Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: v0YX68DRpj18Agfy196etHc4IPb2Ib7jZ9MTRW3OvhI=
Subject key identifier: BA:F2:C4:84:B9:57:88:D3:6A:29:FD:C8:80:4F:A7:6D:B9:32:AD:3D
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 01968B81817ED8CC4F21393D91302D58E37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 08B0
Signing time: Thu 01 May 2025 11:00:42 +0000
Manifest this update: Thu 01 May 2025 11:00:42 +0000
Manifest next update: Fri 02 May 2025 11:00:42 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: UbwxhuOqhGCdIfn7XTee1EX09OcUDMT1aRkT3/7QHyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:81:7e:d8:cc:4f:21:39:3d:91:30:2d:58:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: May 1 11:00:42 2025 GMT
Not After : May 2 11:00:42 2025 GMT
Subject: CN=baf2c484b95788d36a29fdc8804fa76db932ad3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:e7:8a:95:1d:57:93:e9:ee:b0:80:9c:d0:
d7:bc:38:e1:05:b5:7e:7a:84:93:61:22:68:5b:5d:
1d:f3:50:39:eb:09:66:45:e4:80:70:73:41:02:b2:
bc:af:88:a9:3f:79:ed:c8:33:6c:56:87:bc:e9:ed:
16:ab:a8:97:17:57:2f:09:3f:f6:3f:df:d2:bb:6e:
42:37:95:7a:3d:30:45:14:d9:43:4a:ee:eb:b3:4a:
e6:91:17:62:85:3f:c8:f6:91:9a:3b:be:bd:51:b8:
81:16:89:f0:11:93:e7:eb:28:25:a0:74:66:16:cc:
d7:40:7b:b0:02:45:72:36:c9:a5:d6:f1:58:bb:63:
f6:ab:e8:66:f6:ba:f7:85:22:a0:67:3c:a8:1a:1c:
77:35:3c:cc:ba:50:9f:fd:ef:ac:89:d1:50:f2:bd:
4f:cd:51:56:9b:a4:67:8f:de:8f:f9:25:36:e8:6e:
22:33:c4:38:c1:44:8a:55:bc:59:20:fc:76:1a:ef:
73:97:03:d0:a8:ef:28:09:bb:72:ba:eb:14:28:96:
be:52:6b:e4:bc:f7:1d:52:f4:9d:a4:15:b1:88:79:
62:75:e8:cf:3e:84:30:5a:10:c1:36:3d:55:ee:d5:
40:b5:b0:cf:65:60:50:39:c9:ba:ca:1f:45:a2:66:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:C4:84:B9:57:88:D3:6A:29:FD:C8:80:4F:A7:6D:B9:32:AD:3D
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:08:6f:4c:1e:3b:59:60:66:83:6f:44:86:c6:cf:24:02:da:
60:2a:9c:8a:12:bc:b9:9f:a3:7e:24:2e:c5:08:6a:02:0e:3c:
c5:4c:ac:92:69:5e:cf:ba:64:0f:83:ac:02:e0:aa:06:0d:7b:
95:49:4e:72:4d:bd:f7:38:f9:33:23:6a:d0:16:21:2f:d1:6a:
1c:d0:25:a5:78:b2:7d:26:41:db:fd:f7:c4:19:4f:35:44:e9:
68:d7:8a:31:ba:33:83:68:30:92:2d:40:fd:31:7e:ed:f2:f4:
e3:7b:34:5d:bf:53:43:76:7d:c0:42:58:f9:0b:c7:01:9d:5a:
32:37:4b:a5:18:4e:ec:a7:dd:69:5f:ac:41:e4:04:43:65:aa:
66:d8:0b:4e:d5:2b:d5:e5:50:33:d5:8a:64:98:3e:63:6f:d8:
28:41:90:ba:8f:49:c8:96:8e:bb:98:10:74:a6:3d:4a:99:f2:
2a:52:e6:84:ba:86:c6:ba:35:c7:5b:64:ee:5f:25:23:bf:a2:
5c:e7:44:ac:ea:8c:4c:4a:68:fe:1e:c0:94:8b:8c:8c:b8:ca:
15:dd:84:b8:f1:6e:8b:fa:38:05:e6:b3:8d:27:66:9b:a8:eb:
92:7d:f8:06:22:83:78:56:8f:ac:2b:a8:d4:ce:48:dc:04:c4:
b6:a2:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:06:37 2025 by rpki-client