Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: z0sexKYRCSkKscQYe3Hav2ifImeRxp2Iy3P/+WPu3g8=
Subject key identifier: 07:F7:99:B6:DC:0C:F8:E5:94:FB:96:58:EE:26:E2:D9:39:68:35:86
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 01965236F1056FFE07596A1DD659CB5EE562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0ADE
Signing time: Sun 20 Apr 2025 08:00:54 +0000
Manifest this update: Sun 20 Apr 2025 08:00:54 +0000
Manifest next update: Mon 21 Apr 2025 08:00:54 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: wPjN6M8dVOhiv51NJltAr8hT/+VEVZSS7EDry2jhBI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:f1:05:6f:fe:07:59:6a:1d:d6:59:cb:5e:e5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Apr 20 08:00:54 2025 GMT
Not After : Apr 21 08:00:54 2025 GMT
Subject: CN=07f799b6dc0cf8e594fb9658ee26e2d939683586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:62:96:7c:fa:35:94:bd:80:65:cc:6a:20:
7e:69:e3:c5:5d:97:40:c0:47:58:f3:dc:d8:2c:6e:
55:16:bf:f7:2e:71:b9:41:e4:33:2b:c5:a3:6f:41:
dc:76:d0:e0:6f:9e:91:50:bb:ea:1f:f4:fc:48:c0:
fe:92:d3:48:99:f6:17:12:2b:64:47:6c:5f:2a:51:
f2:e2:30:78:8b:3f:b5:ea:6f:3e:84:4f:2a:85:6b:
10:f2:f8:57:5a:81:25:67:4c:d8:f9:26:1a:49:5b:
bb:ce:c7:14:2b:c9:f4:a7:8c:4c:8e:4f:21:72:06:
e5:fc:31:b9:d8:c0:9c:6c:5a:ab:08:02:98:9d:8e:
f6:11:f2:b4:32:20:17:4c:d3:77:50:4f:17:e8:1b:
1a:0b:72:40:af:26:d4:a4:2a:fd:e0:68:a1:07:bb:
69:68:59:13:ad:c4:f3:8d:19:ce:45:58:18:45:a6:
3a:84:0b:34:0b:79:87:a3:1e:99:85:6a:53:49:db:
98:53:4b:2e:37:08:55:7d:d6:76:55:0d:41:d6:9b:
dd:cf:e2:64:4e:58:6e:31:7f:ca:f3:dd:cc:c3:3e:
42:87:9a:7d:f9:e8:9a:77:32:53:1a:1c:4b:f9:c1:
ae:cf:6f:c8:5e:de:72:c6:78:68:f1:fa:27:21:51:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F7:99:B6:DC:0C:F8:E5:94:FB:96:58:EE:26:E2:D9:39:68:35:86
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:fb:c6:8a:b3:b0:b5:3e:17:8c:f9:93:a7:72:47:04:bf:
2f:64:c7:f2:80:e7:3f:5e:8a:67:73:04:34:65:0f:18:c8:55:
c3:e3:fd:77:a8:94:36:ad:8f:7c:df:70:6d:ce:f3:35:1c:7f:
6a:db:1c:7d:2c:34:c4:3e:a6:dd:41:62:91:1b:76:5d:a6:40:
ba:a4:4c:a5:2b:98:7c:7d:4a:a1:f7:8f:f5:dc:58:08:d3:57:
23:74:9c:26:c0:82:cc:47:2b:27:86:ac:b7:43:f5:3e:55:7c:
22:c7:35:57:dc:da:34:e3:4b:ba:1b:44:87:c3:f3:09:f2:a8:
a1:1a:3d:1d:5a:ec:48:60:77:06:ca:72:76:96:92:0b:29:35:
c9:98:d2:ea:a8:10:0d:03:31:e7:9b:08:bd:69:91:6e:af:4d:
0c:38:33:d8:c6:d7:33:68:51:75:4b:8c:1f:fd:c8:43:d6:1a:
1e:20:85:ed:4d:9c:08:a4:e0:42:ff:8b:f5:fe:9b:93:b9:a2:
30:3d:c4:b0:ed:4b:5e:83:8e:73:14:b4:73:1c:8b:4a:b6:74:
3f:fd:b1:f7:8f:27:c7:e6:23:1c:4a:40:b4:48:4a:ea:b9:31:
f3:ba:56:50:ae:7d:7b:e0:02:f2:10:02:af:56:53:34:1b:0e:
45:79:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:39 2025 by rpki-client