Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier: PwquEPHTrrJ4ZtlKJZGnLRfrJ5gMbGjEDgiN2b0lPqo=
Subject key identifier: 0C:A4:51:78:2F:3F:10:27:93:80:1F:E0:FE:9D:AB:5A:2E:8B:00:13
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial: 01960264A7185DDBC3F52D64CEE995711E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number: 05B8
Signing time: Fri 04 Apr 2025 20:01:12 +0000
Manifest this update: Fri 04 Apr 2025 20:01:12 +0000
Manifest next update: Sat 05 Apr 2025 20:01:12 +0000
Files and hashes: 1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: /6h35mz54le9d519ZDwGRbjxm/Z9tX1b6eFnMOtMeNo=)
2: 13rjk7Vk1R6bM8NZzwpn_wkWd18.roa (hash: eMrnrbTjuA+DpnVyQk46VnyH6+JrKX3BnnGUUHzyW6I=)
3: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (hash: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:64:a7:18:5d:db:c3:f5:2d:64:ce:e9:95:71:1e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Validity
Not Before: Apr 4 20:01:12 2025 GMT
Not After : Apr 5 20:01:12 2025 GMT
Subject: CN=0ca451782f3f102793801fe0fe9dab5a2e8b0013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:41:2c:ea:34:ec:51:7c:f6:d2:04:54:44:
68:e6:a5:8c:bd:ea:05:20:61:d2:97:73:a2:30:2d:
47:47:86:c7:82:66:c1:73:f4:57:d9:c8:70:1f:24:
9b:d0:fe:b4:ed:29:e2:c9:43:08:48:29:80:9a:e9:
47:8e:38:05:15:6a:85:8f:b7:a8:dd:d3:e0:24:40:
2b:13:d7:47:32:b1:7e:c4:20:57:69:94:d7:3d:0d:
aa:16:25:eb:b1:54:d0:84:dd:24:f6:9a:56:ef:b4:
38:29:fe:f4:26:15:21:b1:97:3e:79:c6:40:ed:e3:
99:59:89:d3:84:db:13:30:43:ab:37:90:09:36:e9:
e4:8f:b4:45:de:84:92:f0:ae:c7:a0:f4:cc:04:15:
bc:8f:7c:96:9a:a2:73:26:0d:2f:57:f9:ec:f8:f9:
c2:a8:51:25:5d:44:23:2d:25:89:d1:f3:52:aa:76:
4a:9e:13:ee:9f:f1:c4:5d:f2:ff:ba:d7:96:53:d5:
44:60:ea:87:42:4a:71:3f:26:3e:03:87:ba:de:0f:
d6:05:ad:2d:1c:c7:1a:36:f4:39:60:77:c7:b1:3e:
28:ff:21:25:a3:8c:fa:64:05:41:54:5a:dc:01:8a:
c4:22:dc:30:f4:38:95:61:c9:d8:3a:47:cd:e3:bf:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A4:51:78:2F:3F:10:27:93:80:1F:E0:FE:9D:AB:5A:2E:8B:00:13
X509v3 Authority Key Identifier:
keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3f:10:77:b2:6d:21:fa:05:ed:28:19:41:06:53:92:0d:08:
b1:ad:c5:fb:88:94:3c:58:ca:d7:0e:83:e7:b6:89:58:97:50:
fc:e5:f4:51:68:ef:1c:49:00:91:3e:69:ae:cd:4d:37:4c:7a:
f8:58:1d:20:b1:28:b4:31:cb:ed:09:99:c6:26:66:e6:b7:ce:
66:b0:24:33:5e:22:72:a4:6e:a7:52:ff:32:cf:1a:3a:d1:a7:
a1:1b:65:59:cc:7a:62:cb:c3:f5:e8:04:1f:6a:9d:83:5f:7d:
10:0c:54:ca:37:ca:a2:5d:d2:4c:f9:b3:8f:06:24:73:a6:9e:
3f:26:b1:a8:30:6b:14:6e:85:8e:d3:c9:36:32:c1:2e:85:55:
40:33:92:76:92:d6:39:75:f5:d4:ae:eb:2c:66:e9:a2:56:07:
60:f8:29:e3:fd:d4:be:85:49:f2:aa:5f:15:1c:58:81:f2:80:
ae:2d:38:8c:ee:9b:de:38:a8:cc:e2:ea:03:d1:4a:56:f5:32:
77:dd:6b:9f:1c:8f:05:09:ff:45:1e:18:cc:62:66:a8:ab:6e:
25:c2:03:59:7d:60:5e:65:4f:20:3c:ce:f3:e9:68:c7:f4:ac:
be:97:ae:36:4d:6f:f6:f9:ef:6e:df:54:af:1a:87:c8:a9:ba:
91:90:d6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:14 2025 by rpki-client