Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: gKaj1U8pJo6gMwUtXlX5mJKIbdruQXh5ov6em6PKHpE=
Subject key identifier: 24:46:FB:D2:B0:9E:4A:9C:BD:CA:DC:93:5B:FF:15:4C:92:24:53:2A
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 0196760C5BF2CBB22FE9DDE0419C5939094F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 1114
Signing time: Sun 27 Apr 2025 07:00:43 +0000
Manifest this update: Sun 27 Apr 2025 07:00:43 +0000
Manifest next update: Mon 28 Apr 2025 07:00:43 +0000
Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: phga/j+rDN9WAWBJNuj1/k0KYg/WN2jJBbZrqBSEFG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:5b:f2:cb:b2:2f:e9:dd:e0:41:9c:59:39:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Apr 27 07:00:43 2025 GMT
Not After : Apr 28 07:00:43 2025 GMT
Subject: CN=2446fbd2b09e4a9cbdcadc935bff154c9224532a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:1b:90:9f:ae:b5:2d:f9:54:8f:d1:77:fa:
7b:c2:42:55:09:c2:dc:08:b6:05:b1:84:e9:c5:a6:
df:57:a4:63:e0:58:43:7b:59:9d:e6:68:2e:72:67:
84:41:eb:d9:08:c8:e1:5b:28:d1:6c:a8:7e:49:cc:
9e:9a:a0:8f:8b:fe:9f:0c:f5:63:b8:13:43:5a:7c:
db:45:6f:c6:7b:04:2f:07:27:99:c9:49:84:99:94:
1d:0f:a7:36:d3:1f:4b:28:de:84:5e:0d:3d:94:e7:
08:ad:73:2e:a1:59:04:93:0d:a9:35:c5:1a:4d:e4:
e5:72:12:b3:ef:37:e6:20:dc:a7:36:b8:d0:31:36:
8b:33:ff:c1:19:01:47:7f:48:38:64:fa:db:e5:3a:
e7:c7:bd:18:2b:cb:60:6b:c1:cd:4a:e0:83:4b:e6:
b7:9a:a1:61:6d:b4:4f:1a:0d:ff:c1:db:b1:d7:ac:
26:64:58:66:8f:0e:30:81:cf:c7:0b:e5:04:72:84:
f2:d9:81:6f:bb:5f:73:f3:ec:b8:2d:f2:e1:48:2a:
09:84:f2:80:7d:bf:b6:aa:e6:a2:fa:b4:c1:4b:f8:
0b:69:aa:cf:bf:2b:ae:75:9f:4a:92:63:c7:56:c3:
7d:98:64:0b:50:ac:7f:7b:f6:c6:31:4a:1d:e8:fa:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:FB:D2:B0:9E:4A:9C:BD:CA:DC:93:5B:FF:15:4C:92:24:53:2A
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:db:bf:e0:86:0e:5b:e7:22:ee:5f:7e:8b:e4:1e:90:8c:
02:5f:2a:95:3a:c5:1c:a4:28:e2:5b:6e:a9:d8:aa:f4:94:ac:
1a:a0:8f:6a:a4:9e:e3:ab:3f:aa:93:f5:4b:68:ff:7b:0b:36:
bc:dd:4d:55:c3:0f:5c:bb:26:7a:fe:99:1c:67:7b:8e:4c:69:
f3:2b:dc:ea:74:5c:17:8e:a2:66:af:4c:ef:7c:dd:a7:2e:b4:
6f:ca:f5:f7:4d:7b:6d:64:ac:00:5d:0e:cb:71:db:e2:0b:c5:
f7:59:db:3f:fb:4b:1e:03:8c:10:fc:88:4d:5d:2e:77:af:50:
72:0a:6b:52:fc:09:56:56:6b:df:37:ae:75:06:76:4f:be:5d:
e1:8c:37:c5:11:4a:d9:79:62:c6:01:8d:70:0e:3f:5c:69:5a:
94:07:40:9b:99:87:de:0d:0f:91:16:a4:4f:30:88:6e:54:fc:
5e:5b:e3:95:59:76:d1:6d:ae:b0:79:6f:ac:7f:63:4e:76:63:
b4:be:71:51:60:10:69:bc:73:a3:b2:69:28:5a:93:1d:9c:08:
b9:1e:28:d1:6a:b4:a3:e9:0d:72:76:e6:ec:04:c2:20:15:93:
6f:c5:5e:86:da:25:c6:00:68:7f:b4:31:4c:cc:3b:d8:cb:f7:
7e:44:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:31 2025 by rpki-client