Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: aQa3JHs4Zxbnl2gndl9ag6r4lHXnJMBGoJiRDfwGdpg=
Subject key identifier: 50:31:01:8E:56:82:3E:52:6B:9E:33:8C:50:BF:7D:B8:ED:09:72:9C
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 01960E9FD0F90534350C8150B0EB07F55EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 0301
Signing time: Mon 07 Apr 2025 05:01:16 +0000
Manifest this update: Mon 07 Apr 2025 05:01:16 +0000
Manifest next update: Tue 08 Apr 2025 05:01:16 +0000
Files and hashes: 1: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (hash: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: miWUAsZ5vGU8+uNMpSEyLg6G5zSnRhGrNVA7NsV0d5A=)
3: j89ASOslTb0sA8qPaNCnvdarbHI.roa (hash: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=)
4: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (hash: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:9f:d0:f9:05:34:35:0c:81:50:b0:eb:07:f5:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Apr 7 05:01:16 2025 GMT
Not After : Apr 8 05:01:16 2025 GMT
Subject: CN=5031018e56823e526b9e338c50bf7db8ed09729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:47:eb:15:59:cb:32:aa:b7:19:5b:ec:e0:
15:4f:d9:df:64:00:a6:f9:06:7d:d1:72:bd:da:5e:
cb:13:cc:a5:38:62:45:29:ae:9a:77:fb:e3:72:c4:
c8:03:0b:2f:e5:a1:72:4a:d2:74:09:ca:22:25:44:
47:79:51:43:6c:f4:e4:40:67:00:40:2c:a5:ff:fe:
c3:8d:c7:74:e8:a2:0e:d5:14:90:13:d5:6b:75:e5:
9a:b1:6e:7a:c3:5d:8f:72:a5:d8:bc:2d:98:d1:45:
1d:06:01:9b:27:97:79:de:1e:a0:23:39:80:10:1c:
18:6e:e7:9f:6c:3a:87:11:98:46:da:a8:a7:e8:66:
d9:a2:6e:7a:cc:c7:91:ff:ce:ef:00:92:87:6a:6c:
2e:d9:21:34:a6:23:ce:d4:8d:bd:97:26:f6:b5:bd:
4b:70:aa:69:5e:3c:0d:eb:54:d7:15:dd:0a:44:8e:
f0:bd:26:0c:cd:4a:a9:60:ac:37:fe:b8:63:05:6b:
ae:d9:be:fe:75:93:b6:db:37:4e:dc:c2:9c:15:83:
b7:3f:48:54:dc:3e:7d:64:9b:2b:fc:ed:e2:3f:f6:
7b:57:5e:67:eb:16:94:3e:ad:3c:61:96:5c:a4:ec:
1f:8c:18:61:02:c4:0d:de:4b:97:f2:60:a5:7e:f8:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:01:8E:56:82:3E:52:6B:9E:33:8C:50:BF:7D:B8:ED:09:72:9C
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e5:03:64:ea:f4:60:d8:a6:4b:24:ef:d3:63:68:63:e3:bf:
3b:02:77:84:f3:19:45:0f:fa:11:34:7b:cc:f0:db:ba:6b:b5:
3b:27:e2:d0:56:3e:64:42:68:2a:75:50:fd:ff:f4:d1:a8:be:
1c:d9:aa:51:04:8f:23:48:5d:7c:dc:e2:9c:fa:88:77:08:51:
5c:9a:f0:75:ac:40:fa:d8:fb:f3:9f:b9:d2:18:52:3c:cc:ea:
ff:99:a8:a0:8c:9f:9d:0b:2d:6a:35:86:ca:af:83:50:28:ab:
86:3f:31:bf:ae:61:18:7c:e5:4a:33:7d:3d:a8:1a:fa:bb:85:
c3:6e:be:5d:fd:dc:9f:28:9d:22:65:45:f9:5a:21:cf:9f:e9:
05:36:2d:11:86:ba:46:a7:94:a1:85:08:cc:0c:03:d1:93:7f:
01:4c:38:78:c3:74:14:25:5b:b3:50:06:28:ef:09:46:b2:c3:
95:6d:a2:19:e2:4d:e5:80:f4:81:ae:e6:1a:75:34:9a:b4:cf:
40:9d:85:9a:92:7b:75:dc:42:d7:b8:4a:bf:bd:d2:9f:fc:c5:
e9:ee:b7:b9:61:fb:ee:4a:7d:67:45:08:40:3a:80:69:e9:de:
a8:34:1f:65:9f:7c:6c:a9:f7:3a:75:42:30:77:f8:2c:4f:df:
6c:5a:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:46 2025 by rpki-client