Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier: 9m3Vh1VLkXxNtrYYslAf5U76vqvXYKPMLmJzGsf41OU=
Subject key identifier: FE:D4:58:29:64:23:92:70:B8:38:BE:B9:B6:48:17:45:A0:DF:7A:9A
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial: 0196808FB9521FA3AAF1B0BEF2853B4E9F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number: 05F9
Signing time: Tue 29 Apr 2025 08:00:24 +0000
Manifest this update: Tue 29 Apr 2025 08:00:24 +0000
Manifest next update: Wed 30 Apr 2025 08:00:24 +0000
Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: hRc/o8E9RRO44eqr8Pclg64uiFDduDKwZYWdO3Sf3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:b9:52:1f:a3:aa:f1:b0:be:f2:85:3b:4e:9f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
Validity
Not Before: Apr 29 08:00:24 2025 GMT
Not After : Apr 30 08:00:24 2025 GMT
Subject: CN=fed4582964239270b838beb9b6481745a0df7a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:a8:95:a4:23:d1:cf:c8:8e:fe:50:e7:f0:
d3:81:be:e1:0e:d5:30:2b:5b:f6:c7:51:0c:af:d6:
39:51:31:8a:79:a5:c9:d5:d1:ae:7e:e0:a0:d4:38:
fd:4a:9f:6a:8f:9a:e2:77:3e:7a:08:6a:e4:05:e1:
ff:38:c3:09:7a:ff:98:58:1d:53:db:8e:7b:75:91:
ee:1f:ce:1d:ec:9e:b2:c1:73:ff:61:96:bc:0f:4d:
40:b8:d5:5d:00:75:2b:5e:b5:7d:c1:c9:be:87:ce:
e9:fc:e4:39:a1:74:6c:fa:0d:34:d8:2a:ac:47:83:
98:ab:f8:c9:38:32:c6:ef:d6:16:5f:dd:58:43:a3:
46:16:86:55:3b:2a:10:b5:a6:64:be:98:61:66:2e:
32:1a:90:ef:05:4c:93:9c:36:db:a6:9b:72:5b:d8:
24:64:03:58:07:66:e8:75:2d:f4:99:b1:13:87:6f:
24:f1:a4:91:7d:c8:69:c7:2f:a8:e3:c3:77:63:3f:
c7:98:17:cc:d7:67:ca:07:a8:26:18:16:66:4c:5d:
0e:12:1a:40:32:80:c6:5d:7a:f1:31:b3:f7:0a:fa:
e9:a8:93:52:b4:e4:75:e6:2b:93:92:fa:af:3f:ec:
17:94:d6:13:59:27:57:e1:3b:e2:38:ae:b5:34:8f:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:58:29:64:23:92:70:B8:38:BE:B9:B6:48:17:45:A0:DF:7A:9A
X509v3 Authority Key Identifier:
keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:45:59:0c:f9:a8:97:28:b3:93:65:74:6a:f3:b2:b8:72:0b:
4c:bb:af:64:ee:c9:17:d2:da:8a:b1:11:b6:4c:9a:8b:75:09:
68:fd:a6:e3:14:30:e8:62:73:4c:78:13:45:bd:7d:f1:e2:af:
b7:07:9e:54:a0:25:f7:a3:97:af:94:84:ad:d4:b9:b4:1d:94:
7c:dc:86:e1:09:fa:99:09:09:a9:53:cf:bf:e5:f4:f9:f8:f6:
40:e2:f2:92:78:25:dd:a5:a2:64:a6:c5:83:39:6f:e2:ef:fd:
ca:5e:2e:48:7a:17:6c:e9:15:39:7d:45:7b:bf:79:c6:03:f5:
55:07:41:a8:9c:11:6e:06:15:35:82:ce:94:55:48:0f:23:37:
0b:fb:a8:4f:ac:d4:26:3d:ca:06:c7:57:91:da:71:68:6b:e1:
57:2b:6f:6c:28:18:ca:d5:f8:02:88:94:54:20:fe:00:b6:0d:
34:c9:d9:6a:6e:73:f6:1a:7d:0a:bb:94:f7:51:2e:a5:f8:5a:
bf:23:8d:34:d0:7b:82:62:7f:e5:b8:02:45:ee:6d:96:61:10:
0b:ac:fd:b5:6c:5f:da:46:e6:ab:45:d4:96:82:21:d7:21:fe:
41:e5:67:15:e8:49:20:c6:c3:f6:81:bc:45:ea:bb:00:ff:24:
99:8f:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:42:24 2025 by rpki-client