Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: i8Wym9i7gjNem3KHx4nySAOeXxbcEHSMuP8nvq2F59Q=
Subject key identifier: 6B:2D:5A:12:3F:E7:B8:3B:AC:3A:CE:5A:00:E4:BC:37:47:BE:92:BC
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 0196764333975E8543FE539045AA8EA719FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1568
Signing time: Sun 27 Apr 2025 08:00:37 +0000
Manifest this update: Sun 27 Apr 2025 08:00:37 +0000
Manifest next update: Mon 28 Apr 2025 08:00:37 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: w7hcHxY7EdETf17VzpgqPhWotu9GNpvW2epOIC8y4do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:33:97:5e:85:43:fe:53:90:45:aa:8e:a7:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Apr 27 08:00:37 2025 GMT
Not After : Apr 28 08:00:37 2025 GMT
Subject: CN=6b2d5a123fe7b83bac3ace5a00e4bc3747be92bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:ff:50:04:55:ee:dd:4c:c5:33:13:df:21:
cf:51:aa:a8:ba:9e:80:9f:ef:98:e3:21:2a:2e:63:
47:4d:82:14:7e:2f:ff:a5:00:7e:34:69:1c:0e:55:
58:87:98:b0:77:5f:49:da:a2:66:59:7f:a3:26:e1:
f8:be:bf:0f:9e:bb:74:99:9c:e4:ed:df:19:46:c1:
ce:96:74:d8:e6:ab:ef:15:ab:de:99:c3:f6:83:ad:
00:59:72:60:45:81:50:6c:ce:b7:05:8b:c2:76:1a:
78:42:75:af:59:9a:d7:bf:e9:0b:a0:c8:0a:01:ae:
49:16:1d:a3:40:47:d2:ae:d8:f8:a9:1b:4d:da:5c:
b4:29:8c:cc:2e:7b:de:57:8e:30:2c:0c:58:34:5a:
8e:83:5e:1f:9b:fc:84:13:59:7b:b4:94:25:ac:ce:
4d:b4:24:66:41:8b:ba:35:3d:71:8b:ac:bf:33:86:
ac:fd:e1:a9:30:b5:f7:1b:7c:69:42:a8:b1:21:03:
b4:5a:f3:d5:03:a9:a5:f6:89:25:f6:db:1d:12:2c:
67:7d:04:1f:e6:a1:5e:ce:f2:18:ac:45:27:bc:bd:
b6:8b:48:35:78:90:6f:64:d2:8a:f7:3e:48:ce:95:
e8:18:f6:ff:38:e5:01:38:87:bd:7a:70:27:bd:55:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:5A:12:3F:E7:B8:3B:AC:3A:CE:5A:00:E4:BC:37:47:BE:92:BC
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:ab:a8:a6:25:59:a1:bc:a6:89:5b:ac:0a:20:f6:8e:a0:
66:2b:6d:ce:0e:de:3a:2e:97:e3:ef:fb:7e:95:36:c8:dd:52:
b7:9c:74:63:57:0b:ab:3b:b2:e1:0f:ae:17:5b:51:03:11:02:
52:21:de:6f:f7:f1:ad:11:97:18:70:38:6d:c0:5c:2c:9a:b5:
cc:e6:f0:ed:be:a3:ac:88:18:07:25:6d:5f:f3:44:03:91:1f:
3d:f4:22:c8:bd:f4:5a:bf:b7:08:38:e8:35:63:9d:90:95:89:
9b:1f:bf:22:fd:d3:68:31:7a:b2:98:c8:e9:bf:b3:3a:11:5d:
60:29:3a:eb:98:b3:49:be:2b:ba:d8:98:c3:97:76:33:e5:3b:
6d:e6:24:13:5c:02:be:bb:2f:22:1c:6a:9d:4d:64:25:56:8e:
69:bc:0e:99:71:97:0b:4a:25:3a:1d:d7:a3:1c:36:e1:31:09:
cd:86:7f:55:a7:e1:59:39:bb:b5:30:16:7b:5a:a3:ff:f3:37:
06:49:f6:66:b2:d7:67:a4:54:b4:0e:b7:9b:76:a2:29:f9:6f:
ad:0b:c8:31:f1:14:4c:79:5b:8f:12:2a:77:78:d8:8b:23:52:
9b:f7:f9:17:33:a3:8e:5a:1b:dc:79:48:c3:07:99:9e:23:c1:
74:27:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:31:18 2025 by rpki-client