Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
File: YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft (raw, json)
Hash identifier: 0qlFBkBI8dCxjyGcpZDphmqS4r2xTIEoWuBlUQ7jn0Q=
Subject key identifier: 97:D0:0B:A0:1E:7B:41:D1:97:EA:A0:67:7D:AA:09:55:57:DD:40:5B
Authority key identifier: 60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Certificate issuer: /CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Certificate serial: 019675305038E30B7E1DEE42F2E79F1D09A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
Manifest number: 016B
Signing time: Sun 27 Apr 2025 03:00:22 +0000
Manifest this update: Sun 27 Apr 2025 03:00:22 +0000
Manifest next update: Mon 28 Apr 2025 03:00:22 +0000
Files and hashes: 1: YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl (hash: 1xNXAt5NXAALsy+Jn274/Tpu0T8edcZiH7nrdc3yIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:50:38:e3:0b:7e:1d:ee:42:f2:e7:9f:1d:09:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Validity
Not Before: Apr 27 03:00:22 2025 GMT
Not After : Apr 28 03:00:22 2025 GMT
Subject: CN=97d00ba01e7b41d197eaa0677daa095557dd405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:f2:00:15:19:04:9f:0d:2b:a0:f3:9c:c7:35:
99:87:9b:04:26:58:d1:e5:ba:74:d5:d4:b1:56:23:
30:12:0f:23:77:d6:95:0f:d9:74:fb:90:91:ac:d9:
92:d9:41:8a:1e:b5:a4:35:78:ca:ec:be:6c:ad:d9:
49:66:e2:15:5b:d5:2d:0f:12:d3:d8:02:73:48:ba:
77:2b:04:a3:17:3f:e9:c8:c7:bb:df:35:72:7e:69:
d0:40:40:a6:95:53:ff:b8:60:38:37:fe:2c:64:a4:
ab:9b:e3:94:33:86:6e:83:06:b9:03:15:63:7d:e9:
cc:20:5d:4a:61:78:f8:4f:3a:24:2d:2b:d5:19:2b:
e1:3e:3b:ac:90:75:a0:9a:14:14:f5:1e:5e:b9:bf:
dc:97:b7:67:eb:81:a7:d9:91:35:95:d9:56:ba:ad:
39:bc:d9:f7:e1:88:4f:76:36:91:44:c8:c3:ec:f0:
61:0d:1f:78:2b:10:cb:3f:bd:b1:47:1c:af:61:e2:
a7:68:6a:8a:91:d8:54:82:4d:9b:9a:f0:05:6f:83:
b4:76:e7:75:03:be:4a:05:83:f4:b5:f0:93:9e:4e:
3f:48:7e:16:57:45:e7:31:0f:b1:fa:23:f1:a1:21:
30:c4:2c:e1:4d:72:98:66:eb:d8:ce:93:6d:9e:f0:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:0B:A0:1E:7B:41:D1:97:EA:A0:67:7D:AA:09:55:57:DD:40:5B
X509v3 Authority Key Identifier:
keyid:60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:59:51:76:58:cc:fd:3b:65:72:97:4a:0b:4d:ed:66:82:57:
ef:79:ee:85:30:de:fc:07:25:10:39:1a:65:1d:37:0b:6d:56:
c1:79:80:4f:ad:b9:85:7a:a8:ff:c3:70:0b:ce:22:5d:de:5c:
ee:81:05:f3:03:be:b4:8f:63:ac:71:7e:13:ec:a2:5e:80:ea:
17:4e:b1:4b:8c:fb:70:3a:67:7e:d1:38:f6:cb:b7:9e:67:e0:
1d:14:6e:c0:c7:58:be:51:bd:d7:09:14:b0:16:f9:22:78:c1:
b2:bd:3a:6d:a3:fb:a4:e2:e7:95:fa:b6:ac:32:12:e8:e5:4a:
81:f0:d4:bc:16:70:ac:d8:aa:2d:b2:76:34:8f:2f:80:ac:3d:
fa:46:80:49:ce:25:70:60:c7:b1:54:58:69:6a:12:05:0d:58:
02:b1:59:54:ac:30:39:20:c1:59:b1:1e:46:4c:e9:e8:b9:11:
6c:f8:5d:12:09:bb:4e:8f:a8:8b:14:e0:b1:f3:59:c9:bb:36:
1d:57:ea:cf:ce:e7:6a:2b:7f:fe:4c:71:24:c2:5e:4c:c8:77:
d3:45:4f:c1:7d:96:6d:0b:57:3c:53:89:69:50:8e:05:c4:94:
76:7d:98:0b:7e:19:89:cc:98:8c:ed:b2:a2:06:b9:b2:b3:9a:
5f:aa:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:48 2025 by rpki-client