
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: N3aLAz4df2nzTbnWCyU5C52gnEELZGjbja1ZM5qeunc=
Subject key identifier: 88:A8:56:39:3A:A3:ED:47:61:41:60:75:BE:EC:B0:D7:F2:12:2C:A3
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 01969E9B2EDAAEDA8A81F7524F766B3A2068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 11A1
Signing time: Mon 05 May 2025 04:01:32 +0000
Manifest this update: Mon 05 May 2025 04:01:32 +0000
Manifest next update: Tue 06 May 2025 04:01:32 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: UtsJFbRMU8jzNfn2F8lRXBUcWjNWe9c9l4VdJrSqQPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:2e:da:ae:da:8a:81:f7:52:4f:76:6b:3a:20:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: May 5 04:01:32 2025 GMT
Not After : May 6 04:01:32 2025 GMT
Subject: CN=88a856393aa3ed4761416075beecb0d7f2122ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:30:51:16:ce:31:c8:37:d8:27:61:f0:fa:
58:e1:2c:60:da:a5:e0:b7:3d:02:67:fc:75:89:73:
3f:f2:45:9a:22:4f:b9:33:3c:63:ac:9e:9f:e2:3c:
31:48:88:20:9a:de:c9:92:43:37:99:bc:cd:6e:e2:
8f:cf:0f:2b:a4:0d:35:f1:7a:bc:42:c5:e6:4d:f8:
43:f5:03:e1:b7:5f:74:41:69:ff:2d:f3:82:c7:39:
eb:63:ab:6c:d8:dc:00:5d:c5:18:5b:1c:5c:2a:bb:
53:75:bb:d5:4b:68:37:db:2f:42:1f:5d:f9:e3:1c:
25:9a:84:cc:2f:d5:9d:87:01:d7:7a:62:a5:73:73:
d3:e3:85:3d:cf:4a:4c:1a:27:69:30:ed:c5:59:19:
34:7e:7c:34:c8:0f:23:11:d6:56:e2:db:d1:4f:37:
c0:3d:0e:76:24:34:24:70:90:66:e0:39:46:d0:ad:
e0:79:35:95:f1:68:c5:97:1e:96:fd:e2:a7:30:3e:
eb:9a:75:3e:9e:3c:7f:1e:1a:b6:07:cd:65:49:d1:
ad:1a:93:6f:dd:6e:9a:8b:b7:56:ae:f6:59:be:fc:
17:57:f5:2a:20:21:c3:e9:c6:8b:3d:41:39:10:16:
a8:b9:31:c6:5a:c8:09:96:e7:ee:00:ed:41:27:fe:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:56:39:3A:A3:ED:47:61:41:60:75:BE:EC:B0:D7:F2:12:2C:A3
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:18:51:22:6f:ad:33:37:33:d5:6f:a5:ab:f9:29:12:b3:56:
24:37:a1:c5:39:09:20:39:44:45:15:fa:b1:b3:dd:25:3d:7f:
ee:ab:0d:28:41:38:ff:a2:71:bd:8b:06:08:3d:9f:ad:05:82:
ea:b6:57:b5:c5:d7:6e:6b:c9:03:ff:1d:a3:88:21:d4:38:51:
b2:71:a5:83:26:42:3c:3e:5a:1a:43:76:42:cd:92:8a:70:58:
45:15:90:73:81:34:5f:d7:33:33:10:5a:a3:00:46:d8:5a:8d:
49:fb:89:ba:d7:cc:90:d0:4b:9a:24:2e:49:8f:94:4c:90:e4:
e0:a2:55:28:83:f0:11:e4:9d:c2:17:b7:84:a0:66:66:43:a4:
1c:35:4b:f2:b6:cf:32:ae:89:1a:c9:13:3a:33:fa:99:fb:fa:
6a:9b:9f:46:40:74:7f:b1:00:71:95:15:fc:7c:6c:41:d7:96:
d7:8a:25:5d:32:10:07:d2:82:14:46:e2:0f:27:2b:da:55:c3:
01:84:c5:30:2c:27:aa:2e:cf:94:b5:23:51:ac:37:ae:92:55:
61:da:40:ae:93:0f:f9:4a:19:f4:6d:58:85:fd:17:00:b2:38:
8f:46:2f:63:48:a6:55:86:45:67:82:ba:be:92:7c:6e:ab:78:
b0:fb:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:39 2025 by rpki-client