Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: zcjIDhAwhXQX120AL+YLL5vhR6BohRki9f7o6dX7iDk=
Subject key identifier: 36:A1:4D:C3:DE:54:4A:9C:39:A5:A0:2D:28:AA:74:37:7A:62:8B:BD
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 0196BFDD2B5CBE3918D582C666FAFE297FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 041E
Signing time: Sun 11 May 2025 15:01:04 +0000
Manifest this update: Sun 11 May 2025 15:01:04 +0000
Manifest next update: Mon 12 May 2025 15:01:04 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: T4vEnwKu46kg6z5iMnQGgVfRmZtm7cSu4eDSN0LXuco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:2b:5c:be:39:18:d5:82:c6:66:fa:fe:29:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: May 11 15:01:04 2025 GMT
Not After : May 12 15:01:04 2025 GMT
Subject: CN=36a14dc3de544a9c39a5a02d28aa74377a628bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:e3:41:4b:82:59:b7:06:af:1f:e5:84:90:
26:96:85:31:f8:10:97:26:ac:95:f8:65:e5:e7:fd:
88:50:e6:fe:9d:e1:d1:90:91:ca:5e:27:1b:8a:11:
5f:ff:e4:79:7e:a4:80:63:d3:c4:da:cf:c3:4f:45:
0e:ab:f0:46:31:cd:5c:2d:e0:fa:91:c3:95:85:5b:
76:48:4a:72:f0:52:21:53:ad:ee:49:f9:8e:37:ac:
50:88:39:99:f3:6b:5a:ed:cf:35:bb:99:80:95:71:
44:5f:c3:ad:e1:05:2e:87:13:d3:9f:48:3c:28:0d:
59:d9:86:0f:c5:85:30:f4:fb:99:4b:43:0d:9e:af:
5f:7f:c0:57:24:10:a4:04:9b:67:f5:d4:b9:20:32:
52:eb:33:53:c2:e6:ce:48:da:38:5d:4c:2f:f7:5d:
5b:2d:3c:42:f4:0f:14:dd:18:2d:12:0c:15:91:ae:
c6:3f:3c:8c:26:e0:3b:cd:07:21:e9:1c:c8:15:2f:
b3:c2:b6:3e:fa:b4:2e:55:e4:d3:fb:d9:b9:65:de:
63:63:65:d8:14:12:85:9a:ce:d1:5e:30:15:01:88:
34:1b:00:ee:94:7d:9d:79:51:4c:21:3f:41:07:37:
13:e8:58:e3:ef:d0:bf:a1:10:ea:69:c3:5c:b3:18:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A1:4D:C3:DE:54:4A:9C:39:A5:A0:2D:28:AA:74:37:7A:62:8B:BD
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:47:78:7a:cb:5a:f7:66:27:2e:21:4c:72:be:bb:2f:a1:5f:
d5:57:bc:d1:fe:3f:ef:29:a5:45:61:e8:7a:16:a2:94:72:0c:
30:3a:68:25:e3:47:74:d8:86:d4:36:4e:e9:b0:03:38:0c:37:
af:e1:07:4e:df:f7:e4:d1:07:31:27:18:2a:e0:12:16:58:de:
8a:48:aa:1b:31:f6:8b:61:85:97:11:c2:cc:36:a9:73:eb:11:
91:86:1b:77:67:5f:31:88:43:c1:11:f2:17:02:0b:bf:74:9a:
c4:d3:6b:9b:fc:7c:25:60:ce:08:54:65:1d:d0:78:af:22:75:
8e:78:57:94:aa:e5:f4:d5:f0:ad:1e:4f:cb:09:a9:fe:1a:74:
ad:8c:47:7b:26:eb:67:65:6b:8e:1f:6d:78:40:3f:c3:8b:22:
b0:26:6f:43:33:bd:52:d7:98:9d:b7:7c:d6:15:e3:4a:b2:f5:
6b:6e:65:72:f6:21:ec:d8:d8:4a:dc:2c:96:e4:97:6b:45:f4:
f6:67:ef:bd:d9:dd:0f:95:9f:41:40:b8:79:cf:bb:e1:ed:57:
9f:a4:7a:0c:af:7c:58:1e:c6:d7:9c:bc:a3:51:62:89:fa:79:
15:92:17:f1:54:ee:8d:fa:5a:aa:59:f5:47:be:ad:91:39:67:
39:07:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:26:16 2025 by rpki-client