Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: ZdDqGnDfAz8NKr4aBbJlAYPCfhG+ASXL0drwejNSC78=
Subject key identifier: 24:18:46:68:82:7E:AB:BB:21:4D:E8:22:97:E9:4C:5D:9E:E6:47:8F
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 0196564A3E6BEB07AAEC1470C45327FBC8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 03:00:28 +0000
Manifest this update: Mon 21 Apr 2025 03:00:28 +0000
Manifest next update: Tue 22 Apr 2025 03:00:28 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: WxS9YrVkgLWQPrl7XshwODoYwr0Z0H8wzBpWwrkElNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:3e:6b:eb:07:aa:ec:14:70:c4:53:27:fb:c8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Apr 21 03:00:28 2025 GMT
Not After : Apr 22 03:00:28 2025 GMT
Subject: CN=24184668827eabbb214de82297e94c5d9ee6478f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:8c:09:28:c1:21:00:10:04:4e:87:b8:ea:
fb:8d:10:b8:ce:a1:70:d0:94:0a:14:4f:bc:20:61:
ac:e0:d3:cc:27:ad:25:36:99:a2:00:c3:cd:a0:6c:
1e:f6:d1:2a:c3:81:2a:e5:c9:e4:99:c1:68:6c:bd:
d0:54:97:3c:27:0c:43:57:6d:7c:bf:0c:6d:08:a8:
46:6d:23:23:c9:28:3a:aa:17:d1:1c:3e:3a:f7:67:
0b:90:24:01:c7:c9:e7:48:13:79:6a:70:1c:06:28:
b7:a1:39:15:f1:05:c5:14:d8:84:3e:ab:19:f5:e7:
7e:62:f7:10:86:62:ee:04:3e:72:7b:36:71:9d:65:
f1:d6:a6:e6:de:df:9a:cd:ab:0f:ec:ce:7f:bd:85:
73:5a:2f:9d:b4:50:37:c6:94:4c:bc:72:5f:c6:03:
71:b7:60:26:9d:5e:25:7c:94:5a:3c:d8:5a:3c:8f:
dc:d5:df:fb:fd:68:b1:a0:bb:87:38:ca:e3:b0:72:
65:06:27:37:26:38:47:79:05:d4:f0:8e:29:2b:10:
8a:9b:f9:fb:5d:5b:c9:86:60:9e:e0:48:6d:00:eb:
82:9a:5a:cc:b4:e3:06:cd:d2:a7:88:45:31:e5:4a:
9a:f6:81:0e:92:32:3f:24:77:d9:ca:0a:b5:d6:93:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:18:46:68:82:7E:AB:BB:21:4D:E8:22:97:E9:4C:5D:9E:E6:47:8F
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1e:cd:8b:39:01:ab:98:6b:ef:f5:c6:57:45:9c:91:70:3e:
5d:0c:37:42:b6:91:34:21:2e:02:49:34:43:0e:25:a8:b3:44:
cf:6e:4e:a8:3c:e1:05:1c:28:8c:92:73:11:52:fe:43:f0:02:
c8:10:83:91:e8:6c:59:19:fa:ef:0d:d3:39:9f:fc:8b:c5:be:
49:d3:bb:ae:58:56:8e:6e:3c:83:b5:d7:3d:d3:9b:8a:e7:90:
61:0a:43:2d:fd:f2:25:85:82:26:2e:27:f7:32:de:a7:2a:9e:
c6:7d:59:99:dd:9b:f9:dd:1c:05:97:7b:43:3b:43:54:7b:f0:
e2:32:9e:2f:4b:70:7d:fe:54:10:95:b8:1e:f1:21:42:2b:46:
98:88:61:7f:de:9a:23:48:df:84:3f:1e:7a:b5:83:91:c3:23:
f4:f3:b2:93:c9:87:fb:52:05:84:2e:35:d0:05:c7:02:07:85:
db:2a:45:1d:6f:eb:23:08:f7:26:55:08:58:4c:df:27:a9:5e:
8c:0b:e6:cf:d3:10:4f:41:28:e4:9f:8a:8e:29:52:3c:62:86:
60:0c:19:dc:f8:b8:c3:d5:f6:51:10:9c:43:45:a9:59:01:8b:
fd:5f:11:e7:cc:04:2d:76:0f:f0:a6:26:53:37:cf:bb:f3:fc:
31:9d:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:39 2025 by rpki-client