Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier: i00jWqo50IvRjJnBx58bP+BuH/rIWhf2V2xQFa4YAQE=
Subject key identifier: 49:CA:A3:29:CF:7E:21:B6:81:7F:15:09:2C:73:00:C2:29:C7:BE:71
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 019659144EEDB84731CA5F7AE1A7DA416422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 16:00:25 +0000
Manifest this update: Mon 21 Apr 2025 16:00:25 +0000
Manifest next update: Tue 22 Apr 2025 16:00:25 +0000
Files and hashes: 1: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (hash: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=)
2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: aK9KaYWCRUollskQWQloJjgmYDVAB3gEG1Q1meJbKcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:4e:ed:b8:47:31:ca:5f:7a:e1:a7:da:41:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Apr 21 16:00:25 2025 GMT
Not After : Apr 22 16:00:25 2025 GMT
Subject: CN=49caa329cf7e21b6817f15092c7300c229c7be71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:66:16:af:23:05:77:78:3e:68:c1:8a:d0:
a3:55:2f:5e:4e:04:33:94:41:e7:35:7f:0f:04:b6:
9e:d3:26:91:6e:13:8d:f0:98:cc:e9:8d:ac:ae:65:
37:24:08:55:3d:ca:b2:89:d7:f2:29:94:fe:4f:4c:
ff:73:41:47:36:65:28:56:39:07:41:d0:3c:72:52:
0d:33:23:91:df:72:7b:d3:e0:ec:53:c8:3a:ed:57:
3e:f2:24:77:a4:7d:e7:30:50:78:b6:ae:89:dc:cf:
41:e2:a7:83:66:12:8b:48:e7:85:22:8f:3d:43:fa:
f0:22:58:51:25:36:eb:60:7f:a2:bf:de:89:a0:17:
cc:87:bb:85:54:d8:cb:df:c8:41:a9:34:1f:aa:62:
63:f9:a9:70:54:bc:fa:a4:c9:32:01:7a:bc:aa:bc:
bc:a4:f1:50:14:b2:76:61:ef:38:eb:ee:3a:7e:48:
9a:d5:2a:28:e4:56:8b:54:b7:f7:db:72:6e:c9:bc:
b2:39:02:4e:6b:b7:28:fa:13:42:76:22:45:6a:62:
61:d8:35:f1:f9:66:0f:11:a1:84:e7:98:ea:ed:90:
cc:2e:bb:f9:e5:d3:d7:08:5e:8e:c0:01:bd:2a:0b:
94:4b:49:8c:1d:a1:7a:d5:e5:b8:26:2c:a4:34:46:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:A3:29:CF:7E:21:B6:81:7F:15:09:2C:73:00:C2:29:C7:BE:71
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ff:97:48:d0:26:47:30:cb:4e:8f:86:74:d3:94:24:10:a8:
95:82:e4:c7:48:08:f2:11:de:5c:9b:61:bd:2a:bd:36:46:8e:
de:d8:d1:2b:4d:26:a8:9b:cb:e2:4c:26:fc:49:13:d9:29:0b:
b8:e4:68:71:4c:70:1c:e8:ae:bb:1f:5b:b7:ed:dc:7c:5c:07:
ba:1c:43:6d:03:8d:05:71:40:f7:9c:57:ec:0b:05:3f:37:4a:
2c:77:d8:2a:ca:15:d5:e2:00:03:4a:61:38:22:31:9c:64:60:
09:45:08:0c:b7:23:01:77:7a:45:66:df:46:a3:80:6c:71:f3:
e5:6f:e0:a6:e4:f1:a4:33:bf:fd:4f:56:b6:f3:df:ac:58:59:
b9:7d:8a:e3:62:6c:37:9e:82:89:f2:ca:cc:dc:ea:c7:de:c5:
bc:21:89:6e:a5:3c:27:ad:4c:57:6b:ec:09:a6:d4:3f:a6:f7:
1f:cc:3e:7d:e4:c3:0b:25:4b:87:7b:dc:b9:79:61:87:2b:0b:
d6:29:15:0c:df:5e:a6:4d:c3:fa:02:ba:61:34:32:9b:7f:ca:
e4:f1:ff:66:ef:b8:12:37:43:33:4f:e7:ad:45:be:30:4e:6c:
f6:05:ff:9f:a9:b3:16:dc:f3:9a:7f:45:04:0a:0e:42:4d:34:
43:7f:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:57 2025 by rpki-client