Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: VTIu2dwEZdJE2YnRloy9uJuxpqRPwALXd1xUqqkjmNg=
Subject key identifier: D1:3E:71:40:CB:1B:A9:11:D7:11:91:30:54:D0:81:20:5A:68:8C:81
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 019643D758BEB69756608DC1D07C7B76A74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 0FA7
Signing time: Thu 17 Apr 2025 13:01:48 +0000
Manifest this update: Thu 17 Apr 2025 13:01:48 +0000
Manifest next update: Fri 18 Apr 2025 13:01:48 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: oPFIgA3pPafbnObd4NAJDD8u7BQT/QrSMfc4rRHiwEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:58:be:b6:97:56:60:8d:c1:d0:7c:7b:76:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Apr 17 13:01:48 2025 GMT
Not After : Apr 18 13:01:48 2025 GMT
Subject: CN=d13e7140cb1ba911d711913054d081205a688c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:76:4b:62:ac:2d:84:9d:3f:37:3e:c6:57:
19:30:ac:00:09:46:3d:40:5d:b4:b6:d3:e7:e6:f8:
7e:d9:7e:44:57:05:e2:23:4a:7b:1e:0d:13:d4:41:
11:ea:e7:03:36:32:cc:55:61:1b:45:d9:d5:04:ac:
48:72:98:f5:36:8d:1c:e0:a6:94:92:87:2e:1a:ac:
2d:15:47:aa:c1:de:51:f1:ea:64:da:ee:98:ff:cd:
68:f8:ac:3a:8c:5a:e1:56:c5:bd:8c:eb:2b:87:99:
7c:2e:aa:e8:ae:16:ad:50:dd:7a:2b:fa:2a:cb:63:
4d:e9:3b:09:43:b1:b7:0d:1e:55:50:8f:d1:6f:6a:
a7:d2:b6:4f:d6:2c:86:40:8d:a4:5e:95:45:b3:59:
12:29:61:1b:1f:29:b8:bb:81:bc:01:f0:1c:80:bf:
92:48:87:fd:09:80:cf:3e:47:0d:8f:00:ae:c1:a9:
21:df:a5:16:b8:d1:dc:a6:8c:db:21:33:0f:19:15:
b7:f2:1c:51:90:b1:fb:77:26:ba:5a:e9:77:f9:34:
cd:f9:e7:4b:27:6f:19:c5:4e:28:54:fd:4a:91:23:
09:f2:7b:06:25:35:63:2e:08:59:bf:51:76:15:5f:
53:a7:96:94:34:a3:7c:55:6b:18:ac:41:5c:69:92:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:71:40:CB:1B:A9:11:D7:11:91:30:54:D0:81:20:5A:68:8C:81
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:22:75:ee:ba:f4:ef:27:00:57:20:db:70:65:4e:10:3e:68:
94:d6:45:3c:da:78:8c:d2:01:b2:b2:f7:23:04:8e:b6:86:dd:
76:ab:15:12:cb:28:e2:0b:c6:5d:e2:32:e6:b3:3e:ac:5f:f5:
0f:d5:0b:6f:b6:7c:72:b5:84:d7:17:57:ca:2d:63:63:54:6b:
9c:cd:dd:2c:8d:12:3e:a7:01:8d:88:7d:79:2d:9d:da:54:04:
8a:81:dc:1e:88:44:da:a5:8b:6c:08:3d:57:f7:78:58:2e:fc:
fc:84:16:17:06:cc:28:0b:23:65:59:95:24:f2:4f:95:9d:58:
8f:ae:90:a0:fa:1f:bb:9c:6f:ab:b2:3e:6e:ad:29:b9:84:a6:
80:d1:34:13:21:e0:10:b5:18:cc:b7:a6:69:9b:49:ac:c5:93:
04:64:5b:a7:d4:9d:0e:cb:7c:a8:c2:21:76:da:01:28:a6:16:
2d:59:17:b1:66:50:e1:67:3d:ac:3b:b1:63:4d:4e:ea:ac:ec:
9f:e3:4d:b9:9c:6d:09:bf:e4:ba:70:9f:c5:d8:4d:d7:36:e6:
58:ec:b9:6f:3f:e2:49:c8:7b:f1:a9:0f:62:2f:70:e0:c2:c1:
d8:d4:ac:13:75:9a:6c:3f:e9:b1:d3:d9:56:ca:c9:f5:45:1d:
02:1c:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:49:39 2025 by rpki-client