Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: enhe3c45ZndlDvUMHafzg4uH+VUD3bneKIo/u3CznQo=
Subject key identifier: A1:AC:1E:F8:75:C1:5E:94:C2:74:AA:E0:CA:2F:AD:B4:BD:3F:A1:94
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 0196797B7B1A36B161371985A260307FBE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 013C
Signing time: Sun 27 Apr 2025 23:00:57 +0000
Manifest this update: Sun 27 Apr 2025 23:00:57 +0000
Manifest next update: Mon 28 Apr 2025 23:00:57 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: GvuYd/KzFEUZCDrfsoH7CU2R2LZb5Mix3VaFZQQRVNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:7b:1a:36:b1:61:37:19:85:a2:60:30:7f:be:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Apr 27 23:00:57 2025 GMT
Not After : Apr 28 23:00:57 2025 GMT
Subject: CN=a1ac1ef875c15e94c274aae0ca2fadb4bd3fa194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:99:64:2d:fc:9a:64:2c:e4:d3:41:21:42:
14:87:59:53:68:db:9c:3e:aa:25:ac:e9:e9:75:2e:
b2:20:81:6a:9e:ca:2d:6e:7a:40:a1:98:10:31:99:
06:dd:29:f3:41:5a:c2:e5:83:3f:14:1f:36:f9:2a:
96:96:3a:8e:e1:06:16:bb:33:bf:a1:15:1f:14:3c:
57:0e:1f:75:be:47:31:46:bc:c3:3a:7f:a8:0b:b8:
06:bf:e9:05:e9:72:4c:eb:d3:b9:a8:a2:32:92:7e:
c9:b1:29:3c:49:33:7d:48:94:0f:2c:81:d2:f6:83:
23:4a:49:1c:e4:81:55:41:38:1c:ae:02:f0:20:f0:
b7:77:e7:42:bb:da:1a:35:f4:01:00:92:90:5d:b5:
4b:f7:bb:e6:8c:fb:00:08:c2:ee:3a:8c:cf:98:79:
64:7c:98:c8:75:b2:5a:c2:e5:2f:f2:14:02:0a:22:
41:6b:2d:9f:06:f4:c6:68:b5:1c:9c:9f:7c:b6:00:
22:bb:68:60:7d:77:43:22:54:20:d3:d1:cf:6f:bc:
cd:7d:3c:14:a8:4f:f2:c4:f1:09:6e:f0:a3:8a:e9:
34:98:e5:78:bc:e2:8e:42:79:56:28:d7:b6:15:80:
75:99:da:cb:d1:7e:cf:6b:fb:f0:8f:06:62:05:e5:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:1E:F8:75:C1:5E:94:C2:74:AA:E0:CA:2F:AD:B4:BD:3F:A1:94
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:a0:32:c6:2e:fe:dd:21:8c:63:92:4e:c9:ba:d6:ed:20:
9b:ed:c2:4e:65:5d:22:d6:62:c9:2b:bd:aa:ec:4e:c4:05:6c:
9e:e4:af:a0:49:33:65:20:b0:98:25:e8:00:90:b4:d8:e4:ed:
83:83:73:eb:00:3f:fb:f6:f8:fd:b8:8a:7a:b9:7e:17:d1:ac:
0b:81:00:f9:b4:24:f7:2d:2c:9a:4f:4a:dd:bf:a7:2a:15:10:
60:4d:5c:bd:e8:57:67:40:9b:3b:54:50:2e:44:00:3f:56:fb:
50:18:6d:a9:17:38:95:6a:73:f2:45:70:cd:0e:68:e1:c3:31:
d9:ac:47:e4:23:8f:0f:3d:ca:8e:63:05:01:12:d5:b1:5d:8a:
d3:be:fa:15:b4:0b:02:d1:c3:f7:a9:04:90:05:94:0c:d2:ab:
cc:dd:24:21:9c:65:7f:66:26:9a:66:f8:bb:53:d2:d4:b9:28:
93:43:96:20:c4:18:df:4b:cc:a0:19:d2:a3:76:0d:87:ea:a5:
40:5f:fd:83:28:28:70:cb:66:11:32:01:8a:ad:c9:ae:13:77:
bb:65:04:83:41:d4:9d:ea:23:15:8b:04:af:64:09:f9:ee:e9:
81:f1:a8:a3:86:99:cf:59:c5:ce:bb:03:48:df:d5:ac:0f:50:
cd:d8:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:48:21 2025 by rpki-client