Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: igN+wxGZKSd3q0I6HaYctJ8TE4SkQRDURpVvBMj+7KA=
Subject key identifier: 87:80:1E:B4:10:91:F4:F4:1D:A9:EF:14:02:42:8A:73:8B:72:33:7B
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 0196A0F6C02C344DBFA6795AF7725F0E129F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1452
Signing time: Mon 05 May 2025 15:00:47 +0000
Manifest this update: Mon 05 May 2025 15:00:47 +0000
Manifest next update: Tue 06 May 2025 15:00:47 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: w09pq9tB6Th61h/eQUt1KaWRi2QTbDLv0LJ43RMuMQ4=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:c0:2c:34:4d:bf:a6:79:5a:f7:72:5f:0e:12:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: May 5 15:00:47 2025 GMT
Not After : May 6 15:00:47 2025 GMT
Subject: CN=87801eb41091f4f41da9ef1402428a738b72337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:3f:af:82:34:c4:b0:67:e2:d8:2c:48:7d:
28:78:d2:ed:35:33:b9:be:84:51:28:4d:69:ad:90:
48:2a:ba:d8:1d:7a:c0:df:ca:74:7a:f3:87:b0:36:
dd:b6:0c:eb:98:87:1b:12:8a:07:4a:73:ab:65:9d:
e5:56:20:28:2d:e7:c9:e1:20:9f:22:9c:94:9b:d4:
43:34:3b:e3:ce:27:62:99:08:93:9e:65:70:af:43:
ac:34:10:48:60:1e:1b:c1:f4:a2:6d:91:8e:c3:af:
ec:05:d6:e7:a0:ec:cf:3b:0e:b8:c2:a6:e5:61:6c:
14:03:ee:70:79:c8:ce:c4:46:14:29:b4:a8:e9:0d:
27:0e:d4:9e:7a:bb:97:f5:1a:a9:a8:52:06:9d:2c:
c9:b5:3e:ad:02:bd:11:fa:88:7f:12:c0:50:85:52:
62:fa:02:73:d8:29:29:c3:97:3f:95:5f:30:9f:b1:
7f:cb:c7:fc:d0:c8:23:79:5f:22:fa:f1:0a:74:c5:
54:80:e1:1e:2d:0d:c3:49:3e:fd:3f:9d:38:bd:42:
71:94:e8:5d:eb:89:7c:a2:64:94:88:f7:fc:58:01:
7c:d5:62:9c:53:d3:52:e2:cd:3c:03:6e:9b:bd:0e:
e2:87:cd:58:53:a2:c1:38:40:4e:d9:63:d3:60:6b:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:1E:B4:10:91:F4:F4:1D:A9:EF:14:02:42:8A:73:8B:72:33:7B
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:68:29:78:44:9f:c6:84:84:11:ce:78:fe:d4:51:0c:96:29:
60:c5:80:88:31:2f:fc:cb:10:42:ce:38:1c:1c:7b:98:1c:1e:
6e:8d:cf:9b:b8:8b:90:df:69:8d:8f:4a:64:b4:bb:91:ef:21:
c4:59:c5:66:3a:92:41:b7:4e:f4:7f:6b:ce:98:9a:de:ed:94:
d9:8c:5f:da:2a:b4:9b:8c:18:65:ae:8d:5e:14:ea:c5:5c:cb:
e9:c9:ae:96:fe:4c:f9:80:15:45:61:d2:43:49:bb:63:1b:98:
81:e1:85:46:2f:e0:a9:cf:fc:d7:d9:6a:aa:0c:00:46:4b:cb:
35:1a:0d:56:99:fd:63:74:a3:d4:44:5c:cd:2f:ff:4d:cb:f8:
11:ce:26:85:51:8e:c5:2c:86:76:df:77:dc:a7:9f:87:1c:8c:
86:53:1b:f4:22:a6:4f:4b:ac:7e:be:ff:1d:bd:90:15:a7:99:
f2:35:25:1c:a7:95:b2:50:bc:33:32:93:cf:71:4a:43:75:e7:
57:8b:6f:04:85:f1:79:9e:7f:8c:d8:8c:df:c7:98:3e:e9:23:
5d:41:e7:fc:2f:43:e2:8a:84:f5:20:da:f4:f1:1d:e9:fb:8a:
a3:25:a4:23:f5:c3:0f:58:43:e7:5d:60:07:f1:e8:c6:36:72:
19:fa:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:14:09 2025 by rpki-client