Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File: YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier: uIeTt2lv3TPAE40ZxdjNARoP+MZgMKil+vZ0ngS01tc=
Subject key identifier: A7:E4:76:4D:CF:5E:BE:CC:78:7F:08:87:7A:C0:14:2A:5C:70:66:AF
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial: 0196B82386FEB0A52FADFC3695B2906A3364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number: 0FA1
Signing time: Sat 10 May 2025 03:00:57 +0000
Manifest this update: Sat 10 May 2025 03:00:57 +0000
Manifest next update: Sun 11 May 2025 03:00:57 +0000
Files and hashes: 1: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: 3c8gcW8BIlSlCyue64v8jL92Y2xALwNSZRJYuo2hMZQ=)
2: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (hash: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:86:fe:b0:a5:2f:ad:fc:36:95:b2:90:6a:33:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
Validity
Not Before: May 10 03:00:57 2025 GMT
Not After : May 11 03:00:57 2025 GMT
Subject: CN=a7e4764dcf5ebecc787f08877ac0142a5c7066af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:fb:fc:26:3a:0a:6b:ed:bd:6b:e3:8b:b9:
da:35:b9:84:90:6f:39:c4:68:12:4c:f0:ae:26:e1:
01:66:e1:b2:f2:ad:6d:9a:a8:0a:f0:b6:47:4e:1d:
ae:9a:96:3c:56:95:84:3b:81:fd:e3:92:bc:5f:7a:
40:89:66:e3:19:84:f7:6f:be:cc:1e:c9:b0:26:2f:
50:b5:d6:f5:6b:af:5e:d7:aa:c6:c2:d8:b2:f7:38:
0c:2a:86:76:e5:a4:05:c3:13:ea:ec:d5:f8:48:08:
62:8d:dc:37:8d:e0:31:2e:b3:76:21:32:06:68:fd:
27:ba:98:77:0e:25:88:26:19:5f:c5:b2:75:ba:e6:
26:6d:cf:bd:29:54:54:c3:cc:40:64:69:98:f5:f2:
93:02:ee:37:1c:33:0c:cc:a3:c0:3a:2d:6c:62:89:
0b:e9:ef:f1:64:db:cc:3e:21:9b:fb:a3:85:ed:da:
00:61:42:c2:e5:81:6e:2f:56:e1:4e:cc:23:20:f5:
ce:18:1e:56:2e:54:d7:8a:4f:3d:ca:93:6b:e3:bb:
1b:1d:04:92:24:c5:ba:83:ed:76:a2:3d:82:81:77:
9f:a7:6f:c1:4b:4a:24:98:2b:08:88:78:2b:7e:11:
02:7d:59:23:b7:1a:68:1d:3b:d1:16:00:b7:80:bd:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:76:4D:CF:5E:BE:CC:78:7F:08:87:7A:C0:14:2A:5C:70:66:AF
X509v3 Authority Key Identifier:
keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:44:8c:d4:98:65:19:fd:ce:b2:b0:98:2a:9b:25:50:92:
53:74:99:a2:c6:12:8d:ee:66:46:20:7f:a3:5a:f5:f4:da:20:
ec:33:f4:4d:f8:cc:ef:9f:53:60:02:9f:9c:1e:6e:97:5e:57:
0d:96:ec:ef:60:26:ad:01:81:c9:0c:a8:61:7b:30:38:2e:96:
ac:a1:a0:40:77:e3:d4:c4:89:de:1f:77:03:af:17:53:38:7d:
45:13:d8:f7:a2:8c:c7:71:a2:5f:2d:1b:c5:01:ca:71:31:a1:
c0:a9:58:89:f6:32:56:a6:e2:44:d5:a3:b1:ec:d8:b1:18:4c:
7b:44:69:f6:b9:1c:79:9d:b4:74:2a:7d:b3:8c:ef:e8:d9:58:
e1:de:99:64:3f:d8:e6:11:9d:9d:5a:59:7f:b7:74:be:48:44:
7f:ef:20:aa:97:81:e5:65:bb:e5:f1:04:49:08:20:2a:aa:ee:
6c:8a:7a:3f:48:b2:d7:a0:cc:c7:2d:41:c1:15:16:45:83:60:
95:a9:46:8a:d5:aa:72:f0:bf:a3:16:0c:1e:a8:24:9a:8e:ee:
a2:c6:98:b0:71:81:08:7f:da:92:b5:4f:4a:bb:26:ff:ea:aa:
21:80:c1:51:f0:18:ba:56:e9:a2:4e:26:cd:e1:17:11:13:c7:
66:dc:a2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:11:46 2025 by rpki-client