Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: fP5SuSOkMeirehgzhKi3n53txhDf8tpx2XopfEqfgnY=
Subject key identifier: 46:01:02:9C:79:1C:FD:17:54:CF:B3:9E:72:E3:27:B8:81:C8:13:CE
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 0196B3D8C520235C8CC5468481516A3FE639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 14C2
Signing time: Fri 09 May 2025 07:00:49 +0000
Manifest this update: Fri 09 May 2025 07:00:49 +0000
Manifest next update: Sat 10 May 2025 07:00:49 +0000
Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: eY+IgkHR6CsepHJTxf2LdhdmQXYa7b0SN7vO08GNtHM=)
2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:c5:20:23:5c:8c:c5:46:84:81:51:6a:3f:e6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: May 9 07:00:49 2025 GMT
Not After : May 10 07:00:49 2025 GMT
Subject: CN=4601029c791cfd1754cfb39e72e327b881c813ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:53:f7:13:0f:01:9e:ec:a4:16:02:2d:5c:
02:3d:8f:a6:23:8e:9c:16:16:7b:17:5d:ff:06:d0:
ee:d0:01:69:02:cb:76:7f:ba:73:82:2d:28:81:2a:
fa:79:62:8d:b9:61:7e:fe:23:b4:91:ae:fc:20:98:
3f:84:15:7f:71:60:bc:25:86:45:e7:2e:fa:b4:7e:
e0:7a:1e:ad:ae:69:67:df:3e:b0:d3:0b:4b:ee:42:
b2:50:04:ac:dd:ca:c1:2d:5c:04:ef:cf:a2:e9:df:
4c:0a:cf:c7:2a:31:29:f6:e8:93:fa:a7:87:8d:d8:
60:48:32:fe:17:f9:1b:12:61:b9:ee:6d:f8:37:8e:
09:d4:a7:43:e6:6f:27:2d:6f:f6:0b:b9:22:a4:ae:
41:7d:ba:57:9c:b8:36:12:85:62:31:55:3e:a9:70:
31:d5:a6:cd:c8:76:09:ed:e7:a8:9c:7d:b0:7f:37:
35:e0:bc:d7:7e:ab:29:45:f2:00:f5:ff:ae:d2:1f:
73:0e:73:1d:ad:d5:7c:61:f6:70:d1:56:70:bc:4c:
bb:80:8e:54:ea:ed:92:49:e0:c7:b2:b2:aa:1d:01:
f8:9f:0b:71:66:0a:d9:5b:9d:28:ac:e2:72:1a:83:
71:3a:2c:30:2d:5a:e4:e3:e5:b9:91:a1:76:1a:bd:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:02:9C:79:1C:FD:17:54:CF:B3:9E:72:E3:27:B8:81:C8:13:CE
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:51:77:21:cf:87:85:d7:0d:b1:19:00:63:c7:5b:2e:ea:
c2:dd:87:89:fa:83:2b:83:21:53:d8:ff:1e:0d:7e:dd:2c:77:
9a:3f:33:67:7d:22:aa:41:c9:cc:25:c1:fe:47:87:5f:25:cd:
4f:13:60:e0:56:45:4b:0a:d6:03:55:1c:e4:9b:c4:0f:06:92:
1e:68:ce:ab:55:d9:b7:2f:05:37:28:dd:f9:5b:21:e1:b8:cb:
2a:eb:f8:f3:79:df:0c:e9:07:a1:eb:80:38:d0:c1:8b:26:fa:
1c:02:90:81:cb:9e:a5:c0:9e:15:6a:96:57:6a:35:e4:0c:b1:
76:e4:66:3b:52:8e:88:a2:21:07:7c:1b:d8:40:91:60:0e:41:
0e:15:b3:91:d7:ec:0b:e8:ba:da:e9:d9:ea:91:2c:36:e9:a7:
39:ba:08:b6:e9:f8:2f:fd:da:da:23:de:46:80:de:e6:3b:0a:
ed:7b:76:e3:4c:1b:34:4b:44:32:da:92:24:43:16:8c:00:d8:
bc:6d:5e:e8:d5:27:36:7c:a8:cd:54:81:8c:af:90:18:4f:c2:
b7:c9:86:3a:8f:71:91:e8:d2:fa:55:eb:78:01:9e:da:4a:ca:
06:d3:55:ba:1f:39:6b:65:0c:6a:d1:83:d8:fb:be:82:95:23:
9e:29:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:18:39 2025 by rpki-client