Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: FUyO95eizwvM941JJL0BDrtQsNcolKdY44AHJMJDaJQ=
Subject key identifier: 66:93:AF:69:AA:11:AA:90:10:AC:95:F0:C4:3E:26:C0:16:54:DC:04
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 01964EC79DA4FD406D4FC1FFA1789A23AD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0C68
Signing time: Sat 19 Apr 2025 16:00:26 +0000
Manifest this update: Sat 19 Apr 2025 16:00:26 +0000
Manifest next update: Sun 20 Apr 2025 16:00:26 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: sH0XkTkeAKUCxdgLHdaLFgEG3pzTspeDYoN03nUVr3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:9d:a4:fd:40:6d:4f:c1:ff:a1:78:9a:23:ad:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Apr 19 16:00:26 2025 GMT
Not After : Apr 20 16:00:26 2025 GMT
Subject: CN=6693af69aa11aa9010ac95f0c43e26c01654dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:5f:78:93:ae:f2:2d:96:d4:32:50:f9:16:
9b:b5:99:e8:f0:ce:02:63:5a:bd:a8:ab:61:73:b7:
4d:6b:50:a5:06:be:cd:82:52:a4:e9:28:92:77:d4:
78:25:46:17:67:5f:46:d7:07:8c:76:8e:54:a7:1f:
b4:02:a6:80:7d:f3:e3:82:b7:40:8c:23:5f:71:da:
f7:56:c6:9e:04:66:fa:ff:fd:d6:98:52:86:fd:45:
d2:f6:b4:e2:32:05:3d:0c:10:a5:17:30:f2:ae:c5:
6e:5b:7d:7a:db:ad:30:15:14:31:5a:8d:fa:9b:68:
22:a5:3a:a5:3a:fc:f1:2e:a0:b9:e4:51:f2:47:61:
f4:ba:77:c8:ad:2c:db:e9:25:a5:e2:e6:99:d4:7c:
22:6b:f9:c1:35:c2:af:22:f4:15:7b:1a:12:5c:b9:
0d:4e:8b:dd:54:09:9a:e8:36:b4:77:98:18:de:d9:
9a:d1:01:df:05:2e:b0:74:54:3d:9c:df:80:f3:f2:
b0:93:b3:09:64:b5:ce:7c:fe:46:ca:68:7d:37:03:
dc:c0:a6:21:5f:cd:a0:a8:d0:3d:ad:04:64:98:25:
35:b0:27:0e:9f:ba:3a:23:7d:43:1f:b7:d8:08:ed:
10:78:e0:61:4e:c9:3a:56:dc:8f:55:52:b8:d3:c6:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:AF:69:AA:11:AA:90:10:AC:95:F0:C4:3E:26:C0:16:54:DC:04
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c0:97:9c:db:1b:cb:a4:be:c1:ce:3e:ce:11:bb:e5:7e:ec:
bd:93:59:27:ad:03:d8:63:b8:65:1b:2e:db:1f:e9:b3:5f:ed:
a3:2c:26:74:35:23:8c:7a:93:08:26:8d:c3:61:90:80:3e:93:
a1:2b:89:6c:4c:41:14:44:b6:3b:7e:66:d8:62:5d:79:00:d7:
d2:f3:8e:9c:c4:ab:53:be:fd:f7:28:4e:c9:02:1f:ba:ff:bc:
32:00:b1:68:db:ad:d3:94:df:7d:46:af:df:a7:14:f0:6e:2b:
1a:46:47:6a:39:b7:85:db:11:96:e9:4e:0d:cd:bd:b4:95:8d:
45:1a:2a:d3:e6:88:fa:03:26:02:f7:96:73:28:01:00:e8:8c:
d2:3d:e3:14:85:e6:91:34:da:86:61:b0:d0:7b:ee:43:7e:b1:
3d:79:c7:f8:c2:71:5d:a9:09:c4:b4:5b:84:e9:4a:ff:c4:10:
e0:26:af:b6:f3:08:c4:f7:21:a3:b5:6a:af:fe:e0:d4:93:dd:
ae:ec:f7:2f:d4:fe:81:09:cc:fe:cf:c6:a4:a3:7e:1d:e5:79:
3a:bc:ff:61:79:76:d6:78:0f:c4:e8:70:01:36:95:42:20:f0:
21:ca:33:26:92:41:80:62:38:0a:9d:7b:55:6f:b0:ab:fd:f6:
7c:bd:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:35 2025 by rpki-client