Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: mb2yDvuWKoGoqLFj9F2IDCcBTqXprKZkU+sA+CJOph0=
Subject key identifier: 09:59:1A:77:26:35:AA:AD:BC:0E:65:A9:4E:6A:8A:36:26:E4:B2:21
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019657268A11D45DD1377A3CAF28FE5DD858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 13F5
Signing time: Mon 21 Apr 2025 07:01:05 +0000
Manifest this update: Mon 21 Apr 2025 07:01:05 +0000
Manifest next update: Tue 22 Apr 2025 07:01:05 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: pRFjcyA+ksFNlegzTfxjUoQJvpc7V26Py1/D5PM1d5I=)
2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:8a:11:d4:5d:d1:37:7a:3c:af:28:fe:5d:d8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Apr 21 07:01:05 2025 GMT
Not After : Apr 22 07:01:05 2025 GMT
Subject: CN=09591a772635aaadbc0e65a94e6a8a3626e4b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:0f:9e:05:63:7b:9e:1f:b6:ef:3e:50:ec:
b9:ed:0a:d3:85:27:e2:95:d8:aa:b9:10:29:85:a0:
1b:de:a4:58:83:07:6d:41:dd:a7:ec:12:ee:f6:a3:
b5:c7:16:4d:41:00:e0:e2:7a:9b:c1:7c:86:45:1b:
d8:35:77:7e:b1:79:c0:95:d8:0f:db:4a:a8:fd:a2:
c8:c0:6b:6f:63:2a:96:6d:ff:3a:7f:6f:10:ea:03:
37:5d:71:7c:b9:f0:c7:01:88:11:10:23:54:54:86:
9c:e4:e3:e1:7c:ae:52:3f:8d:06:84:ce:8f:7e:3a:
5f:3e:37:33:09:7b:a2:0d:85:57:14:97:a7:cf:03:
71:d6:34:fb:6f:e9:45:24:10:af:15:11:6a:78:aa:
f4:d7:b3:b9:21:14:48:94:fe:69:c1:45:e6:0b:22:
e9:14:ab:dc:6b:cf:99:54:9a:18:3b:5a:61:9a:1a:
df:f9:e2:5b:63:a2:ec:c4:c6:50:e9:b7:6c:5f:6d:
78:3e:d6:ee:d8:58:38:1c:43:9b:86:29:9f:4a:1f:
0c:ba:4f:16:98:70:62:3d:e0:a0:24:c4:ac:de:3f:
93:63:4a:4d:b4:a3:2d:b7:d7:2c:13:d0:c5:23:35:
c1:71:8e:4f:56:fa:04:c5:eb:11:e8:6a:38:8f:05:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:1A:77:26:35:AA:AD:BC:0E:65:A9:4E:6A:8A:36:26:E4:B2:21
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6e:74:e2:74:f0:48:ec:23:48:1c:00:8e:45:9c:ec:0f:a1:
f8:a6:1a:5d:66:b7:2f:2a:db:87:da:ba:4f:8a:6d:8f:1e:31:
a0:25:8d:c6:53:7d:f5:8f:b1:83:b7:26:45:a5:34:3e:f0:18:
6d:33:50:d7:10:5e:6b:3b:b4:81:24:8e:9f:de:a1:b0:bd:da:
5f:dc:06:1b:e8:ff:16:e8:2d:3d:09:4e:fd:df:7e:67:ae:47:
85:d3:67:c0:32:b4:c7:9d:10:4d:69:74:de:fd:23:ca:5a:01:
b4:6f:a7:47:78:09:a3:62:92:90:98:db:27:c9:a7:fe:f7:d9:
fa:0e:c2:07:0c:02:26:38:a9:90:22:97:2a:2a:51:68:89:64:
e0:7a:ab:01:19:89:3f:30:97:44:35:45:b6:ac:99:dd:de:3b:
e1:ef:0f:e4:9c:2b:18:46:58:77:46:9f:22:ae:15:93:3a:0b:
5f:dd:4e:da:d7:48:58:4f:7d:14:18:1d:9d:6f:33:e7:85:31:
8c:13:2b:fa:9a:52:57:89:03:e4:c1:c8:d4:5a:05:2c:81:56:
d5:83:ab:b3:61:a9:f2:c8:51:f5:d3:68:c5:f7:48:28:6d:8f:
f4:45:36:00:35:d0:fe:33:5d:ba:39:53:77:57:51:02:2d:42:
1e:f2:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:18 2025 by rpki-client