Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier: rkGdK9REIzAfgAvKO7Z9MQiapKKAqFkow17ef78UUx8=
Subject key identifier: 14:9C:46:E6:A6:24:92:26:FE:CA:08:20:92:22:89:6C:BC:C3:4F:9B
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 019670E612C6C3D4791375408D2488412172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 07:00:48 +0000
Manifest this update: Sat 26 Apr 2025 07:00:48 +0000
Manifest next update: Sun 27 Apr 2025 07:00:48 +0000
Files and hashes: 1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: 9MiaM3MTKjVD9oDfLGxGV8SOjj8pSAa8AIlMIWux7wU=)
2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=)
3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=)
4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=)
5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:e6:12:c6:c3:d4:79:13:75:40:8d:24:88:41:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Apr 26 07:00:48 2025 GMT
Not After : Apr 27 07:00:48 2025 GMT
Subject: CN=149c46e6a6249226feca08209222896cbcc34f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:7e:94:a3:aa:7a:44:57:44:ba:c2:e7:7d:
2a:37:5b:06:61:08:eb:08:bd:54:7b:14:78:41:4c:
3e:64:cb:d2:0b:dd:8e:ab:31:f3:4a:9c:a7:4d:16:
88:59:a8:a0:69:84:12:8f:20:c3:44:49:c0:90:4c:
bb:04:9f:ed:41:bc:de:39:fc:ce:92:19:5f:da:94:
f7:61:6c:c0:ff:d3:11:ef:fd:81:78:21:1c:7d:d1:
32:a8:a5:34:57:ab:29:51:8f:5e:30:c1:dd:76:17:
dc:51:bf:99:29:5c:00:34:5f:44:e2:e4:9f:29:34:
dc:09:ff:a3:da:4c:7c:64:c5:1f:e3:02:a8:e2:cd:
a6:10:c1:90:00:e9:03:6a:c4:d0:53:fd:13:db:18:
f6:13:be:c5:87:03:3d:e7:df:9a:5e:15:63:22:12:
22:f4:d7:c5:59:9a:c7:e4:b6:71:82:18:72:fc:3a:
af:60:7e:ed:ef:bc:6a:e2:9f:a9:d7:e4:1a:42:cd:
d9:f9:42:84:e8:dc:8e:d7:68:48:b8:90:32:17:d7:
c3:6a:77:68:a5:00:02:73:71:65:3c:cb:ae:bb:22:
53:16:19:d1:fd:af:a2:e4:ab:6d:c8:77:b9:20:d0:
7f:d5:a5:b5:89:f1:a9:15:00:e2:9e:07:4f:85:48:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9C:46:E6:A6:24:92:26:FE:CA:08:20:92:22:89:6C:BC:C3:4F:9B
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a8:85:d0:73:da:d4:ef:10:4b:d6:c9:be:8e:44:2a:0d:d6:
ef:bd:e4:72:1e:ff:42:9d:09:06:ad:b0:f3:9d:a3:69:ed:fd:
75:c2:80:c6:21:44:14:34:96:0f:24:3f:53:86:90:6a:98:bf:
c8:32:3a:9d:9d:2c:31:95:f6:2a:56:87:f0:a5:ff:0c:5f:5d:
e6:0d:bd:62:72:db:4e:3a:47:76:a1:10:6d:ef:56:90:3a:4e:
89:64:e2:b9:1c:99:55:a4:aa:ef:23:14:a5:d5:cf:42:d5:92:
90:1b:51:e3:b4:55:52:c3:27:8f:09:d2:70:b0:19:d7:3e:1a:
51:4d:06:7b:a0:9d:f2:a9:41:72:87:28:3e:39:96:82:64:e6:
04:67:ff:a9:96:67:ff:39:b6:8a:b1:d8:92:4d:21:89:0f:6b:
14:39:c1:69:e0:26:b5:c4:27:ce:a6:90:e9:89:46:c9:9f:5f:
5a:a0:94:82:4a:a4:d4:49:ea:86:3f:d0:41:09:90:ff:86:37:
95:9d:b7:23:44:44:b9:b6:ea:29:7b:16:b6:0f:fd:b4:74:77:
9a:26:a7:60:5e:39:18:bd:43:33:8c:19:f2:14:ee:fc:d4:f6:
99:7d:c9:fd:02:e8:34:cc:a6:0c:29:64:36:dd:5d:73:36:c8:
bf:81:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:04 2025 by rpki-client