Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: h4iH9zDBXGP2DU7CB0ZiIPpIpenGraXrIeHsXRnTbY8=
Subject key identifier: D9:E7:B3:C3:CE:86:6F:D4:53:3C:D1:F5:A1:69:88:A0:14:A8:3A:EB
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 0196C04B3940FA44AE14CBEDD4A2434CB557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 1039
Signing time: Sun 11 May 2025 17:01:17 +0000
Manifest this update: Sun 11 May 2025 17:01:17 +0000
Manifest next update: Mon 12 May 2025 17:01:17 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: yxhhrJlAhX/TyJaC6MKt2Jp/jNOkKB1u47/c2i4Tqyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:39:40:fa:44:ae:14:cb:ed:d4:a2:43:4c:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: May 11 17:01:17 2025 GMT
Not After : May 12 17:01:17 2025 GMT
Subject: CN=d9e7b3c3ce866fd4533cd1f5a16988a014a83aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:b5:99:a3:dc:39:7b:b4:48:08:e6:6e:16:
91:f3:f7:85:44:41:ec:6a:ad:fd:84:73:f9:f1:02:
00:53:16:43:0c:44:2e:3b:20:1c:4c:4a:b9:82:04:
a1:55:b5:d3:a8:b4:90:7a:34:1a:cf:c6:1b:20:d9:
e9:30:54:81:5f:e6:90:9a:96:0c:1b:48:87:c6:e5:
0c:a4:6c:0c:f4:b5:c3:7d:ab:09:6d:6f:01:7b:5d:
41:79:02:80:15:98:f3:cb:da:2c:b9:84:6d:a4:78:
2f:8e:e2:65:68:61:45:b8:a1:2a:85:68:1b:a2:cc:
b8:9d:22:c7:c4:a0:c6:34:cb:30:c8:b7:33:aa:8a:
33:1b:af:95:bb:18:2b:15:4c:23:ee:b7:00:e2:ac:
76:56:30:20:2d:a5:23:1d:99:c5:92:0b:4b:97:07:
6b:1c:2d:fd:d8:0c:41:4e:cb:6f:ae:4f:94:24:71:
98:d7:3e:fc:3b:1c:82:44:00:f7:7e:fa:a1:9e:65:
d5:89:5a:f8:65:5c:fd:75:62:16:3d:82:47:27:a2:
c1:fc:a5:66:c7:98:da:9c:f5:2a:6f:42:13:4e:07:
02:cb:74:0e:52:51:94:34:98:fe:df:61:cf:ec:b7:
8a:c5:e2:0f:c0:f9:01:d7:43:63:24:32:23:cd:ec:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E7:B3:C3:CE:86:6F:D4:53:3C:D1:F5:A1:69:88:A0:14:A8:3A:EB
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:65:f6:09:a4:fe:83:f0:52:18:f5:6c:cb:39:78:32:2e:
83:9c:92:9b:c5:b1:62:73:ed:30:14:20:a2:ad:14:ea:ec:c9:
d0:cf:01:40:10:d5:1b:71:a8:ca:f5:f2:a1:83:72:48:91:ca:
4f:45:62:9c:60:28:95:59:47:94:35:1f:65:ce:fa:1a:d1:47:
f6:9a:20:26:86:ed:a9:b2:13:37:ed:bf:45:9d:6e:2c:f3:5b:
f9:38:a7:9c:7a:4b:79:26:17:c6:4d:ba:ec:8e:40:e5:26:a6:
f1:93:9c:30:39:d6:36:cf:71:b5:38:8f:cb:ea:fe:4c:54:76:
6c:18:65:18:85:22:d1:9b:1c:45:4c:93:57:32:d2:cb:32:5d:
e9:04:ef:a9:31:a8:2a:18:6b:4d:ca:d8:7a:2a:a1:cd:81:38:
f1:cf:cc:ed:06:fe:cf:2c:c4:16:8f:2a:aa:3b:47:b9:16:4b:
12:72:5f:16:43:64:1f:55:ed:58:8a:e0:e2:69:2b:e5:e9:ff:
27:e2:37:ea:65:b0:43:a8:00:d6:17:03:a3:f2:3c:d7:d0:66:
c3:6b:95:df:ad:ad:b5:41:7e:a5:57:b7:c2:73:43:de:7e:24:
a8:62:0a:63:e2:84:93:0b:3c:fa:03:05:e0:43:68:87:dd:51:
2a:1b:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:14:46 2025 by rpki-client