Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: j1BE0bxQsatlnZnZiOM3fHCJr81CdrB3MF3yUraKVt0=
Subject key identifier: DD:47:FD:32:74:F3:1B:E7:F3:57:70:7F:BF:E6:2A:84:28:1E:5E:DF
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 019686C8C4B27F9D1ABC5688AB51541A1B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 02EB
Signing time: Wed 30 Apr 2025 13:00:26 +0000
Manifest this update: Wed 30 Apr 2025 13:00:26 +0000
Manifest next update: Thu 01 May 2025 13:00:26 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: yE74k16T5BqxeOZfquXrZD74FH4fIxS3piRYr+Kjw08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:c4:b2:7f:9d:1a:bc:56:88:ab:51:54:1a:1b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Apr 30 13:00:26 2025 GMT
Not After : May 1 13:00:26 2025 GMT
Subject: CN=dd47fd3274f31be7f357707fbfe62a84281e5edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:2b:4f:14:1a:96:ea:b6:58:cf:8a:43:13:
cd:31:2b:30:dd:86:99:a8:fc:2f:bf:1a:7d:43:ce:
f9:5d:6d:dc:04:20:dd:bf:b2:07:80:c7:83:9d:d8:
3e:59:4d:e1:a5:a5:87:1d:85:7c:11:e4:2d:85:70:
a6:fd:38:d3:df:4a:39:d4:fa:bd:f0:94:61:4a:0d:
ea:86:42:6d:21:81:4e:a2:f3:d2:18:ea:2e:64:0f:
01:98:76:d1:e0:c7:ae:0c:2d:39:4a:2f:e9:98:be:
d6:82:a1:3a:bc:9e:7e:f5:fe:9c:3e:9a:fd:6e:eb:
6d:13:7a:38:29:cb:a7:3c:a9:f9:8c:61:c7:3d:66:
9a:dd:e5:d8:c4:07:a0:f4:c1:ff:75:d4:fd:a7:45:
dd:d3:8b:d1:54:46:3e:0a:0c:47:b3:72:c4:74:b9:
fa:86:96:49:c0:68:e3:bb:50:0a:8d:83:ee:2c:0c:
ad:29:4f:db:8a:00:25:3b:73:d9:ba:64:a4:a9:0e:
f7:5a:1f:d6:68:0e:0e:8d:08:ea:8c:ca:6d:0d:2d:
b7:d5:5b:66:2a:ef:32:d0:11:84:c0:cf:47:a6:9c:
68:b4:56:15:b5:5c:68:10:84:88:d6:66:29:74:47:
4a:d3:e4:5c:09:1f:c0:14:bb:9b:11:c7:b2:ec:51:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:47:FD:32:74:F3:1B:E7:F3:57:70:7F:BF:E6:2A:84:28:1E:5E:DF
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:28:92:60:e7:f0:05:6e:4a:f9:39:df:5b:66:e8:c2:19:
ac:d8:ac:ce:9e:ca:9e:c9:fa:43:c7:58:01:7d:c3:4e:8f:a2:
f4:fc:9e:93:f3:d3:95:e7:22:c2:5d:f8:ab:af:a4:d8:4e:18:
0b:5c:79:26:ff:f0:ad:f3:e9:8c:c1:1e:bb:9e:d9:2e:86:ed:
c4:5c:6b:92:e7:44:dc:ba:17:90:55:bf:15:d2:bc:7e:f9:9b:
2f:00:3d:9c:2f:47:db:47:f9:08:c1:7f:67:97:47:82:b1:ed:
41:48:66:4d:71:ba:be:c9:35:25:b9:72:0d:82:0f:6e:c6:69:
26:3b:90:62:ba:5d:6f:c0:a9:29:af:e8:f4:2d:ad:fd:af:33:
d5:70:48:09:54:62:ec:5f:61:46:31:14:03:03:e5:a0:76:76:
f6:40:de:a8:97:60:36:42:2d:94:d9:1c:0e:fa:1f:51:a2:74:
23:09:dc:b7:ac:95:88:94:a3:11:0e:6e:d8:72:6f:18:3c:7f:
f5:a1:77:c1:06:c8:bf:5e:31:47:3f:d7:80:5a:40:62:c4:91:
5a:0a:df:9a:ce:3c:83:2a:6e:bc:8f:98:1f:9f:61:ef:c0:2a:
39:98:0b:9b:ec:59:3d:5b:21:ad:a7:ea:aa:79:97:61:65:c3:
74:36:57:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:34 2025 by rpki-client