Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: A8AkIGN/X2qdcxvXKtpgnlnNJXRauYLIq5YdwdcnM+U=
Subject key identifier: 56:57:1F:54:94:C5:0F:6A:80:00:99:9D:FB:D8:6B:DD:51:9D:68:E7
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019645569D217B5493EC917E17988CDD7210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 133D
Signing time: Thu 17 Apr 2025 20:00:26 +0000
Manifest this update: Thu 17 Apr 2025 20:00:26 +0000
Manifest next update: Fri 18 Apr 2025 20:00:26 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: NiaHjGKOciT12FOtzFMLnZ9oevt1HwbWE8FPJkVTOkk=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:9d:21:7b:54:93:ec:91:7e:17:98:8c:dd:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Apr 17 20:00:26 2025 GMT
Not After : Apr 18 20:00:26 2025 GMT
Subject: CN=56571f5494c50f6a8000999dfbd86bdd519d68e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:e4:22:9d:5e:e1:91:77:8e:d0:39:29:0a:
f1:f4:71:be:d8:31:5e:b2:84:4f:64:12:46:74:0f:
8f:f9:bd:f3:a4:23:54:1d:cb:bc:fd:25:fd:ec:74:
1c:dd:16:2b:61:03:ae:9f:47:04:d3:f9:8b:d7:43:
f4:fd:30:21:13:4a:9b:8b:58:84:7b:78:09:1f:2e:
8c:cf:a1:fe:68:30:6c:3b:86:41:dd:54:44:e7:a6:
26:31:b2:81:6e:43:54:03:67:f9:04:ed:fb:cc:b6:
3e:f0:6c:49:fe:6a:d9:e5:ad:5b:2f:1b:54:1d:1f:
d4:a9:8f:a9:7b:cf:ac:f8:f8:c6:7b:9a:c6:64:5e:
d0:68:92:7d:e9:71:ca:9a:0e:58:af:3e:8c:5a:91:
eb:21:c1:f0:39:3f:8e:8f:3e:98:18:5a:60:e5:c1:
57:f1:70:1d:1c:6f:4f:0f:0a:9e:17:a9:d4:90:b6:
74:c1:73:13:d6:0c:f4:d1:33:e4:72:c1:8e:4b:cc:
c2:41:c1:20:c4:84:dc:a2:7b:dc:5e:dc:7d:3d:f3:
41:56:0b:45:e5:0b:1f:cf:35:c5:f0:55:35:d6:d1:
c2:cc:89:e8:cf:59:16:6e:23:70:f0:f3:ba:79:0e:
0a:3c:98:b9:9b:41:03:ab:34:d2:2e:8c:65:9f:5e:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:1F:54:94:C5:0F:6A:80:00:99:9D:FB:D8:6B:DD:51:9D:68:E7
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:69:55:50:a2:81:af:0e:d4:e8:5e:ff:d9:fb:de:eb:af:
8e:9b:67:14:c1:df:97:12:3c:2e:87:94:22:e7:fa:a6:ec:09:
10:31:71:2d:12:5d:06:f5:c4:2c:1f:d1:b4:94:0d:e2:62:72:
2b:80:d2:ac:88:2b:a5:6e:c2:52:e0:ec:b5:8a:db:16:e3:db:
e7:8d:a5:c0:a3:35:f1:4b:f0:80:83:b6:47:f1:6e:8c:32:98:
97:4b:c3:3c:9b:70:4b:a7:a0:9f:01:ec:4f:29:56:ac:aa:48:
37:f9:0e:5e:dd:42:ed:e5:c7:59:07:80:6e:6e:3b:37:53:ba:
dc:04:1b:f5:32:7d:f6:25:a9:85:62:51:c9:82:ec:f3:54:61:
78:9e:55:1c:80:f1:ef:3a:04:44:7c:2d:33:3d:dd:88:b6:9c:
a2:1a:16:7b:c0:a9:db:63:68:c6:a6:76:67:d5:b7:8c:d5:98:
61:55:2f:e3:63:5d:70:e3:0c:4d:65:22:2a:c3:3f:b2:bd:f0:
ca:82:76:19:70:d4:f9:e6:79:43:7a:de:37:b1:71:7c:f4:c9:
f0:5d:49:e0:92:76:64:6d:27:46:f2:a9:29:5d:fd:90:20:eb:
78:13:e8:1c:0a:91:68:e8:b1:6e:20:df:b9:5e:2f:cf:b2:f2:
99:81:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:31 2025 by rpki-client