
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File: Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier: XpNDckBcpaC1tAJ3YTdWEowS5Q8Or46yWcEm5OppdGg=
Subject key identifier: 1E:3D:2A:80:08:75:C2:7B:7D:29:E2:63:4D:B4:4A:CA:B5:91:0F:98
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer: /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial: 01969FE3DA9094AA61BD2180B6F552CB7019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number: 08ED
Signing time: Mon 05 May 2025 10:00:32 +0000
Manifest this update: Mon 05 May 2025 10:00:32 +0000
Manifest next update: Tue 06 May 2025 10:00:32 +0000
Files and hashes: 1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: cgYw2YZG/SFTFtFhhew+IjF17FkcODMOeJbHCD6FUh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:da:90:94:aa:61:bd:21:80:b6:f5:52:cb:70:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Validity
Not Before: May 5 10:00:32 2025 GMT
Not After : May 6 10:00:32 2025 GMT
Subject: CN=1e3d2a800875c27b7d29e2634db44acab5910f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:33:f3:d0:81:27:1f:6c:4c:48:e4:78:67:
70:0f:0c:ac:cd:0d:9e:f4:49:5b:70:06:25:34:3d:
b5:f6:ae:a1:4e:91:49:de:e4:8e:32:5f:fc:a0:d4:
fb:99:51:ed:59:7f:11:72:52:ac:c1:40:d7:15:99:
e8:3d:b2:49:cf:ba:a7:62:ca:42:b6:43:92:cc:08:
24:e5:b1:01:c0:19:a0:15:fc:01:4d:47:28:a6:7e:
1f:49:91:6e:d5:8d:91:0d:9c:7e:1c:62:60:b6:a3:
65:d9:95:6c:30:4b:c3:f9:d9:8d:ba:79:02:06:2d:
b6:54:ea:db:c2:f8:69:b8:35:7b:cd:24:3a:6d:9e:
8b:5a:28:9f:a0:b8:bd:85:d6:57:54:30:bf:7b:1c:
27:9b:22:3b:04:15:23:76:ec:a1:c5:01:63:5b:03:
00:cb:8f:ea:52:b8:c1:a4:fe:9f:49:6c:4c:f8:d3:
b4:15:c4:91:29:03:2e:e0:c3:68:f2:ed:17:43:3c:
d9:44:02:7a:a0:96:40:92:2f:d6:1f:74:49:57:8b:
7e:a4:f4:58:15:96:dc:b3:20:d8:b3:1c:3e:43:d7:
72:76:f3:bb:35:85:ea:53:36:07:dd:86:cc:aa:63:
86:6c:40:1b:a4:3f:b1:08:75:a3:8d:bc:8b:8e:5d:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:2A:80:08:75:C2:7B:7D:29:E2:63:4D:B4:4A:CA:B5:91:0F:98
X509v3 Authority Key Identifier:
keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ef:f2:1e:ae:61:16:1b:de:ab:29:c0:cb:7d:42:8c:c4:99:
04:7e:ff:16:6b:03:a2:5b:05:5d:05:16:63:57:91:27:b0:76:
77:af:01:9a:e5:8c:07:44:7a:1a:c7:e2:b0:ea:ae:d8:5b:bd:
65:3e:94:f9:c1:92:f8:2c:df:3a:52:77:17:57:eb:a3:b5:75:
1c:db:ac:6f:c2:17:94:92:15:60:58:62:4f:37:66:09:4b:da:
32:13:29:5e:71:3e:88:f1:51:70:96:95:b0:3c:d5:93:e5:47:
bf:34:52:89:7f:ea:d5:32:43:e6:b1:e6:35:f5:9f:61:e1:fb:
2e:c6:76:d7:fe:b7:fa:8a:43:1c:39:af:c1:34:5d:eb:64:9a:
b3:6a:e6:fe:75:bc:ba:2f:f3:86:c4:2b:08:38:aa:81:ab:f1:
74:48:9d:32:57:d1:fd:00:01:6c:13:34:4d:b2:d6:00:6d:a4:
48:1e:11:21:95:b8:09:11:ed:3a:5e:2d:0c:74:14:5f:f6:7d:
e4:31:bb:ef:0c:c3:c7:8e:4c:55:43:c6:49:43:00:9c:0c:20:
ea:5f:c8:ce:61:b1:6d:d3:f7:50:a9:98:e9:2f:81:1d:3f:58:
e8:65:ae:9b:ce:c5:1a:3d:67:3c:74:e4:24:d6:df:fe:a6:f3:
e6:59:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:32:03 2025 by rpki-client