
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: Xjnfs6spd6mKWv3Q7IqizTafSi9vzA29H5b2NL8+GuM=
Subject key identifier: 1B:EB:EB:B9:24:96:14:9F:25:33:C2:23:4F:4E:68:EB:A8:D7:B2:4C
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 01968F95A022A8ADA9564BA340F6A43EDB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 042E
Signing time: Fri 02 May 2025 06:01:09 +0000
Manifest this update: Fri 02 May 2025 06:01:09 +0000
Manifest next update: Sat 03 May 2025 06:01:09 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: bX1vjrQdOIHP7z/jq2lXv52LbKyt08eZujpsBt6oW18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:a0:22:a8:ad:a9:56:4b:a3:40:f6:a4:3e:db:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: May 2 06:01:09 2025 GMT
Not After : May 3 06:01:09 2025 GMT
Subject: CN=1bebebb92496149f2533c2234f4e68eba8d7b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:1c:99:b2:f7:b1:b8:86:e4:ed:46:ef:97:
64:75:a7:a5:34:48:3b:e5:bc:47:ba:ee:50:57:e0:
62:b5:61:71:76:3f:f7:ca:15:b4:ad:4f:28:5c:f5:
b3:e7:fe:d4:0e:6a:da:f6:fd:b2:76:70:f9:9c:a5:
2b:52:97:15:58:29:b5:52:84:e4:8b:ec:dd:a5:81:
a7:0a:25:83:66:45:84:59:a7:6c:f7:b6:24:c3:dc:
a5:98:eb:6e:9d:78:28:7c:d9:be:26:6b:95:3f:2b:
c8:eb:90:ef:c5:ae:aa:b6:3b:63:6e:2b:27:d8:99:
0a:c8:f1:ca:47:c1:48:76:10:ff:d0:fc:f7:94:ae:
00:40:f9:c5:a9:a5:1b:cc:51:ff:49:93:e6:2d:f9:
c4:49:1b:c3:e4:30:e3:04:f4:16:57:52:74:9d:d3:
c0:80:23:61:10:13:e8:d8:cd:c4:7f:90:71:45:d4:
ca:b8:c4:61:2c:bb:48:e9:7a:b3:8f:1d:b9:a8:fe:
6d:c8:72:4b:e9:1e:c2:69:30:d7:d1:9b:cc:03:c9:
3d:72:47:35:fa:70:72:3a:85:6b:5e:22:92:a5:2b:
8d:ff:66:2d:71:b1:1c:39:d7:cb:56:21:2e:4b:b0:
75:bc:7e:75:8d:0a:61:19:33:15:b7:d7:b6:6c:91:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:EB:B9:24:96:14:9F:25:33:C2:23:4F:4E:68:EB:A8:D7:B2:4C
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:af:ca:be:f6:6a:d8:59:08:24:f2:6f:d6:58:22:6f:83:
e5:65:fd:d1:ce:f8:e9:56:8f:e1:b5:28:b9:96:7e:48:3b:7c:
b3:a8:91:12:ac:71:1b:f4:0b:21:6f:47:91:65:fe:3a:d6:fd:
9d:86:72:a9:bb:75:e9:22:8a:c6:2a:7f:ca:b4:68:e1:50:5c:
3e:82:35:12:91:26:5b:d7:18:38:fe:9d:bb:8b:50:6d:a7:46:
7b:29:9a:aa:ac:b3:9c:73:a7:76:aa:c4:03:5c:26:c2:bf:5e:
6e:c5:40:dd:cb:ef:fc:8a:0c:d3:32:14:22:e4:39:67:42:01:
db:c4:06:ee:59:1b:ba:dc:7e:ab:28:26:a0:01:8d:a7:03:ce:
a5:5a:57:a4:f9:3d:53:a9:89:c3:29:be:6f:49:c8:6b:1c:68:
7f:92:83:e7:2a:9f:5a:dd:bd:be:e5:3d:1c:4a:8f:a8:0b:dd:
b5:f3:23:dd:87:12:41:80:3b:a9:60:e1:51:18:49:30:3a:d9:
1d:85:bf:ff:06:b6:92:d8:93:01:c9:03:0c:27:c9:c8:0c:a8:
38:98:2a:f7:bd:59:c9:4f:1a:b5:74:ce:10:6e:13:35:43:be:
29:f4:af:6d:e7:d6:c6:be:5a:16:d1:bf:7b:b9:6c:11:64:01:
cb:b8:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:05:17 2025 by rpki-client