Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: rlQq7Qnfv6pg1o2LazPa2MVwHAyZvC/4W/7ksi1jKLk=
Subject key identifier: 70:61:DF:56:F4:08:68:7B:29:59:A5:BD:1A:C3:B5:E9:DE:52:36:5D
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 0196BB9214DB47A090CE2224B8B861E89C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 08F8
Signing time: Sat 10 May 2025 19:00:34 +0000
Manifest this update: Sat 10 May 2025 19:00:34 +0000
Manifest next update: Sun 11 May 2025 19:00:34 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: FcBVUo7U/nMewsUiNN1lIzLdvTgkx7tT/R9cupEqlto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:14:db:47:a0:90:ce:22:24:b8:b8:61:e8:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: May 10 19:00:34 2025 GMT
Not After : May 11 19:00:34 2025 GMT
Subject: CN=7061df56f408687b2959a5bd1ac3b5e9de52365d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:25:32:68:01:8f:7f:d8:db:c6:e2:1a:ce:
7d:32:ee:83:6e:9b:11:bb:c6:91:fa:0e:6a:d4:0c:
82:c1:9c:c5:de:f6:f7:63:13:0b:4b:f0:20:4d:5a:
07:8a:7e:c1:88:8a:b4:37:df:47:72:39:a5:2d:85:
a9:dc:bc:09:4b:e6:09:cc:6a:29:62:b4:47:44:33:
ac:11:7a:fd:f5:83:e9:dd:f0:82:32:3c:e7:bb:be:
f5:19:bd:c1:9f:5b:d6:f8:3f:ce:1e:41:4d:d4:d7:
fe:25:ca:36:11:7a:46:23:fa:74:0a:d1:e6:82:20:
b4:c7:04:0a:cd:ce:9f:57:85:8d:44:21:5e:85:ee:
e3:91:0f:ba:56:be:fb:30:f1:ad:41:63:f1:27:c2:
2a:d9:ae:9c:21:2b:d0:f6:c6:fd:d0:c2:b8:4c:25:
d8:56:60:ac:40:fd:b3:48:b4:92:09:f0:b9:e2:e7:
f1:f5:8d:6c:bf:18:5c:36:bc:80:6c:3d:26:0c:7d:
15:b1:2d:b8:19:00:9c:2b:ec:6c:aa:31:a7:c0:af:
c2:bf:eb:76:dd:22:bf:3c:71:d9:28:78:9f:56:0d:
c3:e6:cd:89:92:1d:41:da:60:d5:3b:16:a5:72:cf:
af:e6:a6:c9:07:35:f0:f8:97:3f:7b:f1:8a:b2:54:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:DF:56:F4:08:68:7B:29:59:A5:BD:1A:C3:B5:E9:DE:52:36:5D
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fd:5c:9d:1a:f4:38:06:9e:f3:05:12:81:aa:27:e3:8f:9e:
fc:43:6c:b1:6a:2d:55:56:70:1c:96:7c:e3:54:91:f6:34:f8:
30:dd:c7:20:dc:7a:55:8e:d5:ac:14:13:d7:e3:3d:96:2c:fa:
9e:15:d2:13:ea:87:53:84:23:75:f2:89:22:83:26:6f:80:77:
9c:fa:12:ed:11:96:51:54:3c:ec:af:7f:c1:03:0d:26:f7:f1:
15:6b:d9:d6:e7:30:ac:e9:4c:6d:1a:50:ae:78:b3:ee:2d:c9:
79:3e:b9:49:ad:5b:5d:6b:c3:de:a3:22:16:bf:8b:33:df:99:
d7:af:e5:95:11:60:01:74:2b:7b:12:53:ca:d8:89:c5:f1:d9:
0a:18:d8:c5:f8:95:3a:44:2b:25:2b:d0:60:b6:d7:29:c9:2c:
e1:14:35:4f:ec:8e:21:7b:1b:79:10:27:db:41:52:d8:92:d1:
c9:a0:24:15:dc:b7:cf:a8:cd:4c:41:72:ae:9b:81:60:9d:f3:
f5:2b:49:21:77:b9:38:fd:a1:a5:d4:7f:52:ac:ca:41:27:a7:
79:28:0f:4d:85:53:a1:7b:a3:b4:aa:fb:c4:f2:12:0d:8f:6e:
ee:91:5c:b8:60:4b:97:27:33:30:61:14:3c:6b:3d:33:b9:76:
2b:07:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:29:31 2025 by rpki-client