Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: CX91XqFOpseVvOBr2ZYfG8cslIP8vLFB3eOqx68UNnk=
Subject key identifier: 88:53:E8:C9:B8:13:C8:3E:79:FA:BA:B4:08:6D:A6:00:51:2F:15:CF
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 01964B8FF3443029A7603AD8B03F76C361A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 01:00:47 +0000
Manifest this update: Sat 19 Apr 2025 01:00:47 +0000
Manifest next update: Sun 20 Apr 2025 01:00:47 +0000
Files and hashes: 1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: L5ydXlTtAVFCG12hU56cytCqq8LTexa40RmGRUYkCHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:f3:44:30:29:a7:60:3a:d8:b0:3f:76:c3:61:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Apr 19 01:00:47 2025 GMT
Not After : Apr 20 01:00:47 2025 GMT
Subject: CN=8853e8c9b813c83e79fabab4086da600512f15cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:58:fe:25:54:66:b0:b8:dc:ed:ca:62:e2:
75:cc:ae:fd:fc:36:4c:91:3f:d7:5b:f9:4f:35:9f:
d1:41:a2:ff:06:78:59:9d:ea:07:32:a2:eb:68:72:
65:c0:09:b6:a1:e1:36:bf:db:a0:4b:c6:4b:e0:1f:
cd:9c:6a:56:87:fb:ce:8a:0f:04:52:10:9f:63:a3:
2d:0b:8d:5d:a9:35:5f:cf:ad:7e:5d:c8:37:c9:4f:
8e:aa:67:28:99:c9:bf:9f:7b:27:0e:0e:8b:e2:0c:
f8:d7:2a:8b:d3:c7:a0:32:6a:ef:17:32:9c:49:4a:
50:44:7d:11:f1:4b:49:71:28:3a:57:f5:74:9a:08:
49:ed:f8:85:6d:37:73:cf:67:e7:91:cf:37:f8:04:
66:46:f5:8a:ba:0a:3b:32:c8:6d:33:3b:da:e1:7b:
f3:9f:34:a0:9d:40:ce:60:8b:d7:f1:5c:9c:fa:d5:
f7:b9:aa:14:8f:13:e6:83:27:58:90:be:21:4b:80:
e0:57:ab:ca:fa:d8:60:e2:37:26:c1:88:de:21:67:
9b:a8:3e:38:db:1c:96:1d:a2:4c:ae:98:4b:31:0a:
40:52:eb:25:3d:e6:82:4c:2b:82:81:e5:0b:eb:68:
89:9b:b2:84:a9:5f:01:35:3e:65:a1:4b:d6:f5:b6:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:E8:C9:B8:13:C8:3E:79:FA:BA:B4:08:6D:A6:00:51:2F:15:CF
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ce:e0:bb:26:36:ce:a8:9d:cc:75:68:66:2c:a1:bd:3a:f2:
0d:bf:c9:45:1d:92:b3:c4:ed:ce:30:f7:95:af:4f:c0:d7:d6:
28:88:b8:d2:0e:9c:7b:90:6b:81:2e:ea:ef:17:ef:84:7b:be:
17:3a:50:64:2a:6b:51:02:fd:a4:52:5b:68:b9:b1:ff:12:78:
7d:b5:e8:87:33:d5:9a:40:9f:1e:8d:90:22:cb:a7:19:08:a9:
50:be:a6:99:cb:a7:41:2a:d5:26:f2:0e:83:b3:cb:b0:97:2e:
a7:63:13:49:55:44:14:90:f8:84:58:ea:b4:6a:3c:13:c4:50:
7c:95:a9:ae:74:be:29:0f:bb:52:21:f7:13:dc:0c:4b:2a:36:
77:c5:43:cc:9f:71:8e:8f:b5:5c:ee:9b:e3:43:b9:6e:b8:ec:
17:a9:34:5f:9f:0e:5c:7c:98:23:33:bb:61:fc:c5:24:86:0e:
9d:a2:ad:cd:f7:e2:ea:c1:d7:e4:82:7a:26:bc:65:9e:4a:99:
6f:22:e0:ea:06:9f:b7:56:c1:90:ca:e0:97:bf:8d:f6:83:f0:
b8:67:0d:66:78:ef:2f:a3:6b:d8:57:e9:62:57:5a:a3:fa:73:
0b:0d:fe:5c:38:97:87:ad:ab:79:5b:54:91:2b:0d:8d:64:02:
e3:eb:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:12:02 2025 by rpki-client