Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json)
Hash identifier: wf3+uhY3tcmvQzwvQswvgMfujK/czPCwZLSgx2kQ1co=
Subject key identifier: B2:AB:C5:52:78:61:03:AF:CA:C7:11:53:92:40:63:AE:A0:B1:63:7C
Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Certificate serial: 019681A361CE65D1FE7B7805DBD88F4E4AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
Manifest number: 022A
Signing time: Tue 29 Apr 2025 13:01:30 +0000
Manifest this update: Tue 29 Apr 2025 13:01:30 +0000
Manifest next update: Wed 30 Apr 2025 13:01:30 +0000
Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: ruaz72vuioDPmwQFOqKdQf0oaeUkk/jMdR3+ttZEMsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:61:ce:65:d1:fe:7b:78:05:db:d8:8f:4e:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Validity
Not Before: Apr 29 13:01:30 2025 GMT
Not After : Apr 30 13:01:30 2025 GMT
Subject: CN=b2abc552786103afcac71153924063aea0b1637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:f3:51:4d:f7:6f:d3:2e:23:af:29:dc:ae:
fb:79:9e:76:6a:51:2e:c9:8f:14:07:fe:25:5c:75:
90:b8:1b:ae:39:9b:0c:50:79:4f:36:9a:ea:5c:49:
79:cd:29:1d:15:b1:3d:80:1e:30:30:34:51:d1:11:
ad:05:fe:fe:05:36:44:d2:0b:68:17:47:b5:ec:80:
20:2e:da:77:7a:a0:97:a9:c3:69:d1:32:ff:5c:6b:
84:ef:03:da:95:22:65:ac:92:fd:f1:1c:46:c2:e2:
a7:de:15:98:62:f0:25:e1:4f:82:fe:bd:f1:b3:17:
4c:0f:b6:0b:7f:0a:3d:e7:90:e3:63:fb:6e:5b:24:
61:62:f5:f9:a3:aa:4d:db:19:3c:87:53:26:5a:f1:
b8:de:99:cb:5d:ff:61:b0:7d:dc:27:3c:b5:5e:8c:
c7:5e:d0:df:b5:77:08:1d:ad:d9:fa:65:76:75:ec:
0f:08:59:1a:e0:2d:9d:30:11:cb:00:e6:1b:81:a5:
9a:cb:a2:69:e5:6c:c9:23:12:72:ad:d1:32:13:30:
bb:71:41:a0:75:a9:19:d1:70:ac:8a:14:22:5f:4a:
c3:6d:ae:c5:da:f1:aa:56:44:43:27:31:88:c3:d7:
e4:66:99:a0:a7:6f:f6:6f:b5:df:c8:2d:78:93:7b:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AB:C5:52:78:61:03:AF:CA:C7:11:53:92:40:63:AE:A0:B1:63:7C
X509v3 Authority Key Identifier:
keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:08:ad:5b:d5:62:80:29:44:19:f4:26:08:cb:b8:b5:3a:e7:
86:dd:44:41:7d:33:4b:25:ed:d7:68:02:ea:c4:8f:74:50:40:
3f:87:87:6d:1d:6e:85:a0:1a:75:16:c4:fd:a9:04:a4:f4:a5:
88:65:36:eb:de:6f:9d:55:04:58:37:b3:c2:1e:18:5b:5c:23:
65:31:b2:f6:66:54:21:a9:ab:b7:d9:7f:9a:16:69:49:63:f9:
fa:cc:65:62:96:83:cd:de:88:36:6b:a2:a0:a7:51:7a:a5:40:
6d:ac:85:4a:23:20:04:b9:06:19:97:dc:c7:85:85:bd:73:75:
d7:b4:d7:67:b5:2d:59:af:87:c3:fb:61:10:26:a9:f6:18:2d:
55:e6:d1:ad:d9:76:3e:e4:d9:a1:e6:2b:97:d8:34:92:ab:da:
23:77:e5:a0:4e:92:01:4e:5c:b8:d6:3d:31:62:64:b1:22:01:
72:0d:e5:5d:bf:eb:bb:99:47:76:05:8a:9f:a4:89:10:a0:95:
22:e1:d0:47:8b:8e:ec:01:c0:e0:dd:4a:89:10:de:1a:e5:3f:
81:cb:e0:f8:29:0d:7e:ba:8d:76:24:91:37:2a:bc:6f:13:0b:
d5:81:f8:d5:07:e3:fc:8f:6a:1f:69:f7:2c:b0:00:e2:0b:6c:
e8:5c:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:51:13 2025 by rpki-client