Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: afXqbhZxoUhRExx46sOPYvqq3JkPsj6dK/x6yAlou2o=
Subject key identifier: 61:D9:15:90:C5:6C:05:BD:A5:D6:A3:07:75:B6:A3:4A:A0:42:70:53
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 01967FB40F04F64333F281E52624EFBB07C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 04:00:28 +0000
Manifest this update: Tue 29 Apr 2025 04:00:28 +0000
Manifest next update: Wed 30 Apr 2025 04:00:28 +0000
Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: 5dOQqu1a9su48bnHvI2PMjP7cHACBcRn+0LbsRDbo/Y=)
2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:0f:04:f6:43:33:f2:81:e5:26:24:ef:bb:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Apr 29 04:00:28 2025 GMT
Not After : Apr 30 04:00:28 2025 GMT
Subject: CN=61d91590c56c05bda5d6a30775b6a34aa0427053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:ca:0d:da:43:f2:d0:a0:23:f2:da:1a:4b:
48:c0:35:11:7d:90:e5:7d:5b:15:4b:b5:91:a7:2c:
4a:c4:20:51:1c:81:02:93:01:e2:97:e6:f4:11:e7:
8e:82:66:37:33:64:23:7e:00:d2:6e:67:45:84:ce:
1a:76:66:70:ec:2e:21:ed:12:0a:f1:88:46:4a:31:
75:ad:f3:aa:bc:e4:4f:6f:e1:72:08:f5:d3:c1:88:
ce:1f:3a:2c:5d:54:7e:e4:dd:f5:f1:61:49:57:e2:
b3:bc:ef:02:44:db:8f:87:19:dd:6e:09:6f:52:4e:
cd:ea:4e:8e:41:7e:20:d3:c7:c3:d0:1e:95:1d:f5:
e5:8b:ed:78:58:e4:c0:d4:60:dc:db:66:ce:cb:8d:
57:9c:a1:6b:0c:b9:b3:79:00:f4:ea:9f:f3:69:c1:
22:50:35:d6:d5:2b:fd:34:81:66:aa:de:41:b0:8a:
1a:6d:f7:a4:53:83:e7:f4:75:34:5d:41:07:6e:4e:
2b:01:25:a9:b6:23:4d:7e:75:61:1c:0a:1d:78:5d:
a0:0c:dc:de:61:a4:ad:c7:f6:5f:e9:9c:ea:11:4c:
7b:75:d4:c5:d6:91:05:4d:6f:fa:b8:7f:60:af:60:
ed:d9:7e:8e:34:24:1b:9c:30:43:18:66:f6:84:aa:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D9:15:90:C5:6C:05:BD:A5:D6:A3:07:75:B6:A3:4A:A0:42:70:53
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:64:59:fc:de:66:99:57:ff:08:6e:c9:c0:bf:16:57:3d:22:
7d:0a:74:43:1a:8a:97:e8:2c:86:b8:92:b0:bf:45:57:8f:3b:
bb:f6:82:a0:0f:35:af:58:5a:5a:5b:d7:1c:e9:cb:0c:88:04:
0d:4b:1e:b7:8b:63:0b:38:6e:1f:3e:03:bf:80:28:0d:eb:4b:
52:73:e1:c8:d4:79:8b:58:f3:82:45:a3:14:78:6c:96:3d:f0:
b3:89:9b:28:b4:45:29:b6:ab:e3:80:73:9e:e8:33:57:66:b1:
fd:e6:27:00:4d:32:d8:7d:24:66:be:73:9a:b1:32:68:af:37:
b6:72:40:7f:7a:57:fa:91:15:46:8d:ac:85:81:de:c1:57:38:
3b:81:35:94:8a:1a:07:a4:52:00:82:8c:3f:b1:24:68:2b:32:
a0:2a:dd:a0:7d:6a:7d:01:79:b4:4c:03:7e:0c:41:16:da:0b:
52:38:ec:01:76:b7:61:02:00:1d:29:62:2b:77:97:24:01:75:
80:05:b0:93:69:92:ac:a2:66:1b:97:fc:32:26:29:59:0d:a0:
1c:94:aa:cc:d0:66:1c:19:50:b0:e7:28:09:f5:93:05:2a:c4:
68:11:1e:3b:1a:33:e2:cb:ba:c6:75:dc:6a:4a:ee:e8:b8:a3:
95:d1:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:12:50 2025 by rpki-client