Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier: JGGG9OntubeYqasBmp+ya/0X0Lh5SuwsY02K0L88acQ=
Subject key identifier: 64:28:D6:85:F2:B6:84:F6:AC:0B:70:F1:8B:04:56:49:CC:9F:C2:5E
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial: 019684DA7BF1D20230FBEC86A9E4CC170CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number: 048B
Signing time: Wed 30 Apr 2025 04:00:33 +0000
Manifest this update: Wed 30 Apr 2025 04:00:33 +0000
Manifest next update: Thu 01 May 2025 04:00:33 +0000
Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: 4hGB9a3gcHZdoE/Mu1UZxO0CpcqCODdH7vROEeCd+cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:7b:f1:d2:02:30:fb:ec:86:a9:e4:cc:17:0c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Validity
Not Before: Apr 30 04:00:33 2025 GMT
Not After : May 1 04:00:33 2025 GMT
Subject: CN=6428d685f2b684f6ac0b70f18b045649cc9fc25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:e4:95:75:9c:a7:66:dd:47:7c:77:a4:dc:
a8:02:bb:e9:65:71:62:ba:6a:91:73:85:bd:b3:d2:
e3:3a:b0:fa:87:b0:f3:80:1f:28:4a:42:b2:62:fb:
4a:8c:6a:b3:5f:bd:1f:c0:bf:f4:bb:a4:8f:a1:dc:
db:2e:61:c1:45:de:47:36:8c:bf:3a:45:ef:ec:29:
7a:5a:08:d5:d9:fa:a7:4d:57:3a:1f:b8:2e:2d:e1:
a1:40:8a:71:50:fe:f8:a8:e5:b6:fe:03:7f:8a:d7:
81:5d:e4:73:8b:fd:35:58:d6:a7:42:93:b6:75:fe:
9f:4c:c8:6e:2e:40:1b:69:09:65:17:b0:f3:76:07:
7b:16:9e:18:40:27:21:04:2d:db:7b:0b:de:41:b3:
8c:2b:03:2e:ed:da:5b:5d:ee:31:79:82:9c:8c:4e:
6e:21:ab:84:87:73:22:7a:93:a2:32:62:96:41:4a:
5b:8c:c3:42:f3:18:7b:ee:1e:14:af:53:ee:bf:18:
16:4e:e4:f3:06:f6:89:56:38:94:37:99:6f:ea:2f:
61:a4:74:e2:0e:02:2f:5d:1b:73:2c:e7:cd:34:53:
84:de:3a:37:d0:c8:f8:cb:fa:26:c3:ad:dc:ad:e8:
ff:e1:15:58:36:d8:6a:cd:0c:e3:9d:5a:50:93:76:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:D6:85:F2:B6:84:F6:AC:0B:70:F1:8B:04:56:49:CC:9F:C2:5E
X509v3 Authority Key Identifier:
keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ef:e9:78:07:0c:5e:7a:3a:ca:91:b8:11:1a:e5:01:c8:44:
bb:c5:a7:d9:26:82:6e:53:17:cb:6a:85:ff:91:47:3c:ab:e5:
22:47:e3:18:81:70:d5:3d:1a:c9:98:2f:33:e2:b0:be:b1:33:
e6:3c:4f:12:e6:dd:15:78:07:c5:b3:46:fa:9a:01:07:10:72:
68:75:24:5a:27:46:75:1e:fc:a1:96:6b:e2:7c:4a:ba:db:a1:
8c:96:0e:aa:37:00:96:8e:c0:42:21:75:51:ad:fb:68:56:c1:
1d:7c:24:f8:70:e8:bb:12:94:be:ae:0b:da:d0:81:f3:aa:65:
f7:95:9a:4d:7e:84:63:8d:bf:b3:fc:88:c3:49:43:72:ce:94:
48:8a:ad:de:e3:bf:71:f6:9e:8c:c8:c2:eb:f6:24:bd:48:39:
40:5b:68:99:3f:dc:a3:d7:9d:b8:cd:8b:bf:86:80:41:03:d2:
b2:1c:e1:51:ba:23:35:08:4c:83:71:c6:17:c5:b0:95:c0:43:
a1:71:a5:89:2b:fa:a0:f0:a2:e7:fa:5b:16:bc:c4:c6:d8:76:
21:92:eb:d4:43:66:af:2c:0e:7a:f9:b0:25:0b:72:6e:82:da:
23:f9:1d:34:e3:28:e0:06:f0:c2:5c:02:30:ff:69:d3:25:0d:
f7:97:18:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2nvx0gIw++yGqeTMFwzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzI0MmM2ZDFjMDRiZTAyY2RjNDI3ZmNmMDRlZDU4OWIy
MWMyYmMwHhcNMjUwNDMwMDQwMDMzWhcNMjUwNTAxMDQwMDMzWjAzMTEwLwYDVQQD
Eyg2NDI4ZDY4NWYyYjY4NGY2YWMwYjcwZjE4YjA0NTY0OWNjOWZjMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NfklXWcp2bdR3x3pNyoArvpZXFi
umqRc4W9s9LjOrD6h7DzgB8oSkKyYvtKjGqzX70fwL/0u6SPodzbLmHBRd5HNoy/
OkXv7Cl6WgjV2fqnTVc6H7guLeGhQIpxUP74qOW2/gN/iteBXeRzi/01WNanQpO2
df6fTMhuLkAbaQllF7Dzdgd7Fp4YQCchBC3bewveQbOMKwMu7dpbXe4xeYKcjE5u
IauEh3MiepOiMmKWQUpbjMNC8xh77h4Ur1PuvxgWTuTzBvaJVjiUN5lv6i9hpHTi
DgIvXRtzLOfNNFOE3jo30Mj4y/omw63crej/4RVYNthqzQzjnVpQk3bhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQo1oXytoT2rAtw8YsEVknMn8JeMB8GA1UdIwQY
MBaAFMnCQsbRwEvgLNxCf88E7VibIcK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUt
OTQ5NWYyNzUzMzE4LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUtOTQ5NWYyNzUzMzE4
LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu/peAcM
Xno6ypG4ERrlAchEu8Wn2SaCblMXy2qF/5FHPKvlIkfjGIFw1T0ayZgvM+KwvrEz
5jxPEubdFXgHxbNG+poBBxByaHUkWidGdR78oZZr4nxKutuhjJYOqjcAlo7AQiF1
Ua37aFbBHXwk+HDouxKUvq4L2tCB86pl95WaTX6EY42/s/yIw0lDcs6USIqt3uO/
cfaejMjC6/YkvUg5QFtomT/co9eduM2Lv4aAQQPSshzhUbojNQhMg3HGF8WwlcBD
oXGliSv6oPCi5/pbFrzExth2IZLr1ENmrywOevmwJQtyboLaI/kdNOMo4AbwwlwC
MP9p0yUN95cYBw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:53:03 2025 by rpki-client