Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: mgLFL50bbDOnVurcyff+B/gRaBI9zRMbvCIRFZqzW8w=
Subject key identifier: C8:F5:85:72:A3:EE:3C:AD:46:2D:70:9E:9E:8F:CC:B4:C8:BE:D7:47
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 019655DCAAD9E34BC5477577190C6DF1940F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 0468
Signing time: Mon 21 Apr 2025 01:00:46 +0000
Manifest this update: Mon 21 Apr 2025 01:00:46 +0000
Manifest next update: Tue 22 Apr 2025 01:00:46 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: 4Aq6caQ6Cn9wDIFr+p6QHWZL6jIiGAY1QRW89lZDGSs=)
2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:aa:d9:e3:4b:c5:47:75:77:19:0c:6d:f1:94:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Apr 21 01:00:46 2025 GMT
Not After : Apr 22 01:00:46 2025 GMT
Subject: CN=c8f58572a3ee3cad462d709e9e8fccb4c8bed747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:9b:d1:ed:c7:e0:51:6d:23:86:14:0b:9c:
aa:fc:3c:99:35:06:a2:3e:96:63:e6:6d:40:54:40:
1a:7b:f7:f3:ea:97:bb:09:3b:04:3a:4c:69:03:e6:
10:0d:39:89:2b:a1:80:fc:26:54:e8:cf:14:2f:a8:
f8:d7:e0:70:62:03:b9:f2:a3:58:2d:f1:85:f5:c6:
fb:7d:74:71:ec:e2:ef:cb:10:d6:f8:5c:7f:df:88:
ac:48:23:6e:3f:2a:64:bb:71:91:43:6a:65:1d:b7:
32:36:70:17:37:04:02:8a:c5:8f:50:a5:ad:66:7a:
8b:ce:2a:a7:90:20:fc:2d:4f:07:2b:f8:12:ad:67:
e5:52:79:3a:9a:16:d3:82:42:dc:a8:4c:5b:79:f0:
50:52:fe:e8:07:a7:ef:d1:d4:7d:af:8b:f4:34:74:
cd:ca:68:b4:d5:e8:60:1d:ba:15:d0:13:92:a4:54:
36:a9:bc:85:88:c2:f4:42:44:0d:e8:c8:0d:87:1f:
05:fd:ff:d6:53:84:b8:dc:0b:3c:9e:c5:f3:9e:f6:
e0:ec:2d:6a:f6:a4:7f:6a:4e:4b:1b:aa:96:c7:13:
1d:47:ae:b0:2e:97:34:be:cb:e8:a1:fb:c7:c7:8c:
f7:39:7d:d2:0c:f8:87:44:90:62:58:8c:b1:65:be:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:85:72:A3:EE:3C:AD:46:2D:70:9E:9E:8F:CC:B4:C8:BE:D7:47
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0b:a4:33:41:bd:36:5b:76:7b:d3:ed:d1:a8:8f:f6:c0:cf:
27:9b:3e:9f:60:67:78:5b:26:0f:98:55:f2:47:33:ee:14:a0:
6d:1d:2e:79:85:d2:43:1f:1a:bc:c4:5a:cb:98:01:86:0c:36:
7b:96:1a:ac:a1:b4:1f:70:f5:2f:73:12:38:f6:ee:91:74:ee:
e4:54:14:89:cf:53:6f:d9:9a:99:7c:45:e0:16:6d:b9:11:0b:
fc:1b:1c:58:dd:42:87:f8:f6:14:6c:10:1c:06:8c:ac:0b:20:
3f:08:18:0e:1b:d7:2d:61:05:79:77:a9:65:4b:e9:09:a3:e6:
c2:87:87:85:5e:9f:e4:1d:26:35:e5:d1:b5:f2:41:3a:ad:c9:
03:b4:f2:f1:da:32:a8:3b:23:00:ae:f3:ef:3e:38:14:6a:08:
8e:27:ca:12:5f:0d:84:9d:ac:36:4f:c4:2d:87:d0:8d:ab:b4:
5b:b6:a6:c7:fd:c8:b1:a3:46:50:10:c7:c2:a1:9a:91:f6:59:
13:a3:ed:d8:ee:2c:bf:1a:9f:20:b4:8e:ef:69:e3:28:3d:e9:
36:f9:ac:f7:ca:a9:6e:8f:32:b6:a9:38:e9:47:68:73:dc:c6:
96:ec:14:01:db:15:3c:2c:f9:f1:91:36:fd:da:cf:63:59:45:
7d:18:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:17 2025 by rpki-client