Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: pkBrP8HV/IJwH9mS/4TK13oms5lLDafRRVeRBz+xMHQ=
Subject key identifier: AC:9B:19:13:40:DB:5B:91:96:50:3D:B3:1C:20:09:9D:10:8C:E7:1A
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 019654931B92DC2AD8E8064FB36BD3A26E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 0EF5
Signing time: Sun 20 Apr 2025 19:00:49 +0000
Manifest this update: Sun 20 Apr 2025 19:00:49 +0000
Manifest next update: Mon 21 Apr 2025 19:00:49 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: LMveckJ7iaH91GJfVvWzL6W5IN9px/BG/lWd2mRXSP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:1b:92:dc:2a:d8:e8:06:4f:b3:6b:d3:a2:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Apr 20 19:00:49 2025 GMT
Not After : Apr 21 19:00:49 2025 GMT
Subject: CN=ac9b191340db5b9196503db31c20099d108ce71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:a1:33:f1:7c:bc:08:1d:33:4c:71:4d:e7:
b0:61:ab:ad:32:49:e5:42:10:89:c4:e2:2c:1f:1d:
3b:ee:03:05:67:84:c2:cc:f0:b4:90:9d:49:43:c6:
41:d4:91:af:36:9a:4f:61:a1:0d:bd:87:88:46:44:
3e:fc:1b:b2:e1:83:8b:45:5a:3a:e4:20:ad:27:b4:
67:c7:4a:06:46:57:48:a2:be:eb:58:01:b9:cd:d3:
78:24:74:d8:e4:c5:d8:d6:72:fe:2b:39:ef:d5:e4:
56:72:3d:c8:87:6e:9d:e0:71:b8:bb:3b:ae:c0:bf:
0c:47:5d:1d:1a:fb:88:cc:c1:ce:31:f9:e6:33:d7:
f5:7b:18:d7:83:c5:37:a7:b9:27:69:61:b1:9c:10:
56:fd:e0:ff:71:c5:9f:5a:ab:cc:9b:d3:54:24:14:
37:de:4a:28:f7:18:c2:7a:dc:87:c5:90:3d:4b:6d:
57:54:4d:47:33:e5:5c:b0:80:14:0e:61:87:26:4a:
2a:39:cd:75:cf:ca:b8:34:c8:f6:b6:06:a9:59:1d:
47:84:1f:80:ad:ca:49:9d:82:a0:d3:67:eb:3c:c5:
57:b1:f5:cb:14:76:b4:0f:39:77:24:eb:1b:7f:85:
71:80:12:80:0f:ce:dd:5e:88:a3:7c:b7:2c:fa:52:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:19:13:40:DB:5B:91:96:50:3D:B3:1C:20:09:9D:10:8C:E7:1A
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d5:58:fe:05:26:1d:12:53:cb:e0:b2:b6:58:b4:a6:2e:98:
c5:5f:c1:12:da:55:a8:ec:ec:df:63:c4:6a:d9:6f:57:ed:94:
3b:4a:54:a6:d0:19:f3:e4:1b:a4:47:af:a4:96:a3:58:ec:9a:
86:ab:e4:9d:42:d9:00:18:7a:ad:51:e2:6f:dd:c7:20:51:a5:
a3:f7:61:92:30:a2:fb:68:a8:81:82:eb:b1:25:66:9e:a6:ef:
42:ac:5a:70:2b:9d:69:ea:1a:e7:4a:44:a0:ba:e4:ac:6c:42:
d9:6e:7c:af:8c:34:4e:76:51:41:7e:07:9e:cc:fa:42:76:97:
1b:5c:a8:c1:fc:a3:e4:6e:ee:ba:79:05:b3:57:1b:0a:a3:b7:
bc:d3:7d:0a:7e:73:65:bd:d1:30:a6:a0:c7:e9:23:ff:fa:51:
69:d9:5e:a1:d0:82:6e:c5:c4:71:c9:a9:ec:b7:e8:04:e0:36:
98:db:64:d2:c0:a1:57:54:71:f3:87:5b:0f:31:e8:c9:e7:70:
c8:b4:52:f7:56:ea:27:8d:89:cc:aa:76:13:8b:60:5e:bd:16:
68:31:0b:c0:c4:15:69:a1:a5:25:7c:eb:95:7a:61:2b:12:1a:
ac:d0:c3:d9:53:bd:e2:62:7b:af:9c:86:9d:a9:04:e0:65:37:
45:4e:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:03 2025 by rpki-client