BA:8A:82:76:05:8A:38:55:7F:6E:7C:39:EF:BC:E5:BB:52:AB:BA
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 01969E2C642F35593B1A727BC74ED139E447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 05E8
Signing time: Mon 05 May 2025 02:00:31 +0000
Manifest this update: Mon 05 May 2025 02:00:31 +0000
Manifest next update: Tue 06 May 2025 02:00:31 +0000
Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: a2w6UZGjxDAHBghMW3qUPnJme6Fx6q/pV0XEF48Ufbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:64:2f:35:59:3b:1a:72:7b:c7:4e:d1:39:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: May 5 02:00:31 2025 GMT
Not After : May 6 02:00:31 2025 GMT
Subject: CN=7eba8a8276058a38557f6e7c39efbce5bb52abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:6d:02:89:46:ff:80:a5:bb:ae:85:2d:fe:
93:4e:28:12:e4:f0:bd:a2:e2:5d:e8:89:e6:cc:e8:
9e:ed:1e:96:e8:d5:5d:ee:85:89:46:3c:80:57:50:
a0:94:fc:c5:3f:4a:88:3a:39:36:80:28:eb:ce:87:
ac:39:27:7f:45:d7:32:8d:72:19:f1:45:9b:e1:5b:
93:83:c7:f0:57:a3:23:de:e8:43:4b:03:c7:cb:6e:
18:63:56:00:cb:fa:92:0b:c9:22:e4:61:47:38:ab:
1f:ff:7d:b6:e0:14:25:d5:61:ec:03:2c:52:bd:24:
7f:51:33:55:69:e8:c5:cd:b4:c8:be:11:92:ab:23:
3f:a4:82:3c:58:e6:7a:17:e6:54:49:f2:2e:38:1a:
9f:e2:f1:c6:51:a2:d0:4d:5d:71:a0:ea:f5:ad:df:
ee:25:c3:69:f5:e7:dd:31:1d:9b:ed:bc:90:fb:09:
bc:30:ee:09:72:a6:25:a5:75:9d:89:03:01:e1:d3:
31:c3:10:c4:63:3d:2a:26:db:ee:87:e4:f2:bc:0d:
74:8f:fe:50:c9:94:0c:7c:cd:3d:64:bd:93:cd:85:
07:bb:5e:b8:e6:10:e6:45:e1:ed:ba:8c:71:34:71:
32:70:77:f3:1b:de:cf:84:61:1a:f3:ed:99:6a:fb:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:8A:82:76:05:8A:38:55:7F:6E:7C:39:EF:BC:E5:BB:52:AB:BA
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:36:ad:a8:9c:7c:74:28:b1:91:fe:07:6c:2f:07:95:9f:15:
a4:ee:be:f7:67:57:86:04:e0:4a:05:63:58:63:7b:5c:7d:0e:
87:aa:a8:a7:db:e6:5d:01:a1:af:51:d1:01:24:3c:5b:dd:57:
c3:92:54:00:29:f6:ec:f2:7a:1c:59:f0:67:1f:20:3e:16:16:
18:5c:f6:75:8c:34:74:75:ee:a7:2c:f0:fb:94:4b:44:89:3d:
4e:e5:4d:b4:f5:ab:1e:3e:b2:44:04:ee:c0:05:30:0b:38:22:
29:4d:35:f4:ed:42:3a:31:2d:22:aa:a3:cc:69:5c:d7:86:7a:
c8:ea:3b:da:c9:21:a3:53:3c:32:7a:27:8e:79:4e:64:64:8d:
f5:96:9a:b5:04:57:37:be:29:30:16:b8:44:c0:5d:85:77:44:
11:dc:c2:bd:c4:90:ed:7d:83:e8:a4:86:76:08:6e:89:f6:00:
60:e9:61:4a:57:36:a6:2d:16:e0:96:82:d8:0c:9a:1f:6c:1f:
11:20:98:b2:65:f9:db:47:8b:bb:7a:c7:81:62:b6:ae:80:b8:
78:4f:e6:ca:a3:08:bd:d0:ab:ca:09:67:a7:a9:8d:a5:7b:3b:
4e:a5:a2:0a:24:59:e2:26:c3:5d:b5:24:5d:99:cd:e3:71:5a:
22:23:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:27:54 2025 by rpki-client