Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: WWS4o38DXiMid9IHJ38sT7ugb7BXajRRxCVMiLrklsY=
Subject key identifier: 08:CF:B6:37:5C:4D:55:6D:0C:60:7A:40:57:64:74:B9:CE:89:41:13
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 0196753067C2AFB286F99C7B221560F048D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 10D1
Signing time: Sun 27 Apr 2025 03:00:28 +0000
Manifest this update: Sun 27 Apr 2025 03:00:28 +0000
Manifest next update: Mon 28 Apr 2025 03:00:28 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: yIESjumgp51ROnHPR8418QTaI8UOWpjkoPSrh01yWM8=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:67:c2:af:b2:86:f9:9c:7b:22:15:60:f0:48:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Apr 27 03:00:28 2025 GMT
Not After : Apr 28 03:00:28 2025 GMT
Subject: CN=08cfb6375c4d556d0c607a40576474b9ce894113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:3e:68:4d:9a:62:47:1b:0f:ef:84:ec:8a:
51:99:9e:5c:b8:b1:7e:7d:d8:f6:83:2b:39:8d:e8:
49:60:5a:a7:f8:55:9f:e8:04:ff:ce:25:89:e0:1a:
ae:ac:e6:2b:fb:a8:e3:5b:36:71:39:d6:76:2d:fc:
95:6e:57:52:23:07:d5:5c:73:83:70:bd:fe:00:3d:
0a:9a:02:ee:80:e4:04:cb:f6:db:f1:b9:80:c2:bd:
b1:10:bd:cf:81:c9:38:2d:dd:0d:09:1c:e3:f5:fc:
6b:42:41:24:86:12:bd:20:4c:09:e0:af:9a:1e:a6:
89:aa:61:d7:6b:b3:08:a5:5e:bd:5b:5a:cc:b7:1d:
53:07:29:3a:d9:2f:84:f5:3f:53:ea:c5:d6:5e:eb:
52:04:2a:f1:68:9d:e3:13:ad:16:5c:50:d6:43:91:
e0:70:28:d2:49:ff:12:2f:f2:a9:de:c6:e0:53:7e:
c8:28:29:1c:27:af:d8:ff:d8:e6:1e:0d:23:d9:2b:
f2:f5:cc:28:7b:99:00:8c:3e:ca:ed:28:05:63:61:
c5:39:1a:a5:20:76:de:c7:52:fd:0d:97:97:c8:a3:
d5:3b:93:fe:9b:1f:29:b2:01:99:37:10:0d:39:57:
2d:9d:e7:8b:90:6a:ff:07:5c:36:e3:ee:7a:d7:2d:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:B6:37:5C:4D:55:6D:0C:60:7A:40:57:64:74:B9:CE:89:41:13
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bc:bd:3f:79:3b:fa:bc:9f:ce:a2:b2:b7:88:24:c9:1f:99:
9f:9c:52:d4:6f:eb:7e:b7:db:76:d4:2e:02:a1:de:cc:9c:50:
96:d3:8d:ef:d2:0f:07:24:0d:14:a2:33:f2:12:cc:f2:51:36:
1b:9c:8f:1f:70:cb:6d:74:61:9e:dd:51:36:2c:b4:14:6a:35:
9f:f0:b1:c7:3b:5d:e9:33:91:ec:ac:74:ca:4a:15:48:33:f7:
6a:80:a2:53:67:de:36:3b:8d:d2:e3:c7:00:4f:3e:c4:d6:90:
a1:82:c8:26:30:e5:1c:e1:40:83:a6:04:b7:d9:ac:c0:41:17:
2b:09:4c:0e:42:d4:e0:84:7f:5b:aa:d4:8d:33:87:5c:ea:47:
aa:d7:dc:c0:44:12:50:93:32:b1:d2:e5:a9:ca:b0:51:cc:ff:
e9:cc:4a:57:57:46:75:b6:b5:89:75:62:a6:54:cc:83:96:5b:
0c:8a:07:77:d9:55:7f:4a:24:fb:a5:f0:9b:f8:3e:99:d0:10:
ae:5f:99:dd:82:28:b5:61:53:71:b0:5c:a4:f7:53:fd:3c:d9:
29:2b:8c:b6:52:81:ff:b7:21:68:7b:c2:a7:6e:0b:41:d2:73:
4c:ec:7e:c2:46:d0:71:24:05:bb:01:09:4a:16:8d:73:ca:19:
6e:92:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:15 2025 by rpki-client