Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: ezTSY0eEOXzdVvWv8bq/ee51hmst0oP21v/M4pGhJ/c=
Subject key identifier: 58:CB:47:79:1B:F5:EA:58:D4:35:91:20:A8:17:A8:10:EC:54:5B:00
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 01963B0A4C45056FE9DD6E8210DE75B3A80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 14EE
Signing time: Tue 15 Apr 2025 20:00:52 +0000
Manifest this update: Tue 15 Apr 2025 20:00:52 +0000
Manifest next update: Wed 16 Apr 2025 20:00:52 +0000
Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: h6tXD97N5KM/v5BMC1jk16CpYortT0u/BsfFfFTiUCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:0a:4c:45:05:6f:e9:dd:6e:82:10:de:75:b3:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Apr 15 20:00:52 2025 GMT
Not After : Apr 16 20:00:52 2025 GMT
Subject: CN=58cb47791bf5ea58d4359120a817a810ec545b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:96:a8:e8:4b:a1:b8:13:1c:ea:1e:70:ae:
5a:02:9e:1b:a4:d0:9e:99:e9:28:d0:07:84:3c:16:
a5:f3:1c:fc:d2:14:a4:66:ea:34:19:d4:82:2f:ff:
e3:b1:bb:16:51:85:cc:16:92:55:0c:72:a1:72:ac:
01:56:de:25:1a:04:4b:7e:53:87:15:e9:a1:39:a7:
76:4f:a3:d5:d7:b1:5e:0f:fe:22:91:b7:3b:4a:79:
87:a4:e7:5c:aa:3c:55:35:84:52:ce:8f:61:9f:19:
64:f0:7d:bf:1e:ab:93:71:1a:d4:e2:4f:f4:34:05:
93:8c:55:76:35:c0:b7:bc:6e:40:01:39:e4:b5:4f:
24:60:5b:01:11:2c:22:68:8c:08:7a:60:f2:ae:9b:
2c:8e:29:0d:29:86:2d:a1:a6:d3:82:4a:99:7a:01:
f7:0d:65:23:03:64:6b:fa:87:20:d9:e7:6c:05:f8:
10:70:33:c7:36:be:ed:06:e6:14:a5:7f:d2:b8:83:
0b:e4:84:91:0d:07:16:80:bc:64:49:e0:10:96:98:
92:78:23:78:58:93:ef:d6:5a:68:49:2d:90:e8:90:
b4:4f:db:fc:ce:d4:45:fa:91:ef:65:7a:16:db:e5:
04:82:c0:a4:24:8e:c6:b3:b6:17:c8:ae:49:d0:bc:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:47:79:1B:F5:EA:58:D4:35:91:20:A8:17:A8:10:EC:54:5B:00
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:e7:29:3d:9a:ba:52:ae:d6:bf:cd:88:8f:8d:22:9f:b7:
ba:1b:7e:88:b5:4a:18:ac:31:bc:b7:b6:4f:04:83:a2:16:87:
ca:f8:6d:78:a5:9c:8d:44:04:bc:77:1f:54:08:2c:8c:0d:98:
4a:43:77:56:1d:e0:b6:0a:ee:da:92:c2:ff:36:5e:a4:6c:a1:
ad:01:e5:63:60:6b:5d:ab:ef:8a:00:ce:8b:ac:8a:ea:74:a9:
49:0e:8f:4f:3f:94:21:4a:bc:36:95:e1:af:02:7b:0d:a1:b6:
25:0a:c9:eb:a4:2b:52:a9:ee:08:61:8d:55:99:99:db:64:81:
0e:fb:47:98:78:10:d6:dc:ac:e8:d8:d1:bf:eb:b5:81:75:3a:
ff:d5:f6:58:6c:ba:00:fb:30:3c:da:41:0a:87:24:31:1e:b3:
b1:2b:a8:d0:58:58:d9:08:70:e0:04:a7:37:1c:a8:86:0e:94:
76:df:1d:fc:32:bf:ca:1b:2d:32:a1:08:0e:fd:18:b3:f9:34:
4e:e8:bd:19:d0:a0:ea:0a:2e:14:b8:08:2f:d1:3b:2f:9b:19:
17:44:92:f0:8f:2d:82:ac:44:d0:55:0b:e0:4c:c6:37:91:81:
18:5a:8e:37:b3:04:1f:9d:db:f9:1a:be:cc:6c:9c:00:9f:5b:
cf:d0:79:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:48:40 2025 by rpki-client