Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: +tWrqYS0VfveCSMjUWLNYsq0tvuZtrHxApBEP6A5uZ4=
Subject key identifier: 33:8A:53:D4:C3:5D:BD:29:0A:A3:B7:7F:37:25:AD:74:6E:F0:01:08
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 019679E95EFD6C4ACB48848EA028AB7F4D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 118E
Signing time: Mon 28 Apr 2025 01:00:59 +0000
Manifest this update: Mon 28 Apr 2025 01:00:59 +0000
Manifest next update: Tue 29 Apr 2025 01:00:59 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: xE9f+tMpK6JHskaI6J3sCYhaU5nTpUrfMOch4AdKbIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:5e:fd:6c:4a:cb:48:84:8e:a0:28:ab:7f:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Apr 28 01:00:59 2025 GMT
Not After : Apr 29 01:00:59 2025 GMT
Subject: CN=338a53d4c35dbd290aa3b77f3725ad746ef00108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:88:4a:21:46:05:b2:56:6b:b2:7b:09:10:
17:46:ef:b4:e3:a5:48:82:37:12:13:47:9d:1c:76:
cd:a8:70:7a:2b:7b:35:2a:96:2a:d2:bb:19:5d:18:
b3:41:f3:57:36:20:4d:e4:3d:a6:00:e5:9b:66:86:
2d:bf:0b:a8:7f:2b:b0:12:9a:7f:63:ee:a0:81:f7:
2d:74:f5:85:d6:d9:31:8f:19:5b:eb:e1:e3:1f:26:
c8:01:a0:ab:0b:0a:cd:37:1d:dd:92:eb:ca:b3:3a:
d6:10:0b:60:a7:76:19:01:ee:1b:e7:15:96:b3:43:
38:0b:08:cb:23:9d:4f:3e:31:8d:f9:58:df:86:fe:
1b:78:44:4b:dc:4b:7a:cc:40:37:1c:48:7d:16:a7:
71:92:84:a0:ec:17:b4:92:c4:40:37:81:26:ff:bb:
ad:20:f3:09:2c:f9:07:fe:17:05:d4:62:b7:ce:d0:
ed:68:d3:b9:e9:d2:71:5f:2b:31:c2:42:41:1a:0a:
9a:c7:08:49:39:d0:ec:2e:5c:e9:c2:01:7e:a8:86:
f2:cc:f7:e6:45:cf:b0:74:16:26:3a:08:fe:c4:1e:
70:8f:82:d8:e5:0b:f7:08:20:d4:bb:4d:cd:e8:b4:
99:04:93:d8:22:6b:2e:25:b2:4c:97:3d:6a:02:d4:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:53:D4:C3:5D:BD:29:0A:A3:B7:7F:37:25:AD:74:6E:F0:01:08
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:39:cd:08:ce:f9:b6:e0:bb:c2:a2:4c:a1:9b:6a:7c:c2:a2:
06:d6:f3:76:7c:ef:8a:19:1b:24:5e:32:9d:40:84:3b:af:95:
e0:e6:41:c5:80:f2:57:a4:2b:ff:e9:2d:97:da:d1:4c:b1:b4:
9b:3f:59:93:d3:91:41:00:01:a8:62:b1:a3:fb:b5:77:d2:c0:
89:61:fd:5f:dc:86:c2:01:2a:ec:f3:03:11:b4:11:e5:40:54:
12:2a:59:1d:a2:ed:4c:2c:7e:70:a5:f7:a0:cc:1f:6f:40:16:
7c:9b:3c:d3:ee:67:92:8a:a5:0f:38:3f:3f:97:29:a2:1f:aa:
c4:ca:40:77:d0:b0:7a:ee:3d:0a:2e:f5:97:9c:cb:e5:48:31:
67:9b:d0:74:4a:23:d9:55:f0:23:03:c6:f3:68:2f:07:71:8d:
e4:8a:5d:2c:e6:22:ff:67:f5:f1:ce:fb:98:8b:8f:40:dd:5e:
41:dd:9c:5c:32:72:2b:77:2f:12:f7:9a:db:a7:7c:a9:ae:58:
c1:f8:93:68:e0:da:54:48:bd:61:3f:01:b7:7b:a4:41:b3:7c:
7c:cb:ac:66:a0:96:f1:32:23:95:a7:75:d4:e7:b3:3a:d6:28:
6b:f1:ae:10:b5:04:10:fb:d7:66:03:51:4e:a7:7f:34:5e:a7:
39:7a:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:12:26 2025 by rpki-client