Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File: YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier: 6ytY0eJLhTlWite13LqAMkEk15N22Gp3sEL84aZPMdo=
Subject key identifier: 92:9C:D5:5B:9A:BD:2D:02:90:FA:DE:3E:6B:F1:E1:22:94:99:28:34
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 01965B03B34F28F1A9661ED60D24CC04B618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number: 0DA6
Signing time: Tue 22 Apr 2025 01:01:31 +0000
Manifest this update: Tue 22 Apr 2025 01:01:31 +0000
Manifest next update: Wed 23 Apr 2025 01:01:31 +0000
Files and hashes: 1: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: ULFZZII818nIgxIKx5v5LMzX+6Xj09nPGYqUwhp1pUI=)
2: orR6QmUobPq58IiNnqewDNf0I7s.roa (hash: cEMGLelbH1U4lpzSE43pcUZRdK2/HRG/uJ16sgFxOVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:b3:4f:28:f1:a9:66:1e:d6:0d:24:cc:04:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Apr 22 01:01:31 2025 GMT
Not After : Apr 23 01:01:31 2025 GMT
Subject: CN=929cd55b9abd2d0290fade3e6bf1e12294992834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:18:b6:12:64:df:1d:e1:11:ac:a2:bf:8b:
3b:cc:6e:b3:60:25:d9:b7:f9:c5:b9:73:67:d1:04:
c8:19:6e:5e:26:e4:fe:8e:85:3f:fe:a4:2c:31:f4:
54:e3:3d:12:06:8f:e5:c2:02:4e:14:00:dd:8e:29:
a8:a1:1b:6a:d6:12:c5:dc:25:33:a2:6e:8f:50:c8:
dc:8e:ca:d6:9e:90:91:11:49:46:e6:18:42:f3:69:
72:53:d1:fd:84:90:dd:15:13:d7:84:c1:0d:d2:4b:
05:79:e4:2c:86:e6:ac:3b:34:1b:a6:8d:73:6f:e0:
ae:7c:9e:64:55:97:18:da:e0:a2:6e:1f:35:29:3e:
46:00:b7:eb:d4:90:81:63:40:03:af:dc:6a:65:e5:
1a:b5:31:3e:b8:e4:56:3d:7b:83:41:21:ff:9b:00:
75:ac:b5:7c:79:b0:c9:f9:7c:4b:6a:14:93:68:cd:
1c:d4:3d:e8:48:04:09:f5:aa:bd:ec:f8:ba:cf:ed:
2b:c3:12:26:30:e7:e7:0b:0a:07:73:75:28:2d:36:
23:42:bc:94:6f:10:45:f9:ca:26:7a:34:c4:04:29:
95:08:53:88:7e:14:52:8b:b6:05:9c:18:3c:b7:b5:
05:59:e6:4b:37:ae:a8:96:cf:3f:14:9e:52:78:ce:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:D5:5B:9A:BD:2D:02:90:FA:DE:3E:6B:F1:E1:22:94:99:28:34
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:76:ee:12:81:e6:d1:25:40:c2:c6:a4:6a:de:38:53:ec:
52:c3:17:11:31:a2:b7:c7:8f:ab:1b:61:94:63:06:02:df:28:
9b:45:90:2f:9b:dc:87:06:ec:f9:fb:90:38:a8:a1:f2:fe:17:
21:b0:64:a9:c1:0f:ce:7b:82:42:4d:76:4f:e2:e4:e2:94:c3:
02:88:8d:1a:fd:e3:1a:2e:ad:68:80:6a:e6:00:e9:0f:78:cc:
90:76:f4:0c:a1:1f:8c:13:da:e9:f5:fe:50:21:79:4c:24:9b:
0e:3c:d1:e8:0c:88:20:fa:72:f2:92:65:63:64:d4:60:8d:c8:
18:62:75:2f:87:f9:ea:f0:11:30:47:73:b6:c2:6d:00:c7:9c:
19:26:98:c4:7d:54:d8:57:bf:2f:fd:e3:3f:3f:f0:83:6b:03:
b0:c0:63:9b:11:d9:bc:90:82:6a:66:e4:6c:a6:4a:61:96:b3:
bd:dc:02:f6:f2:58:57:38:c4:9c:80:7f:9f:40:9d:07:95:07:
86:1f:2a:e4:04:db:32:4d:0a:45:d6:68:ab:6a:e8:db:81:39:
5f:15:26:c5:c7:85:61:8a:02:e5:16:c2:36:6d:b0:dd:01:80:
81:1e:b1:54:79:74:b5:72:79:67:a1:30:69:ac:8d:7a:57:cb:
8f:2e:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:26 2025 by rpki-client