Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: GF5v3L+4sP8/LAdJncQ3LDZMYat3Q1j4h3tnrgKY1Nk=
Subject key identifier: 30:42:73:AE:E5:1D:04:B6:7D:DB:19:90:FD:0F:67:80:06:38:4E:E5
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0196718ACB774678A2845B116FFB0D5EAB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 091F
Signing time: Sat 26 Apr 2025 10:00:43 +0000
Manifest this update: Sat 26 Apr 2025 10:00:43 +0000
Manifest next update: Sun 27 Apr 2025 10:00:43 +0000
Files and hashes: 1: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: sB7zmwdmr4D25RONtAxPgmtsNRmDdT6pb2cDrH04d2c=)
3: DN7cb2WxNWOTpycH6YaG66edbbs.roa (hash: xHRCbbCrWIHuruRPkilEuXWa24rKkDGqIeFboryKMwQ=)
4: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=)
5: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=)
6: _8-3Qs_qZ1htreiN1JNh0Xfjgzw.roa (hash: vjBjNUyiud1IqRH6IpSBed0Ql8B7vtUZBKWlZlCokKM=)
7: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=)
8: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=)
9: pEFxP8vI0PKe_stqXUAdFiorUXQ.roa (hash: XJ7DBwkkSSwgly2JK+83gWkWa+T8sNrECn3yoE80Gos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:cb:77:46:78:a2:84:5b:11:6f:fb:0d:5e:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Apr 26 10:00:43 2025 GMT
Not After : Apr 27 10:00:43 2025 GMT
Subject: CN=304273aee51d04b67ddb1990fd0f678006384ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:04:a3:bc:1b:17:8b:62:75:14:d0:a2:b6:
1a:16:46:33:cb:46:89:f9:24:53:e2:cf:3b:6a:b6:
29:f9:98:04:37:8b:e5:3f:c0:d2:04:2c:e5:3f:cb:
46:a7:55:86:ef:4f:04:f8:3f:60:96:36:9f:b0:a1:
3a:1e:7a:09:e7:49:1f:51:c0:ab:c1:16:c7:27:fb:
6d:d9:43:36:f6:67:c8:6c:10:e6:c0:6f:0a:fb:9c:
bb:6d:02:fe:28:9d:c2:37:ab:b1:e0:27:92:5a:f1:
87:6c:14:e8:88:c9:f3:5e:07:f6:f3:cb:36:95:cd:
58:11:08:d0:1c:b4:03:9b:a9:9c:4a:94:01:08:e7:
b3:be:96:87:bd:20:7d:a5:0a:50:32:fc:fe:ef:39:
3c:63:92:df:c5:e7:fa:a4:f5:7b:fa:cf:8c:c1:51:
cc:1d:77:60:84:4e:a7:f4:e5:b6:93:1e:30:6a:7b:
a9:d4:6f:12:4b:27:a9:94:c0:7d:9c:9e:22:15:08:
bf:3f:1f:e3:41:fb:84:a4:eb:04:d2:c3:cb:61:75:
3f:70:3d:0f:9a:38:2c:f5:f3:df:2a:90:17:a1:d0:
d0:67:8e:7b:4f:fa:43:56:e4:8c:47:ae:63:6e:05:
13:00:d4:6d:98:d2:3c:a5:44:0a:c0:47:2b:67:61:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:73:AE:E5:1D:04:B6:7D:DB:19:90:FD:0F:67:80:06:38:4E:E5
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:7f:d9:d4:b9:18:7b:12:91:b8:84:83:10:50:79:1a:c2:
6f:ff:f2:77:c4:8e:27:bf:1c:78:d4:ce:95:69:fe:55:54:1a:
4a:6c:99:80:1a:35:f8:ce:4d:49:2a:be:66:b4:5c:a6:83:8e:
b3:90:2d:cb:2b:a9:49:30:c5:87:8d:11:ff:0d:91:b9:47:fa:
54:77:89:dc:8c:41:f9:d4:03:b4:38:b3:8b:b7:e6:51:c7:0c:
d1:d6:96:01:f0:6b:a0:bb:ea:02:ac:56:64:79:c7:91:79:cb:
39:87:70:1e:ef:d7:62:be:ec:84:57:8e:cb:5d:06:bf:22:e6:
a4:86:fc:13:ef:69:2d:25:20:e7:74:6c:fa:7a:bd:d4:fe:fd:
d6:66:e1:a5:96:02:7d:00:2e:4b:2a:29:be:00:a2:b1:60:84:
69:3b:8a:d1:20:b2:de:9e:7b:3b:49:7f:ad:9d:62:fa:09:a8:
00:a3:cb:9c:0f:72:c2:90:62:6f:44:53:09:a1:9f:18:36:34:
5e:7b:e6:03:79:93:38:75:2b:e1:aa:b7:b5:ce:10:34:86:f6:
3f:33:b6:b8:a0:60:c0:f2:33:fa:e7:fa:ce:b6:ee:ec:86:a8:
aa:d2:55:35:ef:91:ea:d7:aa:57:c8:aa:fc:db:49:26:2f:e3:
8e:73:0c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:42 2025 by rpki-client