Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: C4z2ekiLLgJKMX+7PBCw6onHPry/BcbqFyBZwFWXz58=
Subject key identifier: 53:C1:FB:97:87:2F:46:00:AD:70:DA:44:2F:C4:A0:F7:9F:D7:30:71
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 019643D65AD7CC109E93B9AEDE2B2B1E28A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 0CCB
Signing time: Thu 17 Apr 2025 13:00:43 +0000
Manifest this update: Thu 17 Apr 2025 13:00:43 +0000
Manifest next update: Fri 18 Apr 2025 13:00:43 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: cF6O5kWiO/oRgelzKCffLvsdD7wP5wyPXAy+eilbkW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:5a:d7:cc:10:9e:93:b9:ae:de:2b:2b:1e:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Apr 17 13:00:43 2025 GMT
Not After : Apr 18 13:00:43 2025 GMT
Subject: CN=53c1fb97872f4600ad70da442fc4a0f79fd73071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:88:84:40:cb:0d:d0:54:da:0a:69:f1:08:
15:91:a8:dd:3d:7f:2a:ef:81:ce:69:f8:4d:5c:5b:
fa:d4:12:5a:6a:3d:45:09:17:d1:e3:a4:23:ed:cb:
2b:3f:21:38:0f:df:3f:27:72:b7:03:a5:9e:00:1e:
18:9b:f9:e2:c0:37:b8:95:5a:88:0b:e6:46:cd:c0:
af:c7:07:af:46:72:9b:bc:f2:88:b5:1d:03:6a:dc:
a5:8b:f7:2d:ec:ac:01:ec:f8:a4:68:9c:a4:8a:f4:
fa:d6:d1:6f:57:c9:d5:65:e1:75:09:4a:c1:7a:10:
d4:f2:08:61:11:0a:5d:53:66:34:87:0a:48:cf:67:
85:6e:05:98:95:34:be:86:10:96:2a:20:a3:1c:29:
96:22:95:d2:50:fd:19:2e:da:1d:eb:ab:c0:fa:85:
14:f1:23:d2:8f:09:37:66:9d:89:59:41:2c:88:e2:
50:87:c3:95:2e:db:ca:1f:d7:39:40:82:42:ed:32:
c4:d8:fe:4c:f7:d9:41:d3:3e:e5:6a:d9:cf:27:ab:
a5:0b:ce:5e:f0:e1:2c:e7:e8:a3:47:ee:e2:6c:7d:
ca:95:79:1d:c4:7e:f0:25:25:05:87:90:e8:d9:da:
62:de:d8:34:f4:10:6c:42:24:83:aa:b0:95:7f:6f:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C1:FB:97:87:2F:46:00:AD:70:DA:44:2F:C4:A0:F7:9F:D7:30:71
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2f:c6:78:f8:ab:33:c7:ab:26:ee:ce:2f:3a:fa:e8:75:93:
47:15:59:27:93:b3:1f:54:36:8d:30:f0:57:6b:c5:05:da:19:
11:b9:7e:a6:31:0c:9b:bb:c3:9b:a9:0f:4b:48:2a:a1:de:b4:
b2:81:bf:d9:f8:28:04:1d:60:0d:db:c8:c0:12:30:71:c5:c6:
d2:2c:3b:a5:59:18:3d:2b:b4:0f:be:e7:7c:39:c2:24:6c:f8:
4f:0d:b6:55:23:c8:25:1f:6f:d9:5e:a2:5c:c1:49:f9:b4:a4:
f2:14:d3:43:45:16:7c:a8:ec:e7:40:02:85:2b:85:f6:57:96:
b8:6f:61:69:ec:15:53:5a:31:59:5c:38:b7:64:07:87:a0:42:
43:70:a1:1b:f5:00:93:d2:0a:57:60:60:bc:26:a3:1f:d4:5f:
04:1f:c5:60:01:4a:b1:96:6d:67:36:a6:68:1c:05:8d:0d:dd:
03:52:5d:b5:9c:ae:c5:f2:7d:13:7a:c1:e0:48:48:b1:6f:68:
9a:cb:1e:ad:d7:b2:da:cf:4b:ad:66:27:5e:29:90:42:ee:93:
03:bc:09:42:3b:4d:6a:95:2f:fb:ce:19:8e:7b:08:1f:66:d2:
1c:ec:5e:d4:17:e9:e0:3b:4b:c5:ea:6f:6e:db:3b:32:b3:01:
9a:a9:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:04 2025 by rpki-client