Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: tenDIdTlDU6klBkYmXUU9j7W3ererhHiyILh9ag0fWs=
Subject key identifier: 0E:C7:CC:CC:A5:B7:02:71:1A:A9:03:D8:3D:C5:98:84:5B:81:CE:66
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 01965A5E51956D79BFF6BE07679B77BACBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 1195
Signing time: Mon 21 Apr 2025 22:00:52 +0000
Manifest this update: Mon 21 Apr 2025 22:00:52 +0000
Manifest next update: Tue 22 Apr 2025 22:00:52 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: H13LXoypG1AigzmiSd1WPB9RCfwsh0ModUP72Ib/Z2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:51:95:6d:79:bf:f6:be:07:67:9b:77:ba:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Apr 21 22:00:52 2025 GMT
Not After : Apr 22 22:00:52 2025 GMT
Subject: CN=0ec7cccca5b702711aa903d83dc598845b81ce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:ff:2b:bd:38:f9:7a:db:ef:8f:dc:40:6f:
6f:28:f9:5a:11:81:67:f1:75:89:82:78:3a:7d:23:
7f:5e:88:7d:5d:ea:3a:0f:ef:32:99:56:15:df:27:
7e:d9:4d:44:a8:05:95:23:2d:d5:b3:73:27:47:ff:
e9:d0:7c:32:d5:01:bc:6c:49:e5:b7:d5:5e:5f:b5:
74:ac:77:37:4a:03:9e:d4:e7:24:32:95:d6:d4:c4:
23:15:10:03:c3:c4:d9:f2:99:a6:31:79:07:a7:0b:
24:fc:b7:06:9e:e2:86:aa:60:0d:d2:5f:c0:db:f0:
7c:5b:d5:d8:79:7a:99:8e:24:fd:c4:30:ce:1f:50:
46:97:fd:b1:61:a0:2a:bb:58:06:cb:23:34:5c:c0:
06:e8:94:c7:9d:97:96:1a:e1:d5:77:25:a2:6c:fd:
ce:d5:61:29:41:6d:57:3d:0f:1b:58:c8:49:cf:82:
29:fb:7a:5a:02:b6:0a:c3:52:8c:9f:93:2b:be:04:
81:5b:7a:fa:ad:3b:8a:7c:27:92:d1:ef:84:15:5c:
5a:01:e1:fa:1d:76:05:af:c8:f1:0d:8f:c4:08:f2:
42:a4:ab:90:61:25:11:2d:c7:de:14:72:1d:39:54:
81:d1:82:11:9c:22:e1:88:e3:a7:16:41:01:e2:a7:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:CC:CC:A5:B7:02:71:1A:A9:03:D8:3D:C5:98:84:5B:81:CE:66
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6e:49:bc:8d:8b:05:19:43:35:25:23:a4:0f:d5:2b:61:83:
24:d7:f6:84:f0:61:1f:30:ed:c8:86:67:54:e4:77:f5:f6:16:
f0:00:44:37:ba:eb:df:f6:b0:e8:1a:63:da:1f:64:93:eb:ed:
e7:76:e8:e4:7d:01:42:f2:39:99:84:f2:d7:50:79:22:0f:c1:
0c:8b:2c:30:95:b0:6a:06:40:42:6b:8f:f6:3a:5e:f6:23:a9:
2d:53:29:19:92:e9:b7:f9:3e:0b:30:4b:45:64:01:0b:0a:98:
d5:57:dc:73:0e:19:00:39:db:cf:f8:02:f2:bb:4e:f5:f9:88:
17:34:2c:ea:21:1a:e3:df:45:b8:77:29:6e:94:18:ae:e0:84:
6d:cc:a8:95:05:77:4c:b6:15:8c:1a:df:de:86:e5:5b:0f:b0:
a8:ab:3f:ac:2e:8f:5f:20:90:b2:a1:c5:92:36:e9:7a:fb:4f:
f3:8f:95:7b:31:60:db:bd:d6:37:46:98:ee:85:d1:a2:e4:eb:
bb:d9:5d:41:52:ab:c0:b8:15:db:f2:5e:d1:8b:9f:66:be:d5:
ab:72:aa:e1:f3:ff:5d:e1:05:96:87:4f:14:71:d4:3b:46:7c:
78:88:95:28:f5:9b:c4:03:6d:a6:61:9c:9b:e1:47:6f:0e:2b:
dd:26:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:09:25 2025 by rpki-client