
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft
File: YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft (raw, json)
Hash identifier: 1IMaiKTGf9Fw/0V++AFo4zWgNe4JUOKtGVW4iOayYHg=
Subject key identifier: 9D:C7:A6:A7:E8:E9:D2:4B:BD:5E:67:E3:F1:FF:64:72:F5:D8:FD:EF
Authority key identifier: 60:F3:1D:82:0C:32:40:0D:EC:0C:60:49:61:78:99:4D:57:75:2A:CC
Certificate issuer: /CN=60f31d820c32400dec0c60496178994d57752acc
Certificate serial: 01969ABE4140C08176503DF1660E2BC7356C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPMdggwyQA3sDGBJYXiZTVd1Ksw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft
Manifest number: 151E
Signing time: Sun 04 May 2025 10:01:21 +0000
Manifest this update: Sun 04 May 2025 10:01:21 +0000
Manifest next update: Mon 05 May 2025 10:01:21 +0000
Files and hashes: 1: YPMdggwyQA3sDGBJYXiZTVd1Ksw.crl (hash: A5TD3HRCivtHfrnYAKvGZLuQeQ4LsgtZMEptRnhYxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPMdggwyQA3sDGBJYXiZTVd1Ksw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:be:41:40:c0:81:76:50:3d:f1:66:0e:2b:c7:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f31d820c32400dec0c60496178994d57752acc
Validity
Not Before: May 4 10:01:21 2025 GMT
Not After : May 5 10:01:21 2025 GMT
Subject: CN=9dc7a6a7e8e9d24bbd5e67e3f1ff6472f5d8fdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:71:de:64:e3:90:6c:a5:a7:f3:af:4b:d2:
0c:5d:8a:4c:ea:d4:42:b2:97:1a:1a:3d:07:5b:ff:
9d:df:02:46:49:ad:28:19:9c:89:8d:e7:33:00:e9:
f2:3f:8d:26:42:bf:4f:1b:32:c7:a5:78:e6:be:03:
47:78:c5:ce:2b:9e:c3:e3:70:6b:81:d5:71:38:67:
7a:f1:4f:7d:0a:a2:2a:75:60:85:60:47:7c:b4:15:
dd:00:7b:4c:c6:b1:6f:97:2e:32:80:78:e9:f6:37:
b0:35:7a:8e:4c:57:c0:8b:ec:2c:27:f8:e1:36:28:
64:3b:2c:6b:f8:71:db:4a:a8:b0:62:be:6e:f1:ef:
57:2f:17:4b:aa:91:e0:25:ac:06:fb:13:62:73:f9:
d6:64:f4:68:77:0c:32:34:4f:56:9e:ee:da:f0:c4:
ff:54:03:30:1c:0b:cb:c7:6a:72:82:6b:f4:89:a8:
cb:25:44:00:ef:2d:cb:a0:45:21:d5:1d:6e:4c:8c:
af:80:f9:03:e5:5f:cf:2f:9a:e0:61:51:6c:a2:a7:
63:80:bd:a9:d9:55:96:01:c2:d9:4c:32:b6:2f:13:
5b:6a:ef:06:c0:64:8f:b3:dc:e9:59:57:4b:33:59:
e4:fc:17:38:ae:fd:83:f9:41:29:72:a9:61:60:89:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C7:A6:A7:E8:E9:D2:4B:BD:5E:67:E3:F1:FF:64:72:F5:D8:FD:EF
X509v3 Authority Key Identifier:
keyid:60:F3:1D:82:0C:32:40:0D:EC:0C:60:49:61:78:99:4D:57:75:2A:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPMdggwyQA3sDGBJYXiZTVd1Ksw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:39:10:29:b5:81:e5:0b:e5:9a:1b:3a:e8:43:0d:54:6c:33:
db:e8:8f:ba:32:31:c0:c6:78:28:a3:74:70:0e:af:54:86:67:
91:07:89:81:2e:fd:0d:9c:a7:8c:51:1d:f2:1c:19:06:45:2c:
e8:2d:de:df:70:8f:83:da:58:28:35:59:87:9f:7c:83:b4:00:
c4:d5:2b:cd:e8:63:84:62:13:4a:69:18:95:7e:c2:5a:59:e7:
33:26:e0:ac:fc:40:82:4f:24:74:19:33:f8:71:cd:09:90:eb:
2d:68:f4:e3:5a:e5:28:fd:21:fd:b4:f7:7e:7f:17:16:d2:3c:
1b:1b:bd:d5:df:39:62:50:59:ab:62:18:ae:89:57:48:13:42:
51:2a:33:3d:13:fc:ac:ac:aa:f1:fb:f3:22:d2:9b:89:43:0b:
d6:a9:1a:18:83:f6:b2:aa:03:cd:57:70:d4:d2:65:1c:75:7c:
b0:10:9d:01:7b:bb:16:1c:c7:a2:0d:c9:5d:fb:95:cb:9d:a2:
9e:c1:b0:60:e2:3e:fd:b1:3a:c8:81:66:b9:05:4d:36:a6:e5:
95:f6:c8:74:91:48:77:6e:ea:86:c2:41:49:7e:63:4b:3f:a4:
c8:fe:57:58:4e:27:17:9d:a6:27:89:43:91:08:18:33:e9:37:
3c:fa:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:18:45 2025 by rpki-client