Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: hoppOxk5tRx5aWaZ1GThDlwGM1812j/X1QFzHV7DuyE=
Subject key identifier: 3D:33:F7:CE:23:65:89:CC:F9:A7:BD:A1:3F:36:62:86:C3:14:23:39
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 0196A208F0FA0A3B5178B484371ECF2DC565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 013D
Signing time: Mon 05 May 2025 20:00:16 +0000
Manifest this update: Mon 05 May 2025 20:00:16 +0000
Manifest next update: Tue 06 May 2025 20:00:16 +0000
Files and hashes: 1: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: Ch4apnZslHS/3setY7E5K5mb2FHSz7Drn3TfNLtS+gM=)
2: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (hash: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:f0:fa:0a:3b:51:78:b4:84:37:1e:cf:2d:c5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: May 5 20:00:16 2025 GMT
Not After : May 6 20:00:16 2025 GMT
Subject: CN=3d33f7ce236589ccf9a7bda13f366286c3142339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:7b:f9:a0:8e:d2:d3:37:31:3b:44:59:5d:
c7:02:df:58:87:6f:34:6d:ce:d8:35:cd:d8:05:de:
d0:2b:5e:0e:ff:13:76:10:cf:e7:27:c2:47:52:ac:
d8:0e:d2:6d:52:b6:2e:b2:4e:d7:a4:8d:f6:b9:ea:
0b:a5:0d:74:3f:5c:1d:b3:09:30:b4:09:81:76:ee:
2d:ee:bb:f4:e4:37:53:79:77:ad:10:17:9d:9d:d5:
fd:a5:ad:14:e9:7e:fa:1b:9f:ef:c2:9c:23:f9:7d:
6f:0d:84:90:bd:72:8f:d9:d4:12:4e:83:13:8f:26:
7a:e6:48:9f:94:41:09:af:14:ca:98:09:79:a2:ec:
a0:eb:00:fd:0c:2e:79:ed:c7:7d:f3:52:40:90:49:
9a:43:15:ec:98:03:70:13:a4:5b:c8:9b:80:e1:86:
37:f8:31:83:f3:de:e8:a5:e8:e2:de:26:3b:7b:84:
0f:f7:3a:56:5b:fb:7b:41:8e:93:ac:18:0f:79:d5:
d2:40:ec:3b:db:e3:35:d3:99:8c:4a:13:aa:62:54:
d1:fe:1b:22:0d:99:a8:72:cd:f9:49:7c:db:c2:78:
e6:88:0d:fd:f0:10:11:b7:37:96:31:74:36:37:db:
38:3a:65:26:ba:56:ad:40:9d:b6:6d:e1:ff:5c:b5:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:F7:CE:23:65:89:CC:F9:A7:BD:A1:3F:36:62:86:C3:14:23:39
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a0:c1:47:57:fc:29:ed:da:74:e6:71:ff:4d:5a:36:45:4b:
5a:b7:92:fa:f1:51:f6:37:68:6e:d3:4e:4a:66:e9:33:99:3b:
e5:57:1a:6f:42:23:1a:08:57:c5:17:ae:b3:76:1f:98:11:17:
24:c9:e7:f7:e0:6f:ec:ef:2e:8e:a6:62:eb:01:d3:2f:a0:73:
9d:c8:38:9a:70:cc:69:68:b3:84:db:63:0d:33:84:03:52:b1:
76:48:23:5c:3d:ef:4c:18:0c:4f:ea:6c:aa:2b:ec:d8:42:25:
8d:8b:00:0c:b9:1e:0c:fc:f0:52:df:b6:17:de:e0:86:9c:4f:
46:cb:d3:b8:b3:97:6d:71:1f:a5:f7:85:7b:47:5e:b4:7f:9c:
f3:1c:68:ae:9e:b3:17:09:b4:95:4c:95:9e:37:ce:7b:28:76:
60:2e:68:64:75:be:ab:86:97:2b:7a:0d:ae:ac:96:a7:e2:92:
10:2b:04:9c:f9:ad:4c:3e:4b:f4:2b:59:aa:45:de:64:10:80:
f5:b0:44:98:78:0c:58:ac:de:e3:61:3a:1e:05:b0:92:79:e3:
3d:87:b9:40:aa:84:1f:57:9c:15:a7:c3:5d:10:0a:2d:82:86:
09:27:85:54:57:0c:61:7b:3e:01:13:8c:67:08:a3:a1:d5:d9:
04:82:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:20:20 2025 by rpki-client