Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier: 4Xnrw456VwyQD0PJs2Qc4mWzqoLMqfhhcNNxdhaggf4=
Subject key identifier: 03:DA:55:44:7F:11:3B:6F:4D:81:EB:CD:37:78:9F:9B:F2:7C:2C:DB
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 019651FFE865C33C335290490AE7567D27C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 07:00:47 +0000
Manifest this update: Sun 20 Apr 2025 07:00:47 +0000
Manifest next update: Mon 21 Apr 2025 07:00:47 +0000
Files and hashes: 1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: IFrq3kutOvDkNxXnOI+1mhljWmC23bwZ5SFiKxV8xsU=)
2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=)
3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=)
4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=)
5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:e8:65:c3:3c:33:52:90:49:0a:e7:56:7d:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Apr 20 07:00:47 2025 GMT
Not After : Apr 21 07:00:47 2025 GMT
Subject: CN=03da55447f113b6f4d81ebcd37789f9bf27c2cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:95:38:d6:68:b1:57:7f:4e:7f:d7:79:7e:
51:ae:35:d7:3e:15:46:4e:83:f0:42:f6:b1:ab:96:
6d:64:7e:be:d1:a2:79:9c:4e:f3:df:9e:73:37:c7:
dc:65:6c:76:af:e0:f1:1a:d8:e8:57:18:2c:3c:e1:
b4:e0:9d:0c:fd:a2:84:0d:88:89:e5:e1:74:50:06:
e1:41:d8:71:01:09:87:af:55:1e:c7:da:da:1f:ef:
cf:08:22:0a:ca:6c:fe:14:f3:f4:5a:1a:80:9c:14:
55:03:0a:91:a8:35:2f:de:52:9a:04:3e:f6:eb:3f:
28:d8:4b:f4:3b:d5:75:64:c3:51:e8:7c:8e:37:49:
36:bd:55:cd:13:ff:c5:3d:90:4b:48:89:a6:5b:ee:
d0:4f:a3:34:8d:e2:99:d9:46:cd:6b:d1:65:35:bb:
3f:99:0b:9e:88:dc:44:10:ad:64:f3:f6:74:4c:4b:
76:a4:62:a2:42:61:5a:e2:5c:49:4f:d7:26:6e:5b:
1c:1b:14:cf:e8:f6:52:b6:a8:8e:bc:09:d0:51:11:
0b:2c:37:fc:d7:31:81:fd:b0:12:5a:f1:7a:fc:29:
10:6e:3f:dc:bc:14:21:53:b3:0d:fc:f9:e0:23:4f:
56:a3:f6:fc:d2:50:00:55:05:c0:0c:96:4c:6c:75:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:55:44:7F:11:3B:6F:4D:81:EB:CD:37:78:9F:9B:F2:7C:2C:DB
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fa:ef:21:21:1b:85:fd:89:43:48:da:c2:6f:e7:fd:6b:64:
cd:8d:71:0a:c6:db:91:08:75:de:3a:16:55:2d:fd:c2:a9:8f:
48:a6:13:36:a2:2d:2b:5d:bf:6f:07:21:fb:58:ee:a0:58:e3:
81:e5:1a:f0:21:3e:18:f4:5c:85:23:b7:94:b4:1d:5e:01:3d:
76:52:c9:eb:e5:bd:cd:8c:54:31:de:d6:43:ef:d3:51:0b:3f:
1d:e5:31:4c:bc:db:37:b0:2a:07:47:57:09:a4:5f:42:58:4e:
15:10:c6:e9:0b:f9:dd:c4:b7:1d:50:ba:c7:c0:89:01:cb:fa:
9c:f8:0e:00:30:4a:d0:ba:ee:71:c9:2c:ec:a4:2c:17:12:b3:
06:8c:0b:e3:69:dd:54:d2:14:e2:1a:d7:6f:71:5a:53:e7:06:
9c:18:f0:94:7f:68:70:31:06:81:1f:4e:c6:06:55:6a:00:79:
f2:ce:c2:ed:61:05:f0:e4:90:28:0d:42:86:d2:24:24:19:0d:
b0:18:40:d0:07:c6:eb:5f:f4:d9:a3:37:5b:68:3c:78:ef:96:
83:33:22:c4:72:63:71:b8:dd:03:fb:98:75:75:f2:99:b3:3d:
1f:1b:25:24:9d:68:bd:89:41:4b:ea:ef:51:ad:b8:07:91:bd:
84:55:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:42:59 2025 by rpki-client