Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
File: YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft (raw, json)
Hash identifier: 0Vf9a+KYAQjC/Fm0u/9JNuyk8xvaUCG0/ph0l7Lp6qs=
Subject key identifier: CF:AD:29:25:86:3E:32:4E:F4:B8:DB:B6:39:87:9A:95:79:E7:7C:66
Authority key identifier: 60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
Certificate issuer: /CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Certificate serial: 01964443D0F58EB3EE152DF2F4E019507172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
Manifest number: 066E
Signing time: Thu 17 Apr 2025 15:00:17 +0000
Manifest this update: Thu 17 Apr 2025 15:00:17 +0000
Manifest next update: Fri 18 Apr 2025 15:00:17 +0000
Files and hashes: 1: YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl (hash: iLBfoN70mGRa7Z53lKtTf/7Zb8VjZAq1oCWFVIqP4z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:d0:f5:8e:b3:ee:15:2d:f2:f4:e0:19:50:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Validity
Not Before: Apr 17 15:00:17 2025 GMT
Not After : Apr 18 15:00:17 2025 GMT
Subject: CN=cfad2925863e324ef4b8dbb639879a9579e77c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:f3:c0:90:0b:14:ba:9d:e8:71:21:d0:7f:
20:1f:f9:78:10:6b:06:a3:1e:55:00:9f:f1:bd:88:
ee:d9:95:d1:51:42:36:bc:0c:b2:68:43:96:0c:af:
45:f5:50:7a:6d:9d:62:f9:bf:27:11:42:de:7c:d0:
46:e5:0a:19:32:2c:ad:c5:d0:fc:15:47:4c:3c:5c:
a0:13:76:ab:23:e8:6a:bd:12:a0:4f:5d:47:c2:7b:
29:d5:96:3d:e6:ac:ee:43:82:4d:06:fd:3e:2c:bd:
57:aa:5a:af:07:b2:9f:ee:db:94:ea:0a:8d:02:ed:
81:b4:ec:14:e4:8a:4c:66:07:91:ab:ec:a3:24:db:
b4:14:4f:05:45:72:24:6a:d6:f3:f7:29:75:ab:a6:
84:10:0d:36:00:7b:bd:69:f1:a5:96:58:77:f1:03:
a8:4e:50:b4:a1:33:54:18:49:1f:cd:88:dd:78:a2:
21:5d:cf:6c:ab:42:4b:0c:f7:5c:3d:11:0f:4a:70:
01:25:24:61:e0:88:4c:49:62:a1:d7:15:ee:35:3c:
99:ae:ee:77:06:0c:91:a6:ac:f8:3a:9e:84:5a:7b:
27:75:ac:d4:c1:b8:4b:9b:15:f7:56:02:a1:ad:93:
93:90:ed:0a:7b:88:7d:0d:08:9f:fe:ad:d3:aa:f4:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:29:25:86:3E:32:4E:F4:B8:DB:B6:39:87:9A:95:79:E7:7C:66
X509v3 Authority Key Identifier:
keyid:60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c4:96:bd:44:be:80:9d:94:75:5b:5e:d5:bc:20:4d:95:93:
0c:e4:3c:1c:bb:7c:0f:16:61:76:d9:4c:67:c1:2d:79:25:c2:
23:32:3a:6f:f8:c3:40:b1:82:c4:2a:96:b3:7c:2b:ca:a4:8e:
60:30:44:31:68:c2:6b:f5:32:1c:de:fd:b8:0e:34:c1:4d:d8:
63:1e:ea:ae:b0:40:32:b4:cf:17:b2:c7:90:55:3b:8f:45:83:
b5:02:7f:57:ae:e4:6a:47:91:1b:e1:39:c4:d2:54:51:55:04:
c7:3a:41:12:bf:02:5e:4e:9c:6d:32:ee:41:a1:2b:05:0e:22:
ff:0c:af:ae:15:e8:21:b3:e1:5d:cc:2e:fe:4b:0b:11:f5:3c:
d0:1c:21:5d:05:6b:b6:bb:b3:1a:bb:15:0d:9b:e4:70:6a:18:
53:b4:3c:ed:8a:83:dc:a6:c9:d2:f4:67:64:43:3f:39:be:dd:
7f:a2:6b:93:4d:34:f5:76:68:67:72:f6:2c:c7:92:54:44:aa:
40:ee:07:25:a4:e5:dc:d4:26:e7:dd:6c:40:86:ce:90:f5:5d:
00:e6:16:29:28:40:37:63:04:f4:ba:0c:92:2a:d7:1c:38:21:
90:f1:7c:12:1b:0b:8d:a5:20:8a:ca:ed:06:f7:72:08:1a:ab:
57:b1:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:22 2025 by rpki-client