Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: zvXnbeCgHpa7DHZJXF2BdDNA7F0h00DCim4iY0PEfc8=
Subject key identifier: 5C:82:2B:E8:6F:5E:D5:9C:4C:B6:DC:5E:7F:75:B6:3F:7A:38:21:90
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 0196A088D0950BE9916AFA70D8E4EAB256CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 0CFB
Signing time: Mon 05 May 2025 13:00:42 +0000
Manifest this update: Mon 05 May 2025 13:00:42 +0000
Manifest next update: Tue 06 May 2025 13:00:42 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: Qd7uuybmPnL4Wm0WmOM/IEEkgZdG7lpi063YZ0/RCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:d0:95:0b:e9:91:6a:fa:70:d8:e4:ea:b2:56:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: May 5 13:00:42 2025 GMT
Not After : May 6 13:00:42 2025 GMT
Subject: CN=5c822be86f5ed59c4cb6dc5e7f75b63f7a382190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:f3:20:d6:bd:fc:b8:87:ac:d1:9a:6d:81:
c5:47:20:45:9e:fe:e2:9e:93:da:eb:e3:03:b7:46:
13:ed:d5:3a:74:b2:21:46:45:e8:cd:f2:eb:2b:c8:
1a:48:f6:24:da:bf:bc:a4:a9:f3:de:fe:7d:3d:f6:
93:57:58:ed:b1:0a:1b:80:dc:a4:c7:66:4b:25:a3:
3d:75:f7:98:2e:9b:50:7e:af:02:38:b2:ee:fc:90:
a7:d1:d2:bc:b5:5e:f2:b0:e0:3e:79:78:4a:26:61:
ce:67:29:44:fd:20:52:79:0d:ab:d2:45:17:a3:77:
66:e9:07:33:2f:eb:00:a2:ed:b7:9e:00:0b:93:c8:
35:6e:3b:dd:5f:0d:bd:20:1d:e5:0f:a8:3e:e9:9c:
0a:fc:85:d1:ce:8c:c8:3c:01:d8:00:64:27:41:9c:
f6:7e:2a:cb:20:01:b7:b1:da:41:9c:50:be:94:aa:
fb:17:a8:50:ff:3a:0e:55:00:13:30:e3:4f:6d:12:
c6:ea:34:a6:b7:b6:c2:c7:a0:1c:e5:39:88:b8:84:
40:51:fe:99:4c:de:49:14:a9:32:e2:61:36:93:6a:
4e:04:72:b8:5a:9d:4d:b6:1c:35:41:82:e5:c5:00:
de:3d:0a:72:5d:a0:9e:78:86:7f:01:1f:58:81:20:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:2B:E8:6F:5E:D5:9C:4C:B6:DC:5E:7F:75:B6:3F:7A:38:21:90
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:05:50:29:24:da:e6:ad:00:f8:67:70:ae:f7:1e:6f:59:
d7:28:41:20:72:28:ca:35:42:b5:1c:c0:85:d0:9d:3c:7a:1c:
57:b3:15:97:9e:1f:78:0a:b6:d8:27:d4:1a:9b:9b:bc:ee:20:
2f:70:a1:ee:8b:2a:97:c0:ff:40:64:37:e2:d5:85:bd:7a:63:
5c:ac:2d:36:d4:f1:e6:6a:d9:9a:26:2c:65:ba:eb:25:ec:f7:
d6:a6:3c:ad:0b:c0:f6:31:d0:73:a8:bb:27:2f:fe:ac:d2:57:
10:86:21:c0:88:f8:55:a1:53:73:29:d9:f7:67:8b:68:a1:b6:
c1:17:22:18:b1:cc:97:e3:c8:34:1d:7d:92:65:6e:a6:44:94:
0d:0d:f6:41:14:5d:70:6f:17:49:19:b8:07:26:44:c6:a2:d3:
1a:a1:08:2f:2d:0a:57:9c:8a:d7:61:56:b8:70:eb:e3:ae:67:
fa:67:80:3e:68:ce:b7:a8:83:6a:e6:4b:3e:69:67:be:20:74:
ef:28:d7:81:50:43:9f:07:8f:d0:22:1c:01:c2:e1:b2:09:c8:
08:9c:1a:6b:b6:c7:d0:86:3e:24:60:54:88:6f:e4:61:76:3e:
60:d9:21:76:2a:5d:a5:73:90:61:fc:b2:23:03:3c:f7:3d:70:
ef:be:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:47 2025 by rpki-client