
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier: G0E1BJepOv/8T1bE0ttWV9yFmJ4cSgWLPW51lp2PSBU=
Subject key identifier: DA:B4:C6:63:A8:36:4F:25:AE:61:13:FF:A0:79:7B:3B:63:13:B4:3F
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial: 0196CA2951B41C745F7A0C9F7588AEE95314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 15:00:27 +0000
Manifest this update: Tue 13 May 2025 15:00:27 +0000
Manifest next update: Wed 14 May 2025 15:00:27 +0000
Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: ozaRWMZmkPe+QLowbaf9AGnG7gytHtBCitH4+BsKFXM=)
2: syKB6zisduN4C3cAJozjgCCO0PY.roa (hash: 0Vdx4RjEX6ZtXLCLRmfeUBESEOKss3f6Va2BIWn7LcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:51:b4:1c:74:5f:7a:0c:9f:75:88:ae:e9:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Validity
Not Before: May 13 15:00:27 2025 GMT
Not After : May 14 15:00:27 2025 GMT
Subject: CN=dab4c663a8364f25ae6113ffa0797b3b6313b43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:ce:07:a2:1f:e6:6d:75:f6:b4:fe:c6:5c:
c0:a0:c1:4d:1d:8b:67:49:cb:10:f2:8a:d0:9c:90:
ad:8e:25:55:bf:9e:d6:fd:d7:22:86:59:13:d4:ec:
34:47:bc:1c:76:97:fc:dc:4f:83:e4:32:dc:8c:cf:
37:17:10:60:8a:ca:a0:32:6b:a1:5b:d5:1e:74:80:
ea:0e:58:b2:e5:e5:05:b9:8b:81:07:38:ce:60:75:
fa:57:e6:a5:90:c8:14:29:4c:a5:a1:5a:f0:ce:8f:
cf:73:eb:70:42:5a:42:52:7c:fc:7b:dc:a7:1d:99:
4f:33:78:1d:1c:4a:c2:59:10:c2:40:71:71:b4:c7:
6b:6e:49:1a:15:b5:49:d1:39:2a:3e:d4:d5:be:4c:
45:31:0f:6a:32:13:28:69:b8:e0:42:8e:61:83:01:
62:41:8f:f2:76:29:c6:cf:ee:b0:fe:45:65:19:b1:
13:85:f9:d0:08:c9:09:18:b2:31:52:a9:97:dc:00:
82:c0:5c:30:37:9b:7b:3b:6c:8e:44:c5:02:a2:49:
79:34:4d:c6:41:3f:0f:67:30:f1:8e:7c:b9:ce:f1:
41:5a:1f:3c:a8:e4:94:e2:69:b7:a4:96:66:e9:e0:
72:56:9a:e8:84:26:c2:6a:74:ed:a3:f9:fb:dd:c5:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B4:C6:63:A8:36:4F:25:AE:61:13:FF:A0:79:7B:3B:63:13:B4:3F
X509v3 Authority Key Identifier:
keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f2:45:e1:e9:62:0d:f1:3d:60:e2:c1:f1:1e:56:b9:28:15:
6f:bd:d5:91:e2:03:9d:51:23:4c:65:37:50:f3:a9:8f:43:e3:
c4:1a:3c:7c:82:18:8c:2d:c4:d6:fa:b5:81:f0:c9:98:46:09:
9f:46:b5:8e:a7:e6:06:51:ea:1e:99:23:36:b0:bc:43:15:ca:
59:e2:37:3b:ca:8d:a7:a7:72:09:79:ab:dc:01:bb:ca:39:a3:
6c:35:d3:b5:77:09:33:65:9b:cd:b3:0a:f5:59:d3:2a:5b:a3:
51:54:da:c2:3c:1a:04:c5:5f:69:9a:da:eb:4d:24:aa:38:13:
35:98:ed:8d:88:29:0b:30:eb:19:e5:9b:f1:b0:7b:25:a0:c6:
ff:03:a1:a1:51:97:ba:6b:c7:0e:23:bd:c0:6a:c9:28:ea:20:
08:56:91:a3:75:bf:ce:c1:db:5d:d9:fc:52:49:2c:75:bd:15:
b1:0f:2b:5e:81:bc:38:d8:87:1e:69:55:d3:12:b1:93:e6:4a:
9a:27:7a:65:f2:4e:2e:46:4f:10:05:a6:81:96:04:23:81:be:
1f:0a:5f:53:1a:d4:58:1f:46:0f:85:c2:fe:eb:4d:db:2b:5d:
da:c2:44:89:0b:4b:6c:8f:b2:4e:6e:23:2a:b4:f5:ef:8f:5c:
d8:77:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:09:59 2025 by rpki-client