
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: 1pSkrfRPxlz3/IW58KRRTdcUAkSAWOfK++lNALQsOE4=
Subject key identifier: 74:7C:FF:BD:9E:1D:47:4E:94:07:D0:39:B5:3A:9A:BD:F9:8F:A2:AA
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 01965725D14C4DD6B63001922B6FE74F2EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0A83
Signing time: Mon 21 Apr 2025 07:00:18 +0000
Manifest this update: Mon 21 Apr 2025 07:00:18 +0000
Manifest next update: Tue 22 Apr 2025 07:00:18 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: CMgU/By/J43T8SUke2xwTX0+IjfJUV6j+q3VLbbLaF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:d1:4c:4d:d6:b6:30:01:92:2b:6f:e7:4f:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Apr 21 07:00:18 2025 GMT
Not After : Apr 22 07:00:18 2025 GMT
Subject: CN=747cffbd9e1d474e9407d039b53a9abdf98fa2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:e0:b3:43:70:17:cd:32:ab:4f:2a:68:17:
31:47:80:2b:4d:d0:b3:25:33:1e:05:c2:9b:48:68:
8f:17:65:57:10:f6:e5:89:42:57:74:4f:02:08:6d:
bd:5b:36:e2:6e:ae:3e:25:ba:b5:6b:a7:e2:99:7a:
d8:61:2b:be:a4:f9:18:d0:4f:08:cc:0c:36:f0:40:
9d:3e:a0:6a:68:63:1e:bb:14:b7:4d:43:53:f1:29:
29:38:c8:c5:44:50:dc:a0:e6:26:cc:37:69:da:ef:
6d:4b:4e:87:dd:a1:d6:0c:b1:03:53:f2:0f:a8:b8:
30:0c:bb:ba:44:34:c3:eb:0b:2f:2e:85:d3:65:1e:
d6:71:9c:6d:b9:ee:b4:12:b9:82:76:57:82:ba:a8:
d5:d9:17:df:4d:3a:e6:b9:ae:d8:a3:1f:30:52:5b:
28:de:3a:cb:2f:57:fe:50:75:7d:4f:59:d5:1f:0b:
f5:a6:84:82:e5:3c:59:79:82:0d:79:c5:b9:99:28:
2d:5a:c4:cb:bb:61:23:91:0f:16:7d:66:d1:2b:0b:
e3:25:f1:6b:a6:ae:3c:f7:c9:b5:45:d6:12:ce:4e:
ce:d4:0b:eb:06:87:e2:8e:ae:38:4e:d5:74:aa:7b:
f4:d5:66:a2:c7:30:6c:39:f0:5b:10:3c:f6:22:7d:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:FF:BD:9E:1D:47:4E:94:07:D0:39:B5:3A:9A:BD:F9:8F:A2:AA
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4b:a2:a2:94:e5:e3:2b:b8:77:6e:6c:6f:69:fc:1d:93:22:
58:a3:63:45:52:fd:a3:e2:81:de:71:90:3d:fa:7c:27:4a:d9:
79:f3:7a:16:a1:42:37:8f:45:13:1f:91:77:92:33:62:17:b0:
87:6b:9d:e8:41:59:00:2b:9a:df:f1:2a:03:05:31:f2:59:b6:
9b:71:5c:f1:dd:8e:42:9e:b3:bb:b0:e4:94:af:95:26:3f:6b:
64:af:f4:a0:ed:e4:7a:52:6f:7d:38:78:83:be:6c:c8:4f:96:
9c:0b:69:14:7f:78:c5:c7:aa:ad:1e:d2:1c:4a:f6:27:86:73:
7f:76:fc:2f:c5:60:3c:41:27:6f:2a:eb:16:68:77:56:8d:55:
59:74:ed:1e:87:7c:da:cf:ad:60:44:6d:56:f9:e2:dd:98:c5:
b1:d3:90:ba:9e:e0:3b:f7:70:4e:4e:13:b4:9c:20:a9:08:5a:
09:fe:60:63:52:2e:4d:7c:4b:db:eb:30:de:0d:3a:02:74:68:
87:38:66:4e:2e:7c:60:e4:dd:76:da:03:cf:48:6e:b6:32:da:
ff:ee:27:7b:78:47:cb:0d:39:e2:39:2d:64:a4:37:52:7a:95:
20:b8:6e:ab:e3:0e:f3:8e:70:b8:cf:da:8b:54:a2:39:a8:e4:
eb:62:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:42 2025 by rpki-client