Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier: BrIf7QNXeNuX1qqTkzGY7UEET3bTMpFBewsJkgGa4nE=
Subject key identifier: 51:69:CF:6B:E0:5E:3C:97:40:35:9B:2D:A3:3D:4B:C8:66:36:04:EB
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial: 0196447B2CA7FF3FA0AF4D6D45EE52A1FD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number: 14F3
Signing time: Thu 17 Apr 2025 16:00:44 +0000
Manifest this update: Thu 17 Apr 2025 16:00:44 +0000
Manifest next update: Fri 18 Apr 2025 16:00:44 +0000
Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: zL0Zzo1ya5QZy8+PIBzX9h9Ly37ghb4rAu03sFGm0to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:2c:a7:ff:3f:a0:af:4d:6d:45:ee:52:a1:fd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Validity
Not Before: Apr 17 16:00:44 2025 GMT
Not After : Apr 18 16:00:44 2025 GMT
Subject: CN=5169cf6be05e3c9740359b2da33d4bc8663604eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:fe:38:4d:e3:27:c4:69:95:1b:24:69:4c:
31:7b:8f:41:a6:43:04:7d:00:6c:a8:44:98:f8:95:
81:f7:9b:e7:e5:b9:b1:d6:bb:bd:30:59:82:1c:96:
68:b1:fe:61:92:17:65:a6:7f:2d:b6:7a:b1:28:91:
db:51:80:c6:f4:38:e2:31:5e:9e:b5:5a:6c:a7:95:
e3:13:68:fe:99:c7:01:9a:ad:c4:1a:ca:7c:96:7b:
f6:e7:30:e0:f0:1e:4f:8c:1f:45:ec:bd:a7:a9:56:
c5:a5:01:95:62:aa:df:d0:f5:f4:07:1b:83:3b:09:
80:06:27:cd:b4:6d:f8:51:dc:b7:77:ed:03:26:f7:
e0:5e:f0:3e:92:cb:5c:60:ef:d6:7d:54:7a:9c:c6:
34:19:0d:5c:28:28:90:d8:ec:c3:ea:aa:2a:9a:a8:
7c:46:91:40:db:bd:79:82:f7:76:35:fd:1f:2f:34:
4d:f8:c6:0b:2a:b3:69:ca:93:3e:ab:72:e4:05:89:
53:35:6e:4b:d1:96:a4:7d:2c:5e:0a:e9:66:60:7f:
36:f6:08:be:35:e1:79:7f:59:57:63:f6:cf:8f:30:
26:83:7e:41:bf:3e:e6:9a:54:f7:42:76:57:be:f2:
a8:39:b8:f5:da:93:2f:16:1a:4c:0d:10:53:a5:ae:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:69:CF:6B:E0:5E:3C:97:40:35:9B:2D:A3:3D:4B:C8:66:36:04:EB
X509v3 Authority Key Identifier:
keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7e:bd:fe:27:9a:0d:da:3d:f4:40:56:29:ce:c2:02:24:c7:
0d:55:b2:97:43:50:61:d5:a4:e3:01:4b:88:93:05:d6:f1:f4:
f6:29:c4:f7:74:66:31:1d:ad:35:93:5c:0f:a6:64:42:5d:2b:
b2:99:f0:a4:67:7d:3f:69:70:8e:40:4f:57:87:70:2c:5a:75:
f7:8f:9d:41:9e:98:e0:0a:43:d2:ca:69:81:a2:04:0b:37:7e:
9d:b3:74:09:52:07:82:67:76:4b:90:75:90:92:57:5a:63:3b:
fa:02:ea:d9:5d:3f:52:1e:20:b8:42:6c:1d:7c:81:e0:30:7d:
8a:e7:98:90:b2:cc:0f:e7:ab:37:12:9f:69:89:d3:08:a5:e4:
d4:8b:78:0b:dd:27:12:70:ff:a1:6d:94:ab:24:95:38:d2:c0:
40:0d:6c:c3:ac:0a:00:70:38:c0:29:35:ec:d0:26:fb:8f:92:
d8:a7:c1:0d:36:85:ca:0f:ce:33:f7:45:bc:ff:f0:69:52:5c:
a0:81:e5:45:2c:25:5e:da:ef:d9:bc:00:73:7b:7b:7d:9c:89:
06:5f:73:a0:40:a0:f9:f2:e7:a0:38:b4:f5:94:a5:11:d6:6f:
c6:c2:77:4c:dc:3b:05:74:21:ee:1b:f3:cd:52:5a:1c:6c:ef:
79:c7:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:39 2025 by rpki-client