Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier: qXFWPdeKLQjS+CJzTduac6YGbx6b91a5ktC/OQ+FkJk=
Subject key identifier: 95:1E:83:D7:70:42:5E:C8:87:F4:B7:2C:11:0E:07:ED:5B:24:44:AD
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial: 0196BD8135EF6EA322455A20C2EFADC66292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number: 0A27
Signing time: Sun 11 May 2025 04:01:23 +0000
Manifest this update: Sun 11 May 2025 04:01:23 +0000
Manifest next update: Mon 12 May 2025 04:01:23 +0000
Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: r55FDvcy2Ua4Hd1ALx4OJ/1PIk4CVdPLXD1Hk9YqVWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:35:ef:6e:a3:22:45:5a:20:c2:ef:ad:c6:62:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Validity
Not Before: May 11 04:01:23 2025 GMT
Not After : May 12 04:01:23 2025 GMT
Subject: CN=951e83d770425ec887f4b72c110e07ed5b2444ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:79:4e:cc:63:1d:23:fe:82:5b:74:87:2c:
07:85:58:bc:6d:d1:d1:e4:0c:da:3c:2a:d7:4a:32:
30:96:39:97:0b:1d:a9:64:c4:c3:39:a0:c9:10:74:
d6:ab:2b:c6:d6:57:f0:85:eb:99:88:4b:91:b7:ff:
ad:15:df:69:82:e0:08:d3:71:1a:5a:6f:25:d6:50:
86:c5:44:4f:4a:9b:4b:0d:49:a6:03:be:26:59:ca:
d1:88:3c:69:30:8e:e5:5e:76:cd:4c:69:0b:58:8f:
86:dd:b4:15:d1:8a:13:35:63:9c:4b:6d:1b:55:be:
6f:95:73:35:2b:dc:2a:5b:84:20:85:4e:e0:d8:09:
73:4b:35:3e:50:22:14:cb:66:52:15:0e:52:af:41:
c5:ff:07:7d:5c:cc:2f:8b:6b:fd:b5:3a:59:b1:d6:
c7:41:e6:f6:29:0e:eb:71:1b:a6:e6:59:d4:93:54:
dc:28:16:3c:00:88:a7:d1:a2:f2:fd:e8:15:fb:92:
4e:5d:64:c4:7f:34:7b:6b:e1:ef:01:b6:bf:de:6f:
a0:d5:7d:d2:84:33:a1:57:42:2c:1f:46:37:2a:c6:
56:6c:8b:e6:d5:e8:4f:1f:e0:f0:a0:4b:f0:bc:8b:
60:ea:c2:57:aa:a1:94:ee:67:ea:d4:58:d6:4b:d7:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1E:83:D7:70:42:5E:C8:87:F4:B7:2C:11:0E:07:ED:5B:24:44:AD
X509v3 Authority Key Identifier:
keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cb:de:36:92:d6:33:be:35:cd:a2:65:97:0e:30:e4:de:6c:
bf:4d:c7:3c:8a:48:55:c7:ce:f0:a8:a9:9f:57:3a:17:b4:4a:
77:3e:96:87:4f:93:77:01:d9:78:27:b7:50:d3:c7:0e:51:68:
7e:19:72:29:27:a2:d3:74:66:16:46:3d:98:ac:24:71:c1:75:
bc:af:90:19:85:9d:9e:2b:8b:c5:4c:8d:38:fa:d5:3e:d7:df:
46:3f:5b:f6:bb:a6:9f:f3:38:7b:46:48:70:21:2e:d3:ac:e7:
12:89:c2:22:7b:e2:ae:10:87:a8:91:7f:3f:7b:88:1d:e5:27:
fd:cb:5d:5c:41:91:4d:05:0a:10:a9:d4:36:ea:f1:72:ed:da:
a1:01:d9:ba:67:d0:b4:2d:73:9d:c8:aa:4d:4b:59:39:6b:b9:
ad:ab:12:8a:55:c8:bc:93:13:9b:c6:64:70:82:12:46:b1:cd:
0b:d8:64:4d:05:ca:2e:70:7f:81:06:8e:cb:23:58:0d:be:f9:
d1:04:64:08:33:71:58:23:89:e3:33:5c:83:15:32:d6:a1:8a:
66:52:fd:6c:4d:d3:6a:a2:c1:68:55:f6:4b:0b:76:c0:75:90:
07:8a:9b:07:28:10:1c:ce:71:25:fe:c4:2b:b7:12:d1:ea:78:
bf:10:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:43:02 2025 by rpki-client