Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
File: YcGgEMsk-ZbneJixJHJbVbY0OOA.mft (raw, json)
Hash identifier: etVxtk4dAC2Na+yNIjd5YfghbsqShx8iNd6VVv2u1Ds=
Subject key identifier: FB:13:58:BC:07:B9:6E:19:CB:39:9A:28:B6:1C:85:C5:4D:22:59:94
Authority key identifier: 61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
Certificate issuer: /CN=61c1a010cb24f996e77898b124725b55b63438e0
Certificate serial: 0196D2BE7288BEF07578F070CD932C097079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
Manifest number: 153B
Signing time: Thu 15 May 2025 07:00:18 +0000
Manifest this update: Thu 15 May 2025 07:00:18 +0000
Manifest next update: Fri 16 May 2025 07:00:18 +0000
Files and hashes: 1: YcGgEMsk-ZbneJixJHJbVbY0OOA.crl (hash: OpoPxQd9aKOccWJwxypE26jDUU+aT1OMUqX7/ZdgimE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:72:88:be:f0:75:78:f0:70:cd:93:2c:09:70:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c1a010cb24f996e77898b124725b55b63438e0
Validity
Not Before: May 15 07:00:18 2025 GMT
Not After : May 16 07:00:18 2025 GMT
Subject: CN=fb1358bc07b96e19cb399a28b61c85c54d225994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:6a:21:a1:b9:aa:31:7b:65:56:36:5b:1d:
d1:78:8e:2c:c3:8b:7c:61:15:c7:c1:d8:d2:2f:a7:
3e:fa:f2:47:dd:64:dc:32:ab:f0:24:ea:e4:30:ae:
54:e4:4b:8d:06:31:33:00:4d:10:8d:06:61:79:77:
7b:64:09:cb:04:7a:e7:b2:41:7d:41:c5:70:45:e1:
8c:e6:1d:32:08:0e:2b:3b:27:80:20:fd:55:28:79:
07:99:00:46:76:15:b2:05:de:54:81:71:0e:36:fe:
8d:f3:74:ca:fc:3b:b8:c6:24:d8:db:48:cd:a5:b2:
f6:dd:ba:38:ed:05:ef:6c:74:3e:e0:50:a2:98:65:
df:98:2e:93:c3:21:e4:e1:25:99:15:fb:79:6d:5e:
3b:bc:02:57:20:b0:12:79:5c:53:c9:ed:5c:cf:bb:
77:70:97:61:5f:6b:80:c7:e3:6f:60:f6:24:fc:74:
6d:04:04:65:cc:da:e8:be:b2:a1:d4:60:91:5b:1f:
c0:5f:49:c5:09:b1:e5:2d:82:29:0e:b7:82:e5:a0:
64:3f:e3:39:4d:d3:84:2a:ea:00:37:99:89:ce:7c:
65:d7:f4:dd:8b:17:48:47:68:06:38:ab:92:dd:0f:
09:1c:30:d1:e2:82:14:b6:4b:7d:84:bf:59:8c:e5:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:58:BC:07:B9:6E:19:CB:39:9A:28:B6:1C:85:C5:4D:22:59:94
X509v3 Authority Key Identifier:
keyid:61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9d:80:4d:ef:18:95:5a:91:70:ea:f5:c9:ce:28:32:d7:4c:
a4:35:b9:35:ef:dd:29:80:6d:c2:60:5b:da:72:68:b2:4c:9c:
39:d6:bc:6d:cb:2b:26:ba:72:6f:9d:e5:a0:70:db:46:d5:9f:
82:d5:ea:e3:b7:e3:86:89:44:26:17:73:03:c1:24:0d:d4:ad:
db:aa:b7:30:a4:39:bb:ed:68:68:c7:9d:1a:88:c7:50:b7:86:
00:10:d4:d4:f9:78:dd:b5:af:88:7f:ca:35:fd:aa:9d:76:ed:
fb:7f:91:32:cb:b8:21:fe:8e:03:a2:d2:1a:36:bd:9b:9b:58:
29:a6:4c:45:68:08:f6:05:5d:14:8b:91:01:52:0e:38:c8:3f:
72:a5:2a:6c:63:8b:c6:35:9b:59:2d:7c:b3:bb:cd:ea:17:18:
08:b6:4d:cf:91:15:0b:fc:dd:10:5c:76:6d:53:f6:89:39:f5:
1b:f4:9e:8b:17:b9:5f:dc:4f:15:24:e4:95:77:c2:3c:51:da:
3b:57:93:55:b9:54:1f:f4:51:9e:20:05:3f:c7:9c:cd:f4:92:
5d:da:10:19:88:cc:92:68:85:89:6c:4d:19:4f:11:20:81:64:
6d:6b:fc:06:31:1e:10:16:0d:56:84:d4:3b:18:00:3e:84:33:
3a:eb:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:00:35 2025 by rpki-client