Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: tTIdKReZF6Jm3EZ2X1/CtttXw3Rmu/cIMtxT/93Tk6U=
Subject key identifier: A4:59:EA:F9:D8:7A:FB:78:75:05:49:D8:D0:C4:A2:81:6E:5E:5F:7C
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 0196AE0DFD72056AEEB6651378C8CAAD1D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 1131
Signing time: Thu 08 May 2025 04:01:14 +0000
Manifest this update: Thu 08 May 2025 04:01:14 +0000
Manifest next update: Fri 09 May 2025 04:01:14 +0000
Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: 41yN3TcJvEiUhRAvNvqfLdhz0kq0s8mYZLq3jS4l/QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:fd:72:05:6a:ee:b6:65:13:78:c8:ca:ad:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: May 8 04:01:14 2025 GMT
Not After : May 9 04:01:14 2025 GMT
Subject: CN=a459eaf9d87afb78750549d8d0c4a2816e5e5f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:57:69:22:1a:db:19:39:e4:9a:c3:04:64:
e3:dd:3c:d7:d6:d1:ef:67:64:9c:24:54:09:d8:07:
9d:e5:02:32:4a:07:c9:13:4f:10:e0:52:54:f4:2f:
aa:83:74:32:01:85:d0:ec:28:58:14:60:3d:f1:a8:
1d:1b:90:f4:a1:94:c0:dd:a7:9d:e9:4c:d7:47:3d:
65:bb:f0:bd:55:86:a4:6d:c2:4c:6b:d6:4f:44:8d:
04:13:23:a4:fe:3d:d7:e7:1c:06:de:e9:8d:59:49:
30:c4:b3:91:72:50:9b:6e:b8:e5:23:01:d2:f1:20:
42:b2:28:79:0e:60:fb:43:d1:68:5b:96:d1:6a:80:
6b:b1:9e:c4:e4:48:26:c6:92:5f:d7:68:59:23:d4:
d5:50:12:ea:af:cf:59:c2:68:4a:5b:08:2b:2e:5b:
de:15:d5:6e:97:1b:c9:b2:d0:f4:b1:fd:b2:e9:5e:
e2:62:8f:ec:dd:fa:b8:c4:46:e6:8b:99:df:de:71:
9a:72:26:3c:bb:0e:5c:ea:e1:20:99:a0:30:f4:d3:
57:b7:f9:f6:e1:9c:12:30:ba:59:da:0c:ec:b3:9f:
71:b9:ad:6d:56:3c:06:1f:e5:ad:6a:b0:70:57:0e:
33:d6:d7:22:b7:d2:72:69:7a:c9:07:37:03:ca:83:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:EA:F9:D8:7A:FB:78:75:05:49:D8:D0:C4:A2:81:6E:5E:5F:7C
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ee:08:53:89:77:b4:38:53:e2:fa:08:a4:95:76:c8:0e:a6:
5c:8d:d8:59:6f:9d:d3:b4:2a:b4:e0:1f:6c:a8:0e:ca:40:f6:
fb:df:c8:26:d2:c2:59:24:55:39:32:4c:9a:b6:d2:ce:e3:fd:
a3:9d:d1:91:c2:ea:ab:c1:fa:22:d4:8f:03:a4:91:42:8e:64:
94:b2:f8:dc:14:08:fd:46:f2:22:b8:e1:5a:e1:c6:a2:4c:d0:
92:2f:1a:d7:99:9f:e2:4a:d0:01:03:1f:3a:c4:c9:80:85:07:
53:33:12:96:b1:85:fd:a3:05:7c:34:a8:86:e2:cd:54:6d:bf:
6b:ab:aa:54:81:d2:49:dc:6e:ce:cd:d8:d3:2c:17:0b:33:ea:
f6:3a:cd:16:d9:1d:af:82:19:4c:f7:6c:c8:ed:1e:62:65:9a:
d7:ab:ee:c2:80:f4:02:cc:1c:8f:89:98:7c:12:a1:3d:07:74:
1e:ca:34:d6:c8:bf:14:9e:e4:32:b6:b9:a7:dc:7e:b5:76:1d:
01:54:0f:b2:5a:91:50:33:83:1e:52:61:1d:6d:c4:64:20:00:
94:ea:71:75:53:15:75:59:4c:b4:ac:ff:eb:57:34:81:aa:df:
f7:b5:1b:9b:2b:4a:9b:00:d0:11:a4:d8:75:7a:37:53:57:dd:
c6:75:7a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:03:34 2025 by rpki-client