Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: TsIoOBi8GIDClAodPzGj+gEhtCNIY+AZkyyckaK31cg=
Subject key identifier: 46:AA:B3:6D:58:EA:F9:43:74:A9:6C:D2:1E:B5:CE:19:1C:E6:D5:C3
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 0196C238D7BDB1CEE05448D8D917C9A26A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0C08
Signing time: Mon 12 May 2025 02:00:27 +0000
Manifest this update: Mon 12 May 2025 02:00:27 +0000
Manifest next update: Tue 13 May 2025 02:00:27 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: ELmLjGG/aPGBfnsjuJX/jHZbUZh+AuFdu8LkTF4Cwvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:d7:bd:b1:ce:e0:54:48:d8:d9:17:c9:a2:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: May 12 02:00:27 2025 GMT
Not After : May 13 02:00:27 2025 GMT
Subject: CN=46aab36d58eaf94374a96cd21eb5ce191ce6d5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:6e:b1:3a:d8:d5:10:21:3b:f1:cc:c3:f5:
80:5c:7c:21:1d:2e:dc:98:14:d0:15:9b:d4:27:d0:
06:5f:24:6c:07:f5:38:67:26:86:6b:24:a5:43:96:
12:80:2f:86:97:fe:6d:c1:2c:ee:67:ca:52:5a:47:
79:54:d7:2d:31:03:9e:45:83:91:b0:9b:26:7e:da:
25:8c:51:67:55:74:4a:16:ee:de:de:5f:8b:08:03:
b0:e4:00:32:2e:39:c9:21:bb:93:66:7e:fb:c5:de:
96:88:b4:84:32:da:39:56:f2:61:0e:db:27:8e:9c:
f2:62:4c:69:f6:bf:df:71:f3:6b:27:e6:34:01:6d:
8a:a2:a1:a2:19:29:6a:3a:2b:5e:aa:9b:ae:f4:6a:
ea:8c:92:fd:18:25:c9:19:6e:41:23:0d:08:7f:36:
d8:06:87:f4:3a:18:c0:ba:29:4c:76:0b:9c:e2:b6:
9b:51:14:00:c6:ba:cc:22:74:48:7e:cf:68:45:4f:
a9:f1:5f:77:23:7a:65:5e:28:0c:38:68:7e:45:93:
b6:00:9b:1d:31:9f:9c:d8:c8:42:58:0e:20:60:d7:
31:1c:99:4e:6b:da:34:ff:1c:d9:15:63:e1:bb:75:
1c:ba:df:7f:68:46:6b:78:28:00:fa:db:38:4b:c0:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:B3:6D:58:EA:F9:43:74:A9:6C:D2:1E:B5:CE:19:1C:E6:D5:C3
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4f:3a:dc:1a:cd:7d:2e:e4:f9:ca:61:55:ba:42:c0:54:ac:
97:0d:07:2c:e7:d3:1a:11:0c:b5:b6:31:a4:d0:75:01:82:0b:
d4:e4:58:f8:04:59:f7:de:92:35:c9:0c:5e:2c:c2:3b:32:d0:
58:08:78:31:23:27:6c:89:3b:f8:fc:0d:40:36:3e:57:ce:bb:
e6:66:c5:e9:06:ca:7a:52:11:71:bd:8b:df:28:1f:98:67:56:
ee:6d:3f:35:1b:0c:5d:53:14:cd:f4:d5:7e:cf:9c:60:38:1c:
70:67:87:dd:71:8b:d0:6f:89:33:79:51:c1:0a:5c:cd:38:d5:
36:29:ae:a4:39:08:df:69:37:4a:d0:ee:0f:8a:8a:50:54:04:
62:8c:03:b9:96:4d:f7:fc:aa:99:6e:b4:13:e6:a4:be:3e:37:
e3:a7:df:62:b7:af:13:08:ab:ff:bc:e7:a6:8c:3a:6c:0b:2f:
e7:71:25:db:72:d5:4f:83:48:a5:82:82:8b:f2:66:5c:75:1d:
cf:d6:6b:02:b9:67:eb:73:59:3d:aa:35:3a:2f:c7:da:bd:45:
fe:e3:b1:bd:8b:e7:bb:e3:af:79:e8:9f:20:83:75:41:be:d2:
d8:55:74:e4:1f:c9:3d:1e:da:41:07:af:58:0c:79:86:a7:ac:
bf:ae:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:52:00 2025 by rpki-client