Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: Oh/KMgJjVCbNOQMunO84KmQJxNltUzuaBMg6Ss3AcdM=
Subject key identifier: 7E:AE:6F:BC:DD:1D:A4:89:3F:F5:3A:B4:1E:68:4D:A8:83:F5:31:B8
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 019658A6B6EF355899165EED664AF6F4EC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 012B
Signing time: Mon 21 Apr 2025 14:00:42 +0000
Manifest this update: Mon 21 Apr 2025 14:00:42 +0000
Manifest next update: Tue 22 Apr 2025 14:00:42 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: x/Vf/+kYdNmXv1XZISl1eRQAwlm/t5xaJzyw5xHrvko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:b6:ef:35:58:99:16:5e:ed:66:4a:f6:f4:ec:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Apr 21 14:00:42 2025 GMT
Not After : Apr 22 14:00:42 2025 GMT
Subject: CN=7eae6fbcdd1da4893ff53ab41e684da883f531b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:4a:32:a4:25:c0:8c:72:e7:d4:7d:e0:0e:
a5:1a:39:4a:5a:c4:2e:f0:a1:dd:d9:5d:dc:90:20:
18:09:07:df:b5:13:f8:1a:d0:78:fa:7b:87:bf:64:
85:45:58:56:18:15:51:55:64:f2:6c:6f:87:ff:52:
6e:78:bb:31:c0:dc:63:8b:c9:a8:66:aa:7e:09:8a:
0e:21:ed:70:ea:03:24:98:63:eb:59:17:f0:08:4b:
ca:f9:c3:34:78:ab:70:a2:13:1a:98:5c:c1:aa:1e:
a5:e1:13:17:c0:8b:69:b5:bb:25:b1:65:aa:94:6f:
53:6a:e3:5c:4a:a5:f1:22:ab:e1:1e:4d:8c:8c:55:
de:61:c0:0e:74:92:94:9d:7a:03:b9:29:6b:db:7a:
78:64:a7:63:45:b4:5b:fb:d3:ac:03:8e:75:ed:a4:
ad:fd:71:f5:83:85:b8:e9:35:99:b1:bb:49:b0:56:
b0:72:96:82:36:32:45:fe:5a:33:65:85:bc:2e:92:
20:61:9e:64:aa:d6:ce:69:e4:24:fd:73:c7:12:78:
f9:af:c0:1d:d0:fb:17:ec:98:d6:2b:24:41:97:3c:
21:ae:f5:19:19:15:77:f4:d1:04:c7:0c:8a:aa:6d:
33:34:28:84:86:57:ee:61:95:35:81:49:13:b7:7d:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:6F:BC:DD:1D:A4:89:3F:F5:3A:B4:1E:68:4D:A8:83:F5:31:B8
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:81:63:82:5b:51:9d:f7:44:4b:52:73:c6:54:d2:fa:01:
c5:e5:76:94:78:d3:ee:49:73:57:6f:05:b0:79:21:25:4f:6b:
31:03:83:ac:36:fe:cb:4d:6a:f6:74:14:4f:91:d3:8e:dc:4c:
12:e7:75:46:f8:09:79:80:0a:0c:ea:02:2d:5d:c3:5e:df:aa:
36:15:62:66:f0:9d:c8:dc:b5:08:da:12:ad:bd:a3:3e:a1:9f:
88:db:8e:db:af:8f:2e:f4:61:71:48:aa:39:19:a0:72:90:3d:
f9:ac:7b:41:4e:07:c6:0b:26:53:90:60:6a:93:49:1e:d2:25:
38:3c:72:9b:97:6b:91:3a:bf:d6:97:04:cf:5d:b4:df:f4:d9:
72:af:1f:20:6a:33:ed:fc:2e:c9:17:08:1c:df:8b:2c:23:a0:
79:f5:34:c4:9c:01:c2:56:d1:d3:b1:f1:5b:27:a5:9a:76:e9:
ba:2f:7b:8b:93:0e:94:1c:f7:13:a2:b3:93:9d:27:7a:e5:f5:
55:1c:7f:13:ca:26:e4:5f:30:c1:29:ce:5a:4a:78:a5:2a:38:
0a:0b:b2:f4:f2:59:cd:cf:6a:1c:38:e4:3b:f4:23:32:2e:ab:
41:5e:6d:4e:6a:af:65:61:98:ac:11:68:82:81:ca:0a:73:47:
72:d2:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:25 2025 by rpki-client