Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json)
Hash identifier: n877VknUMQNgMO5Q0uHA2nzuKJskp5GCbpkT0XUXnLM=
Subject key identifier: 1B:AE:8B:C6:EB:F4:DC:77:26:D7:AD:C2:15:D8:F2:57:95:0A:03:A4
Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Certificate serial: 01964D7EB8888DF2319A7EA7F17C4C28557C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
Manifest number: 020F
Signing time: Sat 19 Apr 2025 10:01:12 +0000
Manifest this update: Sat 19 Apr 2025 10:01:12 +0000
Manifest next update: Sun 20 Apr 2025 10:01:12 +0000
Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: nS/2FtnZazqjEkQayq0Ghaq/TMpfF2MaLiwT94OTWA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:b8:88:8d:f2:31:9a:7e:a7:f1:7c:4c:28:55:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Validity
Not Before: Apr 19 10:01:12 2025 GMT
Not After : Apr 20 10:01:12 2025 GMT
Subject: CN=1bae8bc6ebf4dc7726d7adc215d8f257950a03a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:5f:6b:63:58:3c:44:f1:87:40:86:61:cb:
b7:bc:85:49:56:63:39:0f:12:61:6b:78:64:b8:f8:
b1:55:ef:2c:90:93:2b:d5:5f:b2:08:8c:49:db:d6:
7b:95:4e:bf:85:e2:c3:05:e7:d7:b4:bb:cb:aa:e9:
80:15:3b:26:9f:93:81:fe:5f:a3:20:ad:00:70:55:
2a:1c:4c:34:a4:28:0c:72:a6:ab:6b:fa:ae:89:7f:
14:1b:9d:d0:7b:a3:2b:49:6b:53:35:04:98:7f:31:
e0:b6:d8:08:d1:f6:37:26:bc:b7:d0:6d:cd:5d:76:
c3:0b:f8:a3:b1:17:ec:72:ce:d7:e0:91:c5:f7:2f:
9b:ae:bd:be:fb:ba:db:54:ce:31:2d:f6:ad:4c:da:
39:ce:9c:5d:e4:37:2a:a5:56:13:ba:e7:75:30:45:
67:eb:5e:32:e8:f9:16:91:72:f3:83:2d:46:e2:67:
93:19:ae:2f:55:7f:91:16:99:a4:d1:71:d5:6f:a9:
8d:c5:96:cc:8a:95:e6:a6:46:2c:e6:82:c2:55:cf:
00:fb:68:c7:cf:7c:3c:9e:39:e9:d1:ae:e6:5e:1e:
4c:f5:16:0c:f3:26:9a:18:e5:59:2f:15:52:1d:b8:
f0:f9:35:de:e9:33:24:9a:85:10:c9:53:4c:54:c1:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:8B:C6:EB:F4:DC:77:26:D7:AD:C2:15:D8:F2:57:95:0A:03:A4
X509v3 Authority Key Identifier:
keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0d:03:e9:1a:da:bc:c6:28:6c:6c:bf:65:7c:61:1f:cf:50:
e1:7c:ba:3e:80:29:df:60:f9:e1:35:b6:17:61:d1:e7:0f:10:
cb:dd:f4:1c:b7:ba:67:c3:8d:13:50:1c:09:94:b0:6e:60:c2:
91:9b:eb:fb:b3:95:65:5b:66:c8:63:bf:25:d3:8f:37:3e:0a:
aa:e4:a1:9f:94:20:6b:0a:ac:70:5e:b4:d3:93:17:62:38:8d:
dd:1e:93:00:85:3b:e7:e7:e9:b7:f2:c5:cd:44:1e:fa:a6:df:
d8:fe:d7:31:00:8c:fb:3d:0b:11:7d:f2:0d:6b:e0:d4:ee:f8:
5e:35:f8:29:0b:2b:db:65:e3:38:9c:76:30:38:d4:6e:be:22:
a6:32:0a:67:64:2f:4f:eb:20:3b:86:c9:69:03:96:b5:77:bc:
58:26:f5:8d:11:24:e1:60:e2:dc:9c:ab:62:c1:19:92:49:64:
02:e0:41:45:62:ea:e5:7f:b3:09:a9:b1:ee:ff:1d:54:ac:81:
4a:02:3e:7a:d4:fe:a9:30:71:57:fb:17:a8:2d:91:04:78:12:
44:be:a3:9d:3e:3d:c1:63:d0:14:ce:fc:d9:ad:bd:ed:e4:37:
2f:97:99:3a:72:37:e3:c6:1e:37:f4:cd:4a:91:af:7f:76:48:
ad:1a:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:34:35 2025 by rpki-client