
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: 7NXfP39C0eWNAvsremAQjba242ax2HbTfmcjSlceFBE=
Subject key identifier: 71:E4:6B:C3:3D:11:D5:53:71:DF:A5:58:66:9C:B5:15:24:2F:32:AF
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 01965A273D1F1A9B02564F189AC06B3B6B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 146A
Signing time: Mon 21 Apr 2025 21:00:43 +0000
Manifest this update: Mon 21 Apr 2025 21:00:43 +0000
Manifest next update: Tue 22 Apr 2025 21:00:43 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: ZgHGGQvKUNgroOOpYl0ntE8A5ueLJuDQOw1HoFXsTwk=)
2: gFgwOulWz8EdjBx0WPIuskEa2Xo.roa (hash: kmccz6rQP+OANRlJVswlZw+GA51smpUT7A9JAOVNjXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:3d:1f:1a:9b:02:56:4f:18:9a:c0:6b:3b:6b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Apr 21 21:00:43 2025 GMT
Not After : Apr 22 21:00:43 2025 GMT
Subject: CN=71e46bc33d11d55371dfa558669cb515242f32af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:6d:44:34:96:70:97:08:e9:d5:ba:80:fa:
c1:7e:02:49:94:eb:64:ae:96:4d:a7:bb:25:b5:90:
5e:20:54:3f:a0:ad:41:d8:6e:c0:ca:19:0d:98:19:
b2:87:c7:7c:cd:60:bf:a0:7d:c3:d8:a9:5c:7a:da:
c6:f6:10:b1:e9:1b:35:05:a3:ba:38:2b:2d:21:b3:
d0:62:79:33:f3:e0:61:0d:03:55:64:a2:9f:f7:42:
7c:e5:c0:fe:6a:1b:ea:2d:63:6f:aa:ed:01:ed:fa:
60:d7:17:fd:fd:ca:b5:a9:61:ee:49:52:32:e8:a2:
ae:74:05:2f:06:ad:0f:02:37:ab:ac:47:ec:f4:9b:
29:0e:4d:3d:74:e2:ee:fa:14:fd:b2:6e:1f:71:09:
d5:5f:3b:ea:f5:8b:99:ad:a6:51:29:0e:38:b5:50:
db:8a:b3:d4:fe:c6:cd:90:23:54:58:68:03:09:2e:
df:2f:7f:61:d5:aa:0f:8e:8f:20:5c:d4:43:39:27:
d1:a2:2d:ce:c3:16:08:c6:45:1e:00:86:a2:fd:92:
ab:22:fb:3b:9e:5c:c8:b8:db:85:e0:f6:e2:42:25:
23:4e:78:87:63:33:d8:d9:46:e7:e4:c8:70:92:69:
a1:af:f5:eb:d9:bc:80:84:02:9a:31:bc:fc:90:dd:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E4:6B:C3:3D:11:D5:53:71:DF:A5:58:66:9C:B5:15:24:2F:32:AF
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:85:0a:48:e0:7e:0d:d4:40:98:8d:49:3f:c2:2a:95:85:
31:b1:e3:b8:c0:82:d9:d7:2d:5b:0b:0b:70:14:40:7c:f5:ec:
1b:60:26:f4:d6:78:84:ab:c0:d0:cb:b9:b1:fb:ca:03:08:e1:
4a:49:02:50:94:2d:a4:4a:60:7d:f0:74:c3:96:32:d4:e3:50:
41:b7:3d:37:25:b9:32:40:82:15:6d:3b:cb:bf:e7:cf:12:66:
d1:52:28:4e:35:0c:f9:5f:a2:88:fa:89:f8:68:52:bb:6e:da:
c3:4a:4f:15:e3:28:53:b4:0e:3d:3f:d4:52:bb:e5:80:33:fe:
55:b3:f5:16:45:48:28:19:84:e5:53:49:e9:84:36:10:23:e0:
29:a7:ed:de:59:0a:4c:fd:c9:11:a1:20:5b:bc:ab:54:72:20:
cf:c7:2c:e5:c9:9a:cb:d0:e6:cc:2c:87:43:76:58:82:d0:16:
f5:c0:09:5b:be:0d:57:e2:a5:42:0f:1d:80:63:14:0f:eb:12:
0f:8f:3d:94:8d:bb:c1:5e:c2:f3:ec:32:5e:83:7a:a2:be:c7:
6c:eb:a6:85:b6:fb:fd:eb:c3:d8:36:bf:24:03:a1:8f:91:31:
b2:50:52:03:5c:2b:f6:28:2b:5e:1b:80:ef:0d:58:e3:f3:d4:
27:f2:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:27:55 2025 by rpki-client