Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
File: Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json)
Hash identifier: IzNTKTwg7PrOwKdFwrYA80Mv47AqYWJVLTzL2+2V9xE=
Subject key identifier: 35:B7:B3:C9:53:C9:26:CC:F3:27:A4:79:8F:FB:D8:77:0D:2E:8C:BE
Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
Certificate issuer: /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Certificate serial: 0196AA30C248AF70E22859D3136E08D9FAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
Manifest number: 0880
Signing time: Wed 07 May 2025 10:00:44 +0000
Manifest this update: Wed 07 May 2025 10:00:44 +0000
Manifest next update: Thu 08 May 2025 10:00:44 +0000
Files and hashes: 1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: 61Cekp+LqM6WJsV8s0XH5vCLPJNRAzRCWyAyrVsGov0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:c2:48:af:70:e2:28:59:d3:13:6e:08:d9:fa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Validity
Not Before: May 7 10:00:44 2025 GMT
Not After : May 8 10:00:44 2025 GMT
Subject: CN=35b7b3c953c926ccf327a4798ffbd8770d2e8cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:f9:e4:ce:94:9b:60:10:aa:a4:a2:20:44:
2e:49:96:8e:b2:0b:3f:13:82:58:7b:64:92:7c:0d:
5b:6e:61:b6:ff:0e:ef:e0:a1:7e:ad:8e:4b:5f:d3:
1c:eb:55:58:d9:da:5c:fd:1e:15:d5:23:cd:02:12:
34:db:70:68:b0:23:61:87:75:e3:2a:a9:9f:35:95:
4f:54:74:b9:f6:4e:2f:56:13:dc:0c:c0:8b:0e:0d:
eb:cc:3b:07:83:72:3c:cc:8a:dc:60:a9:5c:c4:5c:
7d:53:df:87:b1:50:ee:6e:b8:cc:18:26:b9:ac:9b:
50:0c:06:93:49:e6:dd:23:61:94:f4:11:7e:e3:48:
b8:66:c1:3c:19:41:1b:4e:ab:17:36:5f:19:83:51:
b1:ca:0d:30:0d:ad:ee:8f:29:1e:a9:07:09:79:d8:
0a:5c:be:5b:71:59:2d:51:e3:c5:a8:f2:d8:fd:52:
39:83:fd:d5:db:2a:88:ea:ea:c5:61:16:f9:40:d4:
43:3e:77:c9:1c:d0:09:21:6e:d6:da:fd:40:53:00:
d9:20:85:e8:9b:d7:f0:9b:8f:b8:58:98:08:bd:dd:
e4:f4:2d:64:3a:7c:b9:54:6e:df:10:5a:6f:98:d7:
75:c6:b0:16:71:c2:10:82:a6:7c:d6:32:d3:da:1e:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:B3:C9:53:C9:26:CC:F3:27:A4:79:8F:FB:D8:77:0D:2E:8C:BE
X509v3 Authority Key Identifier:
keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7f:f7:0b:0d:f1:4d:79:af:d3:bc:dc:3d:52:7e:6f:d1:25:
43:a2:9d:a0:cc:6c:9a:94:0d:de:1d:ca:67:96:70:20:ad:2c:
69:ec:5a:95:94:8c:93:fb:e5:e5:0c:a8:02:97:62:be:b3:13:
24:c0:6c:0f:a4:db:62:a8:d3:73:5a:dd:15:fb:e6:a5:1e:f6:
d5:cc:cf:0b:c0:5b:39:3a:16:cf:57:d7:bb:43:67:a0:53:f9:
c0:ca:69:25:08:5f:cb:8c:4b:1e:fa:f0:70:06:51:39:5b:cd:
47:85:af:16:98:5d:36:2f:fe:64:51:87:bb:b7:08:8e:bd:0d:
22:04:20:46:a5:6a:21:55:ba:05:b4:76:f2:f4:7c:9f:4b:e3:
01:0a:ac:47:a1:dc:d2:d9:82:d8:62:81:2e:3c:92:c8:2f:de:
b8:18:99:89:53:c3:e4:8b:06:36:63:7e:b7:03:0b:24:e6:d9:
8c:8a:3e:72:5c:d7:ab:a9:b7:f1:7a:dc:65:ac:6c:53:82:09:
38:4b:fd:94:44:12:25:2c:52:33:18:0c:eb:87:67:ef:bc:20:
fa:c5:4f:9e:d2:18:4e:8c:ed:69:7e:16:fd:ea:94:8e:22:53:
ca:63:07:5b:26:02:98:e0:57:09:d6:5f:0c:c5:3a:fa:5c:5c:
81:c2:4e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:37:15 2025 by rpki-client