Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
File: YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft (raw, json)
Hash identifier: t/Au1+k6w/xL8yQkQOwHgydH/l42BCOn0CVbP5zM4dg=
Subject key identifier: 39:0C:63:4A:24:CD:CA:88:74:7B:E2:90:C6:19:66:5C:09:D1:89:99
Authority key identifier: 60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
Certificate issuer: /CN=60b28e2723955a3f63e47b3230317eae9292ff32
Certificate serial: 019657946D13D6084EF479859EFC0A3FA905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
Manifest number: 11D0
Signing time: Mon 21 Apr 2025 09:01:07 +0000
Manifest this update: Mon 21 Apr 2025 09:01:07 +0000
Manifest next update: Tue 22 Apr 2025 09:01:07 +0000
Files and hashes: 1: YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl (hash: 3H9NrIZZgJWNHgLu5qNygRa7k6Dlt62ILyd0fQ1VE2w=)
2: juaLzkk146uKRNECXoCuy_05vr4.roa (hash: CBsklMpH50L/CyQYAcOQ0dS2lSB0D35sIe8vyHi9T14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:6d:13:d6:08:4e:f4:79:85:9e:fc:0a:3f:a9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b28e2723955a3f63e47b3230317eae9292ff32
Validity
Not Before: Apr 21 09:01:07 2025 GMT
Not After : Apr 22 09:01:07 2025 GMT
Subject: CN=390c634a24cdca88747be290c619665c09d18999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:db:74:8c:e5:9f:2e:1a:89:35:b6:51:83:
c1:32:19:99:1f:85:f0:70:29:c9:49:9e:1f:3a:02:
01:18:be:78:72:06:db:9e:9e:56:e5:9a:04:83:c5:
2e:ad:6a:fe:db:05:5d:6d:79:bf:f8:f2:b4:c9:3c:
0a:57:a0:0c:24:d6:cd:3d:30:b6:f4:a6:f2:fd:e0:
81:5e:e6:60:cf:14:33:ee:1b:b2:22:08:79:c9:8d:
51:e2:30:7b:e4:05:af:f7:a0:54:7d:2e:c9:49:bc:
d8:b9:71:2e:ed:3f:e9:02:e9:66:4d:1d:81:c2:94:
62:ec:03:b6:7c:05:7b:a4:c6:0a:ff:1a:bb:76:9d:
60:91:a6:3a:55:75:2d:73:78:23:7c:61:f5:e9:e5:
36:64:f8:fc:ff:fb:a2:40:0c:b3:f2:32:5a:62:cd:
f6:10:35:e0:ce:59:15:fe:1a:70:1d:c5:d6:7f:1d:
73:78:39:04:5c:01:19:7d:af:9c:1c:30:55:f6:6b:
59:99:99:aa:dc:46:9c:ab:0c:83:98:8b:41:ec:47:
50:3d:45:b8:3d:a9:97:80:07:00:f8:d3:f7:52:9d:
be:d3:07:8b:35:77:94:05:e0:2d:42:28:51:c2:87:
7d:2c:78:81:95:b7:b7:03:c3:aa:2d:4b:b6:b5:ac:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0C:63:4A:24:CD:CA:88:74:7B:E2:90:C6:19:66:5C:09:D1:89:99
X509v3 Authority Key Identifier:
keyid:60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d4:8e:3f:d7:cf:6b:e9:33:f6:a6:ae:04:85:a7:06:b9:d6:
0d:22:c8:5e:c7:4d:16:b6:bb:4a:61:35:ef:ec:75:94:0e:e1:
d6:19:6a:f8:d1:af:91:19:c1:69:ec:bd:e5:44:77:4c:36:c2:
84:bb:55:14:e0:d9:c1:21:16:54:60:11:9d:5d:81:8f:da:96:
4c:b3:1e:21:aa:1d:60:46:e1:11:1b:34:ae:0c:03:24:15:5f:
f9:3f:82:29:e3:4b:5b:01:70:25:d7:8a:a9:e6:5b:76:79:f8:
21:3a:23:b1:59:fa:8c:e1:d3:84:f5:84:4b:6a:33:1f:45:07:
73:d5:21:cd:39:4c:2c:76:07:28:0b:7a:86:5a:f6:5d:09:8c:
8e:06:f6:3a:89:87:90:93:56:23:08:d4:be:81:7c:2f:a3:aa:
69:4f:33:b6:d3:94:6e:81:4e:7b:8d:b8:cf:d3:4f:fe:09:9d:
3f:49:10:32:a8:63:bd:5f:e6:a3:c5:03:4a:3e:df:a6:f8:1e:
95:94:6d:92:05:44:e4:0a:f1:22:a2:40:6e:b9:b3:7c:fe:da:
7f:fd:6d:12:bf:90:51:32:d3:18:35:48:96:e6:4b:92:b9:47:
b7:54:20:e2:ae:2c:47:7f:65:f5:be:4f:8f:6a:48:c3:1a:08:
fb:66:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:02 2025 by rpki-client