Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: TH4BFKUoH3uqaB5A6GLYcnBf7mVwdG/quoiphpD87BE=
Subject key identifier: EC:CA:26:FE:6C:FF:43:88:01:77:2F:F5:66:9D:65:31:84:EE:7F:FB
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 01965613CB159DA390A36BD18055BB5A9051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 04E7
Signing time: Mon 21 Apr 2025 02:00:59 +0000
Manifest this update: Mon 21 Apr 2025 02:00:59 +0000
Manifest next update: Tue 22 Apr 2025 02:00:59 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: BTGhrbuRkrHJGHbqjwv1eC/Bd0AhxhRRHocE6mzP9Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:cb:15:9d:a3:90:a3:6b:d1:80:55:bb:5a:90:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Apr 21 02:00:59 2025 GMT
Not After : Apr 22 02:00:59 2025 GMT
Subject: CN=ecca26fe6cff438801772ff5669d653184ee7ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:40:b1:99:8c:dd:2a:6e:57:80:12:35:8c:
3d:b5:48:32:7e:39:e6:37:74:ec:35:c0:98:b5:b4:
4b:56:59:3d:b3:46:54:14:39:0c:f9:60:08:e2:16:
77:e8:7e:33:6c:79:fd:6c:dd:b2:8d:7d:be:d9:7b:
94:77:f6:a6:f6:84:99:10:2b:42:1f:64:06:09:d8:
70:4e:93:4b:f6:f5:87:eb:6e:eb:a9:df:a9:01:05:
5b:89:ba:e5:42:46:8c:3d:10:61:7c:f9:78:44:d8:
9c:06:49:3f:3a:0c:72:ad:3f:8a:4b:f9:00:f3:80:
85:84:88:a6:28:8e:d0:69:8b:d4:22:9e:27:50:4a:
50:57:fa:b9:d0:90:88:d9:ee:ac:3b:62:e6:45:96:
c9:dc:c8:32:44:62:84:d5:5e:6f:fe:bb:7f:4c:57:
03:88:db:ed:02:e1:a8:d0:7b:e1:f6:bf:a1:2e:30:
cd:c7:3e:4a:90:d3:49:72:e1:53:bb:0e:74:17:0d:
ec:f9:3f:19:55:a2:dd:5e:2b:5d:16:98:94:f1:21:
19:17:7f:af:15:c9:6d:4f:10:0b:d2:89:17:17:6f:
91:49:69:d9:b6:9f:00:d8:48:e4:af:e8:56:82:16:
45:ef:bd:23:09:d9:7b:6b:b2:d0:2b:29:2a:1a:d6:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:26:FE:6C:FF:43:88:01:77:2F:F5:66:9D:65:31:84:EE:7F:FB
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3c:d0:0f:31:c7:99:0c:05:b8:70:97:9f:d9:65:d5:c0:9f:
23:d7:7e:e2:34:09:9c:55:b7:a1:cf:06:8c:8b:b7:02:b0:5e:
95:a5:22:eb:0c:8c:e3:b6:4b:ba:20:99:1a:55:3e:ec:35:71:
40:f4:b6:6e:1f:d7:29:80:a9:2d:24:c5:9a:b6:d8:87:62:d8:
af:ee:cd:a9:a7:98:21:a8:e2:45:0c:c3:a9:27:9b:e0:ea:1b:
e1:ae:b2:10:8e:61:af:c6:bd:56:eb:8f:8c:11:9a:21:fa:21:
9d:43:16:c3:65:12:66:7e:cf:04:35:b9:56:d9:d5:ba:cf:e6:
39:a8:86:c3:95:54:68:b9:3a:7a:eb:02:45:7c:62:6f:3a:48:
af:77:46:26:a5:03:25:88:d0:d9:27:66:46:01:27:5f:09:bd:
7c:1c:1f:60:4a:3f:0b:19:1c:76:93:64:54:11:bf:b5:df:28:
19:f4:90:57:d0:5b:84:8b:cd:1e:17:64:42:97:8e:a4:62:d8:
18:17:55:a7:91:d3:5f:16:56:cc:fd:1d:99:83:88:44:7e:ed:
22:c2:d8:94:96:27:72:ec:31:95:71:c7:ab:dd:11:ac:e4:61:
46:8b:61:d6:ce:ff:91:e3:e0:d6:7c:1e:7b:ce:24:ba:36:dc:
67:37:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:33 2025 by rpki-client