Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: Defc0eHVZ7chKm8lrXNlguA8SBebW2wnixtsAz1+5DY=
Subject key identifier: C5:65:ED:EE:DB:23:13:FD:A9:67:B5:8E:76:69:67:89:5A:CB:EF:F8
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 0196857F2EC517CA18829FB8DAF20A9D88C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 0F57
Signing time: Wed 30 Apr 2025 07:00:26 +0000
Manifest this update: Wed 30 Apr 2025 07:00:26 +0000
Manifest next update: Thu 01 May 2025 07:00:26 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: gmBnJChCKItSLIarotn54H48grUrJxaS50k168PamdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:2e:c5:17:ca:18:82:9f:b8:da:f2:0a:9d:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Apr 30 07:00:26 2025 GMT
Not After : May 1 07:00:26 2025 GMT
Subject: CN=c565edeedb2313fda967b58e766967895acbeff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:93:8f:58:30:03:df:49:b1:1d:ee:bd:02:
f8:a8:29:69:1f:e8:0f:f5:61:88:48:45:11:5e:ef:
23:e4:64:42:24:1c:ab:d3:b4:69:d6:21:f5:f9:7e:
f2:97:72:07:b1:56:69:11:25:cf:21:41:49:ce:7b:
58:15:87:ff:10:a5:dc:a9:00:6c:5f:21:70:1c:fa:
bd:7a:d5:b1:88:96:12:05:36:35:0f:c4:fd:ef:8f:
af:2a:6d:67:ca:7e:be:1c:e1:15:38:b6:37:13:93:
1c:64:e6:ad:c5:50:a6:2c:67:b5:9d:d5:9e:fb:bb:
99:e1:f1:e6:65:b2:f5:db:60:a7:0e:b3:b6:53:1f:
ce:0a:47:f2:f4:ac:12:b8:f3:a8:ae:b5:3c:7d:4f:
e4:34:3e:cb:54:2e:99:3a:71:48:e7:05:93:7e:00:
d4:8f:36:51:a7:97:0e:a7:e6:d8:e3:1a:0b:04:19:
ba:4f:d0:c9:3b:fe:7b:03:db:6c:93:dd:36:d8:75:
6c:02:c3:7f:f0:29:e9:0a:39:b2:07:a1:ff:c5:e7:
99:b4:e8:2c:35:59:18:fd:9b:5e:e4:a8:8a:81:c3:
c2:74:56:bb:10:7e:e6:c5:f0:a1:8f:c4:6d:0e:eb:
c3:f0:9b:b0:5f:91:39:d4:33:23:36:de:bb:8b:22:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:ED:EE:DB:23:13:FD:A9:67:B5:8E:76:69:67:89:5A:CB:EF:F8
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:90:27:46:b0:29:79:39:cd:e8:38:2f:2b:0b:7e:97:83:69:
fa:ce:f8:8e:be:0f:e7:d4:ed:e6:23:dd:b1:7e:a2:86:2a:85:
93:85:b6:1e:ec:e5:c6:7b:59:d0:a6:8c:10:1c:09:4e:65:1d:
60:d1:b1:da:27:49:eb:d8:f2:e2:c1:f5:3c:9f:49:7f:c4:fc:
97:22:5b:d2:16:68:11:9c:e3:26:0b:2b:87:9d:35:d2:7f:03:
c8:e3:84:af:e8:dd:d2:3e:15:85:f4:f8:b6:ad:df:4a:a5:15:
fc:51:37:bd:08:a5:59:c5:50:5e:bd:0a:1a:0c:95:df:cd:d3:
25:fd:09:c5:ee:d3:88:bf:a4:9d:ea:c6:a2:fd:75:ca:30:4f:
be:9b:99:03:1b:82:a2:7d:1d:cc:72:8d:2c:4a:0e:84:43:59:
88:da:fe:5f:da:c8:99:04:cc:5b:ca:92:d9:94:11:04:94:e0:
58:b2:05:d3:9c:cc:12:5e:c0:c1:3d:cd:f2:c2:50:d1:ab:2c:
65:bd:ea:49:3a:c4:f4:6f:e2:54:16:ea:25:8f:e7:2e:9a:61:
8e:37:be:82:99:87:a0:94:1d:34:a0:1c:cb:c7:5c:c0:bd:9b:
2a:de:d2:91:82:b5:25:9a:fa:a0:db:89:99:2c:b7:b1:63:2d:
06:be:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:56:42 2025 by rpki-client