
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier: CvVbwPVMFdeYatfadvJn5nxrRyk+1gYbpfRnnWsa9Fc=
Subject key identifier: C4:A4:F9:D3:5D:5F:21:97:34:AF:88:48:45:56:CB:25:19:5F:B7:54
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial: 019611A115BE1373499473548DC193CF14D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number: 01C8
Signing time: Mon 07 Apr 2025 19:01:31 +0000
Manifest this update: Mon 07 Apr 2025 19:01:31 +0000
Manifest next update: Tue 08 Apr 2025 19:01:31 +0000
Files and hashes: 1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: UBkkDTeIuUvP2wxlG7hvAp+KnxgRd3AsX5le4V9LheY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:15:be:13:73:49:94:73:54:8d:c1:93:cf:14:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Validity
Not Before: Apr 7 19:01:31 2025 GMT
Not After : Apr 8 19:01:31 2025 GMT
Subject: CN=c4a4f9d35d5f219734af88484556cb25195fb754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:47:3a:72:8a:fb:df:25:b2:1a:98:1b:14:
b8:6d:01:fe:57:d5:b6:f2:e2:10:8c:d7:e5:40:68:
c1:8b:b0:fd:d0:cc:4d:3c:04:2e:ce:b1:1d:7b:01:
c7:b1:36:c2:b4:21:27:72:42:d9:11:35:49:c8:55:
db:d9:63:f3:ec:5e:41:5f:96:ba:b1:a1:f0:56:d2:
15:a2:12:2e:85:cd:1f:f8:06:e3:e7:1e:f7:0e:81:
a0:f7:43:90:5d:ac:2d:bc:78:78:05:e1:0f:3d:41:
7c:4d:f5:8b:7d:2a:03:ec:1d:b3:53:75:f1:f8:88:
17:f8:b3:f1:b6:6d:66:aa:25:00:71:ac:3c:f3:ae:
5e:ca:92:c6:78:45:89:23:e9:b1:34:c5:1d:0d:02:
fc:ab:4a:6c:e3:32:e9:05:80:f8:55:75:11:88:bd:
4a:43:8f:ce:e0:5c:31:c6:06:64:c0:93:1b:01:1f:
1a:2c:9a:39:0b:56:50:aa:e5:b7:7c:b8:e2:0f:d5:
8f:6f:61:ca:40:92:93:54:88:78:8d:fe:80:e3:88:
b7:cc:42:55:33:97:eb:94:0c:2e:ab:49:d9:35:5a:
bf:37:26:24:84:20:ab:1a:f7:b2:12:59:57:91:e7:
45:49:5c:c1:e5:a4:ef:5a:41:dd:17:45:fa:f8:e5:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:F9:D3:5D:5F:21:97:34:AF:88:48:45:56:CB:25:19:5F:B7:54
X509v3 Authority Key Identifier:
keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:50:34:13:3b:c2:f6:96:2f:6e:db:19:39:f2:62:c6:f8:
32:7d:00:7e:35:99:e9:eb:c7:37:8c:a1:40:01:af:3f:95:97:
82:26:73:fb:36:01:39:3d:b7:7a:4d:5f:7a:96:5d:70:90:ac:
8a:9e:d3:99:16:5d:ef:9c:21:2e:48:16:5d:9e:69:7c:43:4f:
72:c6:f0:85:02:e7:7d:6d:58:32:bc:63:37:bd:67:76:b7:cb:
66:b8:89:ec:ec:ef:fc:1c:9f:92:ad:1b:bc:f7:5f:27:89:2a:
b6:21:54:b3:9b:de:54:28:4c:95:8e:5e:96:42:90:22:68:7a:
36:7d:b6:02:1b:8f:10:0d:93:2d:fa:03:f3:d8:b9:27:7c:ba:
c3:e4:a7:c1:e3:7e:00:22:4a:f9:2e:33:60:45:98:52:7e:0c:
f4:a6:72:37:52:4a:a8:96:c6:7f:4b:dc:e4:6a:d5:e7:2a:a2:
b8:16:47:4f:97:cb:c5:b8:4b:dc:7d:e6:6e:d5:55:42:c0:74:
1e:cb:73:7f:6a:63:c7:ea:b3:9e:bf:6e:e6:02:82:58:1a:15:
4f:09:3a:29:eb:20:64:55:bd:0a:1c:f0:2f:18:1e:fa:42:52:
63:99:f1:25:40:23:f4:f1:42:70:84:6e:a4:be:f4:d5:19:e3:
e4:be:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:13 2025 by rpki-client