Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: HeTOCAC8ct7j2DvsvI639QuNKReZOE6Ptydg960orOs=
Subject key identifier: 65:9D:46:06:67:D8:2B:B7:B2:71:C2:B5:6F:A3:B9:48:FD:F0:4A:67
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 01965CF145CDECE597973169FAE20A87204D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 098D
Signing time: Tue 22 Apr 2025 10:00:37 +0000
Manifest this update: Tue 22 Apr 2025 10:00:37 +0000
Manifest next update: Wed 23 Apr 2025 10:00:37 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: QItDVfIjxNWoU1XYOfFDP1iq7Kq5BaL6xe8uvun45Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:45:cd:ec:e5:97:97:31:69:fa:e2:0a:87:20:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Apr 22 10:00:37 2025 GMT
Not After : Apr 23 10:00:37 2025 GMT
Subject: CN=659d460667d82bb7b271c2b56fa3b948fdf04a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:ef:e2:fd:6b:b3:93:24:2b:23:a0:64:16:
ba:4d:a7:fc:64:32:e8:10:7d:bf:b8:17:50:33:b7:
a3:28:35:6d:b8:b2:6e:55:a3:43:cc:67:98:d4:1a:
c8:77:cb:3c:20:98:9a:1c:49:9b:c9:ac:96:a3:ce:
a6:19:85:a2:09:55:44:67:59:bd:ed:b6:f4:77:9a:
fb:5b:12:f4:87:b7:da:d3:5c:9a:f1:85:77:91:32:
15:fc:67:11:b6:40:07:54:69:87:62:63:ef:d7:84:
a8:dc:da:55:fe:b9:94:86:79:94:46:9a:07:41:07:
2a:8a:98:22:57:d9:e8:db:0a:19:8f:bf:c5:d8:91:
24:98:f9:08:37:69:97:fd:ce:d8:94:49:35:dd:21:
ad:de:a2:f7:b2:1c:5a:0f:e3:f7:6a:17:36:e3:63:
f2:b0:68:9d:c8:9f:67:27:12:cb:6f:06:f0:ce:d3:
95:a8:2b:55:d2:00:12:39:1d:9b:eb:ff:66:80:37:
f7:ac:82:b1:e2:83:90:a2:02:41:f6:24:07:e2:c2:
ef:a0:31:da:d7:3a:c3:3d:3e:d0:03:a6:6b:30:b3:
5f:5b:00:16:0a:7c:f7:9f:9c:f2:0e:2a:88:94:73:
3d:de:a5:26:bd:e8:78:17:77:12:03:4a:e6:e2:87:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:46:06:67:D8:2B:B7:B2:71:C2:B5:6F:A3:B9:48:FD:F0:4A:67
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:96:ff:40:34:bf:1f:b2:25:39:f1:34:41:35:30:7f:39:a2:
d8:f6:71:bd:bc:42:f8:b9:d2:41:1a:ac:56:eb:67:e1:1d:e5:
ee:5b:c9:09:fc:42:f2:66:7c:ab:03:23:79:f4:0d:6a:b4:41:
0e:9d:b1:36:7b:a0:4e:93:40:c7:2e:d7:51:b5:a9:1f:fb:8f:
3a:3b:03:5e:bd:6a:ef:65:c3:8c:1c:e1:6d:12:a7:f5:a9:cf:
81:65:19:92:b9:44:30:41:1f:4f:b1:5f:62:ca:17:1b:cc:e6:
71:83:f4:72:6e:8b:e8:ca:f0:29:19:38:13:cb:ed:02:6a:be:
59:b7:35:f3:b1:6a:3c:6a:eb:63:8a:71:7d:90:90:44:6b:4e:
9d:89:10:00:d5:1f:8f:fb:d6:2e:ed:f2:ab:1a:10:02:97:1f:
c5:03:ae:34:a8:2c:e7:3e:21:32:74:55:df:7a:12:20:00:8c:
4a:40:30:39:77:c2:d3:f3:d4:4a:fd:3b:32:dd:92:76:8e:28:
00:bb:97:f9:b4:48:1f:25:16:a6:b9:3a:c6:8c:7d:d2:fe:0b:
a0:55:03:f1:c4:93:4a:b2:3e:25:4b:ee:4d:e2:33:92:4f:3b:
da:0f:15:70:ef:95:d3:9d:40:de:03:3b:cb:c9:a5:4a:21:f9:
e2:f6:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:05:39 2025 by rpki-client