Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
File: YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft (raw, json)
Hash identifier: 6EMkvnIrxNigWYYE04lLRDorCJyXGM7f06CCoxdAcZg=
Subject key identifier: EE:1B:B2:41:A3:32:E9:EC:17:70:05:71:FC:07:72:3E:0B:59:4A:C2
Authority key identifier: 60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
Certificate issuer: /CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Certificate serial: 01967679FB15C89DC211710DE6BF075D8758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
Manifest number: 0688
Signing time: Sun 27 Apr 2025 09:00:27 +0000
Manifest this update: Sun 27 Apr 2025 09:00:27 +0000
Manifest next update: Mon 28 Apr 2025 09:00:27 +0000
Files and hashes: 1: YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl (hash: rqFfjNYLcCOsJQpD/ChtHobrnF4COHmcBx5ScH3WP10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:fb:15:c8:9d:c2:11:71:0d:e6:bf:07:5d:87:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Validity
Not Before: Apr 27 09:00:27 2025 GMT
Not After : Apr 28 09:00:27 2025 GMT
Subject: CN=ee1bb241a332e9ec17700571fc07723e0b594ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:40:c9:df:a9:eb:0f:0e:06:f1:ba:9f:df:
f9:39:89:4e:f3:da:9f:51:85:25:fb:e6:a8:de:60:
08:4d:67:5a:b5:86:3b:87:20:42:81:1d:7f:82:8a:
c2:c9:28:21:cb:56:03:4d:9c:ec:c1:84:13:05:37:
57:30:25:73:0c:99:72:0a:cf:82:70:5a:14:3f:ef:
e7:4b:73:ec:11:af:f7:cd:97:c9:e9:d4:dc:0c:7b:
4b:f5:0d:35:48:00:34:1a:6b:a9:17:4c:bc:af:7f:
8f:08:e9:39:d9:cb:83:75:98:a0:77:4c:f6:83:f3:
d0:6f:c6:ea:ed:fb:62:0c:b9:5e:ea:fa:07:4b:89:
13:7d:57:9c:3e:fa:80:cb:2b:e4:dd:0f:7a:aa:d8:
24:9d:cc:95:ea:a5:42:49:df:f9:ca:c9:77:d3:e8:
d9:0a:6a:6f:a0:a8:e1:95:41:59:65:da:65:47:90:
1d:83:29:c6:aa:96:21:8c:52:55:26:9f:ef:04:ce:
df:91:fa:c5:f5:d9:13:18:ee:c3:8c:4c:2f:79:78:
56:c2:12:e8:fc:c6:5e:45:6e:94:cb:be:80:13:da:
8b:e5:d9:49:0d:4c:02:40:fd:ee:f5:71:77:67:8c:
25:12:e8:c3:06:d3:27:47:d8:b4:34:90:60:68:96:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1B:B2:41:A3:32:E9:EC:17:70:05:71:FC:07:72:3E:0B:59:4A:C2
X509v3 Authority Key Identifier:
keyid:60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:94:b9:46:68:6b:f9:42:5e:00:9e:d7:ec:be:f2:80:f9:cc:
40:b5:91:32:66:31:06:c8:0b:10:57:eb:7f:49:71:1b:ba:2a:
d6:aa:f0:bf:91:c4:fc:1e:b9:36:d5:7a:69:32:4d:2d:29:b2:
59:55:61:59:7e:85:b0:18:4e:9f:07:a0:25:9c:90:b0:e8:9a:
cc:d8:91:54:79:7d:37:60:f4:21:61:c0:a8:16:5a:bc:e5:06:
1c:e3:85:ed:d3:51:68:22:88:10:b5:48:0e:6e:bc:f2:a5:15:
c1:8f:e3:49:e9:62:25:32:ad:9e:17:ed:1f:82:6a:c9:88:64:
ad:79:50:11:ab:8b:09:92:ea:3e:b5:fc:16:76:94:18:8a:c5:
1d:3c:fb:79:0b:9f:6b:ab:c0:2a:a3:c7:78:80:ae:b5:12:67:
33:a8:96:6b:53:c6:7e:ae:ae:40:c3:b7:0a:33:97:90:2a:67:
ff:b5:0c:ff:d9:bf:9d:b8:1a:cd:28:45:a5:92:d2:72:22:e2:
24:75:e7:c8:01:46:de:dc:d5:26:68:ae:2a:0a:c0:56:6d:07:
a6:e2:cf:2f:39:1c:db:20:30:2f:36:3d:12:55:f6:e5:2f:a6:
78:14:55:c8:1b:36:6c:9c:b4:6f:e6:06:55:5b:45:7b:9d:bc:
bb:ef:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:06 2025 by rpki-client