Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: C8imfBSzIp4AOwwrC76gXSSIWG2fImBGUtvrOzaCCC4=
Subject key identifier: 71:11:A8:06:6C:F3:CD:EC:A7:B2:BA:50:6D:37:7D:11:8F:53:4B:1F
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 019644B1C942123AE369489FCC92D8B867A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0BC7
Signing time: Thu 17 Apr 2025 17:00:24 +0000
Manifest this update: Thu 17 Apr 2025 17:00:24 +0000
Manifest next update: Fri 18 Apr 2025 17:00:24 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: AgiPIhUgX2D0XVJ6dG3NpjZDPOWVGz88Jm1badR+7fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:c9:42:12:3a:e3:69:48:9f:cc:92:d8:b8:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Apr 17 17:00:24 2025 GMT
Not After : Apr 18 17:00:24 2025 GMT
Subject: CN=7111a8066cf3cdeca7b2ba506d377d118f534b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:09:d3:6c:d4:3b:41:c7:c8:25:c4:f9:f9:9f:
f8:c0:86:89:be:f0:fd:a5:cf:cd:5f:db:cb:76:3b:
ea:8e:3e:27:7a:49:84:2f:f7:1d:55:c8:89:19:28:
48:2c:98:0c:7d:39:0c:f9:19:69:3c:c6:5e:97:b5:
29:b9:68:cc:9a:5f:cf:75:dc:60:d6:de:ef:57:62:
26:71:65:6d:7b:e9:0a:da:de:8e:8e:bf:5b:8c:c6:
15:c2:74:8a:8b:28:31:33:21:da:5a:17:8e:82:11:
fa:a9:75:41:27:58:cc:35:6a:02:f4:c7:a4:bc:0c:
50:2b:90:66:49:c6:a3:fd:5a:95:c3:cb:01:c4:53:
be:9c:10:80:43:3e:3a:c7:02:f1:5e:ae:71:6f:34:
cd:e9:81:74:6f:78:d4:22:7e:3c:19:d2:a9:2d:59:
df:3c:8d:8e:f5:d5:7f:05:83:67:ec:79:6b:72:af:
a0:50:6c:49:64:bf:40:44:16:69:f6:83:63:44:61:
a9:dc:54:b5:52:4e:d5:a1:f6:80:74:ba:8e:23:b3:
7c:01:67:86:90:ac:d2:90:29:d8:80:c3:b5:0a:a6:
92:c1:fa:44:04:94:90:67:07:f9:08:1a:ec:b1:c8:
03:0e:d2:e4:c5:e7:57:2a:3e:96:e7:9f:2e:91:16:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:11:A8:06:6C:F3:CD:EC:A7:B2:BA:50:6D:37:7D:11:8F:53:4B:1F
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:33:f4:b2:80:da:7b:04:f3:af:3d:46:b9:d7:b0:93:4d:de:
bb:08:43:92:60:9c:07:98:34:a3:6a:3a:c8:0f:7a:ec:13:4b:
ed:7b:92:e5:1e:6b:8d:ed:10:fd:04:2d:d6:7b:c9:d2:9e:26:
a0:8f:67:83:bc:41:f9:ed:4d:da:a3:3c:d0:8f:ff:26:0a:dc:
95:81:31:53:34:ce:42:7f:7d:d4:f5:ec:33:02:87:39:1c:bc:
23:1b:77:5c:ad:f7:fe:8f:8f:16:0a:97:7c:80:98:c3:34:38:
11:af:7a:95:2d:31:af:05:4d:2b:78:d9:36:64:1c:db:47:fb:
c9:69:48:38:3c:56:d3:36:dc:29:00:6f:bd:25:c0:54:37:2a:
b5:c4:07:b1:35:8b:20:30:b3:b2:50:ac:ad:f5:76:c5:8a:94:
32:b8:f6:9b:16:93:be:16:04:73:c5:d3:85:d7:74:48:a8:10:
fd:11:6d:0b:bd:37:24:1f:1a:80:65:97:5c:2a:8b:5a:9f:2c:
b5:a8:d3:ab:ec:d6:21:95:78:80:46:84:3d:2b:a2:82:cf:b5:
48:85:e7:45:ce:96:85:b8:a7:f5:d6:54:0d:4a:9b:da:3b:7f:
c4:c8:93:94:61:fa:73:2e:8b:92:13:fc:a9:d6:72:40:10:a7:
26:0f:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:41 2025 by rpki-client