Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: klFukYZ4ZJvz6tWfILvbQJBy1VDFLyS6nXzEYauDf5o=
Subject key identifier: 03:15:AC:E8:43:F9:5A:A9:AF:B6:1D:66:56:18:B6:0A:4E:58:1F:40
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019645C44E2AC583DABB66DEA3E7A60E2BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 0F99
Signing time: Thu 17 Apr 2025 22:00:14 +0000
Manifest this update: Thu 17 Apr 2025 22:00:14 +0000
Manifest next update: Fri 18 Apr 2025 22:00:14 +0000
Files and hashes: 1: 7lLNSdRgFkagzNZ_PxDt07LNcFU.roa (hash: zb0uWUvhf0Y2RjUoPc33KFhra8h65X89U7INDqQICpc=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: uD67iICWAbjmOzLRvMUtzpebj7IE3IFZ4BONr+CLk6k=)
3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:4e:2a:c5:83:da:bb:66:de:a3:e7:a6:0e:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Apr 17 22:00:14 2025 GMT
Not After : Apr 18 22:00:14 2025 GMT
Subject: CN=0315ace843f95aa9afb61d665618b60a4e581f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:f7:6c:70:2f:27:5f:f1:9c:fb:c9:e8:05:
e8:f6:e2:37:20:eb:24:b0:03:1a:7f:5c:61:b2:e4:
33:53:1d:2c:43:11:5e:5a:fa:f8:b1:9f:e6:0b:fd:
b2:12:65:be:f6:ca:94:cf:b7:eb:82:65:fa:67:62:
42:ef:87:13:ae:67:82:79:06:82:a4:86:91:55:be:
75:da:e3:8e:9a:b0:74:d8:32:c3:43:a3:21:96:53:
9c:cb:63:79:80:f4:55:50:f6:88:84:a7:3a:6d:03:
42:e6:1f:e9:a0:04:d3:88:e0:00:b3:27:d3:21:7a:
59:9a:15:4b:b2:52:73:0d:ba:c9:44:af:7e:d3:9c:
b7:45:39:ae:80:f4:38:24:e9:c9:70:f6:59:1a:05:
cc:a3:6f:63:51:ba:53:98:17:90:1f:6a:e3:fd:0c:
a7:86:2e:97:78:67:04:d4:08:5b:2d:50:c0:52:9c:
97:02:7a:a1:a5:61:5a:f4:88:c8:5e:7d:94:1d:04:
69:ed:71:93:70:fe:31:c7:6b:ba:de:e7:56:20:eb:
84:f3:38:3e:fe:51:7d:34:00:2c:9c:c5:95:86:97:
48:29:48:eb:e7:49:28:84:6b:35:16:e2:c1:3b:b7:
6c:93:d9:86:07:2e:0a:9c:d8:a2:92:25:c6:0d:c7:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:AC:E8:43:F9:5A:A9:AF:B6:1D:66:56:18:B6:0A:4E:58:1F:40
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c6:ea:b0:41:51:da:93:e9:16:df:4c:7c:bc:68:5e:86:e7:
d4:20:89:dc:a2:c4:e3:67:9e:f5:7b:e6:12:df:dc:70:94:2e:
06:05:b6:49:1d:a3:e5:91:4f:d5:54:62:f6:51:92:b1:f7:0a:
a2:8d:db:9c:6d:aa:bf:a9:fc:65:4e:86:eb:b2:45:65:37:91:
9d:ea:63:87:4e:2b:9f:bd:9f:c0:62:f6:0f:5c:c1:9a:7a:94:
5f:22:ea:13:42:28:da:77:16:ca:70:02:c0:55:1f:65:f9:6f:
71:5a:09:02:96:fc:5d:06:a4:fe:f7:a2:ed:71:5c:b2:65:e2:
1d:25:94:4a:af:b7:0a:e8:c4:b9:0f:6a:72:e6:6a:bd:0f:df:
c7:56:d2:6c:43:fb:f9:2f:57:46:69:43:55:29:6c:0f:10:21:
e4:62:80:39:35:eb:a9:90:94:ef:66:aa:c8:b1:35:53:6d:41:
92:9c:64:66:f1:f5:0d:97:e3:86:c0:2f:1a:81:e3:a8:44:18:
31:c5:dc:79:b6:d0:e6:bd:8c:5b:b2:68:2f:c9:7d:b8:b9:ed:
75:6d:52:cc:e6:b2:38:f8:d2:d4:af:cb:f9:79:c6:75:ae:9f:
e2:6e:d5:06:2a:13:05:04:69:1c:e1:69:94:3e:03:38:10:0e:
ca:4d:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:58:46 2025 by rpki-client