Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: 21wARywoz7ADsrFHvB2dBCjQjO87IwUARKJ5589BJBo=
Subject key identifier: BF:CB:53:25:13:BC:25:2A:DD:5C:79:D8:4E:9B:19:46:0E:58:90:40
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 01968B8106962B0A7ACEDD8CD692BC566D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 14AC
Signing time: Thu 01 May 2025 11:00:10 +0000
Manifest this update: Thu 01 May 2025 11:00:10 +0000
Manifest next update: Fri 02 May 2025 11:00:10 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: eivu0rwGwTZQK888DAItB67/gCLD46fd2BmATVT0z9w=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:06:96:2b:0a:7a:ce:dd:8c:d6:92:bc:56:6d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: May 1 11:00:10 2025 GMT
Not After : May 2 11:00:10 2025 GMT
Subject: CN=bfcb532513bc252add5c79d84e9b19460e589040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:01:e9:e8:14:dc:d3:3b:5d:03:bb:6c:3f:
23:02:70:e8:61:0f:af:db:a0:37:cb:d2:56:c9:81:
aa:96:7f:88:03:b7:a9:0b:87:52:4c:05:61:e9:81:
f2:f1:05:cd:9f:24:1e:32:bc:de:90:8d:77:9b:f2:
2c:7a:f8:e9:1c:56:b4:11:a2:a8:b4:fa:cf:c9:b8:
97:14:2c:72:ee:e0:90:d9:26:7f:d9:13:1d:7c:82:
2e:cb:1e:b0:ad:01:2c:72:91:38:62:cb:b6:27:0d:
34:89:d9:bf:24:d2:8f:cd:47:22:98:be:9e:d3:e3:
44:fe:f7:5c:55:d8:e5:d1:8d:9e:7d:a8:be:53:13:
03:fc:99:51:3e:77:0f:8f:6f:e3:c7:fd:fb:98:b3:
a2:db:33:91:28:77:83:7b:23:9e:48:09:96:41:47:
c1:8c:ee:06:d4:7b:46:74:b9:58:78:d9:da:45:32:
1e:74:46:73:71:e7:c1:06:ed:85:64:52:b8:1b:9e:
97:bd:42:0d:91:5f:44:68:7b:bf:49:d4:c7:af:f0:
c1:db:1f:26:92:a9:8e:2f:b3:e8:60:e9:a9:2f:77:
96:5f:2e:b2:e1:bd:88:93:ed:b5:4f:30:af:6c:86:
18:e6:64:85:84:e9:1d:09:9d:1b:46:d3:a4:5a:17:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:53:25:13:BC:25:2A:DD:5C:79:D8:4E:9B:19:46:0E:58:90:40
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:25:b6:f4:f8:20:d9:dd:d7:f0:46:eb:5b:20:a9:5d:9e:
b3:42:99:e2:81:81:d1:10:6a:6e:e1:d3:70:81:4b:ef:c9:38:
85:ec:fa:e4:fc:a8:88:8e:f1:4c:e2:bc:13:18:c1:7d:cf:ba:
e8:c7:2f:8b:51:43:1a:38:b6:cb:34:77:86:55:74:8c:04:cb:
b0:12:9e:8e:0d:c2:bf:0a:d4:6a:2d:7f:76:b7:68:36:ef:93:
af:e0:e8:24:1d:6a:d3:f1:d2:e6:c6:68:0c:89:fa:8d:61:c7:
7d:7d:93:2d:c1:64:dc:1a:08:96:7e:f9:98:c5:f2:3a:7b:ec:
35:2c:c0:b2:83:81:9f:86:59:27:ba:e6:66:5e:57:f7:f8:0c:
af:37:94:ab:89:a9:61:fb:1d:0e:1f:b5:a0:51:66:af:7e:87:
7c:2b:d7:10:2b:6b:28:98:3d:c7:b3:f2:76:c8:c6:45:35:9f:
84:11:bb:d2:86:f9:2a:7f:9d:e6:dd:1e:47:7f:0a:3e:c5:84:
b6:35:da:d5:12:4e:63:e2:19:fe:1c:01:83:67:53:28:c1:1a:
de:26:eb:e6:3e:9a:b1:c7:ce:c9:de:cc:62:fc:81:73:c1:37:
ed:0b:37:9c:46:fc:36:26:db:d7:c8:6e:fc:7e:cc:fb:db:ea:
42:0f:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:55:26 2025 by rpki-client