Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: HFb/KumAfj5hBF08fSwkrqme1IfPzRwZto4PlTqBVBg=
Subject key identifier: 46:93:6F:60:57:E2:B8:28:5C:72:C5:F5:68:3A:53:47:3A:2D:C9:29
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 0196866898DEB300435D4F30EF10E6FDAF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 056E
Signing time: Wed 30 Apr 2025 11:15:23 +0000
Manifest this update: Wed 30 Apr 2025 11:15:23 +0000
Manifest next update: Thu 01 May 2025 11:15:23 +0000
Files and hashes: 1: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: wO5o3VJVAXiVI2nQaNo2nMVDBPYPIhyNKMHqEzdIyAg=)
2: mePGBqEVK7KCQwGBDig3FR2aGAE.roa (hash: oJUKD2e8eKsczg4FAo+BmsOVlphzVeYtcAqGeQgBh68=)
3: vvup4VxriGQ7WP6VC9ScYtwxj1M.roa (hash: cPowMqqvBH4GyyJFrqoymf0AaQQSobEdpJ1I1I37kek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:68:98:de:b3:00:43:5d:4f:30:ef:10:e6:fd:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Apr 30 11:15:23 2025 GMT
Not After : May 1 11:15:23 2025 GMT
Subject: CN=46936f6057e2b8285c72c5f5683a53473a2dc929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:61:26:03:74:a4:cc:15:3c:b9:5c:2f:47:
c5:32:33:93:96:f6:24:3c:72:af:00:6a:cc:53:0a:
94:86:71:ab:ba:23:e6:18:8e:32:8c:2e:62:43:95:
96:9b:b0:78:48:88:21:56:bb:21:06:a6:66:82:e3:
cc:34:84:3e:2b:fb:67:b0:45:b0:ff:5c:c4:20:84:
1f:dc:29:9a:ad:cb:fd:2c:88:b1:84:5e:6e:01:a6:
01:a6:ba:e3:6b:4d:7e:55:98:f8:f0:6b:9b:03:d1:
87:2b:b0:f7:ea:39:75:62:69:87:d9:f3:c2:2a:a1:
c2:48:02:a3:6e:a0:49:16:80:09:4b:23:f8:2a:c7:
ef:31:5a:58:75:60:77:0e:c0:52:64:24:96:57:f4:
b9:24:47:6e:9d:9c:2d:68:51:a6:e0:ea:d6:6a:55:
f7:28:a2:b0:a0:d1:5d:08:d5:a3:fe:0c:44:57:dd:
06:4b:c8:53:93:1d:db:30:a5:5b:57:2e:35:23:c8:
8f:0d:fa:5b:b9:1c:2b:c2:45:b3:cf:6a:15:44:bf:
1e:3a:57:6d:e4:13:c9:ba:56:dd:ab:51:af:fd:51:
24:a8:9a:d1:b3:52:40:3e:01:6e:af:f6:22:69:13:
fa:18:32:0f:46:6b:f5:3c:fa:1e:60:e7:7b:e5:4e:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:93:6F:60:57:E2:B8:28:5C:72:C5:F5:68:3A:53:47:3A:2D:C9:29
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:23:de:9a:d9:6a:f4:7f:8d:9f:10:5f:df:a0:77:17:22:1f:
24:fb:f9:e4:0a:c7:71:da:38:6a:2e:c2:2b:cd:ba:b5:04:5b:
53:7f:65:d8:d1:ba:da:0e:94:41:91:86:b5:39:34:30:3e:53:
95:6d:b9:f4:4a:b6:d3:98:b4:81:1a:6c:28:80:ca:06:ad:67:
78:c3:45:2f:c8:1d:32:4c:15:01:bd:81:84:a7:c2:c2:e4:ee:
28:c9:86:7e:3e:15:f9:f6:8c:c8:5c:6c:44:fa:6f:81:8e:b4:
f5:67:e1:e1:02:c2:6c:fa:f4:a7:f6:26:69:bb:c4:79:3e:b5:
2d:13:6b:53:26:89:a1:b9:03:7c:3b:be:1c:32:a2:0d:1c:f7:
27:51:23:5f:97:dc:3f:10:2e:e8:8f:62:69:b6:a7:72:0c:a2:
58:1b:e1:cb:85:70:7c:20:5e:bb:36:cc:23:ec:1a:89:86:bd:
e9:5a:a5:62:9a:12:fb:6a:79:72:ef:b6:05:67:42:35:b8:fc:
72:11:84:23:95:52:f8:a7:b1:fe:d0:1d:ca:59:e4:e2:10:af:
b8:03:6b:ce:8d:e2:bc:f1:db:f8:70:cd:8c:01:1a:f5:11:29:
d4:fa:ce:f6:4c:04:2f:05:7d:75:b7:80:e1:cb:99:92:1d:2a:
b6:d6:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:04 2025 by rpki-client