Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: IQZqfNkxWKWWId/PlRj4N9CwXEs+KsPJUYVb5N9rNjs=
Subject key identifier: 00:90:1E:81:2C:5C:EF:DB:16:94:D2:42:6F:32:59:3D:03:3E:2F:0C
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 0196B5C6D5D56A04CF1402493847047B2E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 102E
Signing time: Fri 09 May 2025 16:00:28 +0000
Manifest this update: Fri 09 May 2025 16:00:28 +0000
Manifest next update: Sat 10 May 2025 16:00:28 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: LD7MTKr2+h1bXB4BJ1r8H8WL54yapYfbNn96wmlQF4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:d5:d5:6a:04:cf:14:02:49:38:47:04:7b:2e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: May 9 16:00:28 2025 GMT
Not After : May 10 16:00:28 2025 GMT
Subject: CN=00901e812c5cefdb1694d2426f32593d033e2f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:4b:4d:11:e1:5b:6d:88:99:25:05:d9:89:
0e:08:ce:ae:c8:75:95:3c:09:0d:9f:52:53:14:66:
a4:96:74:e1:cf:9d:31:12:8a:85:e9:3a:83:fc:1c:
d5:93:f1:af:76:57:e1:2e:6c:7e:a9:24:d4:1f:40:
5d:e0:82:55:19:80:04:63:44:cd:80:db:c2:7e:a3:
c4:b2:1d:3f:65:78:af:f9:20:52:ef:b8:a0:76:ea:
0e:cb:99:6e:ea:ca:ce:93:e3:5b:ce:d8:f7:50:de:
39:ad:4e:9a:65:34:f5:e2:3e:65:7f:90:3d:d1:24:
c6:24:ff:82:1c:20:3f:fd:c1:6c:48:76:8b:73:16:
fc:2f:ae:f1:a4:f4:a3:82:a1:d4:3c:44:81:3a:73:
74:91:6b:97:89:c0:c0:f5:54:fa:f5:46:72:d8:de:
be:0a:1e:dc:13:d2:1e:ad:41:f0:7f:3f:f1:84:2d:
1d:d0:36:f2:13:ef:64:35:12:1c:f7:a1:46:38:16:
25:f7:48:c8:d7:d8:0a:10:ed:4d:55:23:e3:06:f9:
c0:32:b4:bd:a5:60:4d:41:ff:ab:23:01:86:82:74:
3a:45:b9:a2:80:1c:da:14:1d:e2:04:28:79:34:aa:
dd:4c:25:f3:fb:8f:8d:14:10:ed:e1:74:f8:de:1a:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:90:1E:81:2C:5C:EF:DB:16:94:D2:42:6F:32:59:3D:03:3E:2F:0C
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:be:30:4d:30:12:71:38:a5:c3:e1:a5:c9:f9:7f:6b:74:f1:
dd:93:88:8f:ef:62:4b:1c:c1:b7:55:28:a5:bb:00:27:24:f3:
39:ba:c0:88:65:1c:87:87:6d:09:b6:8f:bb:e2:7a:79:95:31:
b8:a5:21:50:f4:17:7e:b5:c3:6d:fa:a0:4b:a9:08:f2:73:b2:
13:b8:16:bf:a1:18:1d:8d:46:a7:68:f6:c8:0d:c3:71:c4:81:
52:5e:f5:69:88:86:e1:2a:0e:8e:ae:4a:dc:cc:09:5a:e4:dd:
6d:c9:d5:06:7a:8c:cd:00:4e:27:27:67:ee:19:18:a0:0f:b6:
8b:4e:02:df:ab:f4:13:6d:a8:d3:b2:94:b8:5a:fd:c0:ea:e3:
1e:01:62:22:b0:f7:73:98:5b:23:fb:60:cc:ac:85:2c:5f:65:
d5:63:fc:b6:6a:13:60:33:49:8b:26:93:7c:d0:ad:44:c8:14:
ba:df:bc:6f:bc:f3:14:dc:2d:44:be:5f:9b:da:62:f1:a7:27:
bd:ef:6a:0c:72:48:58:19:fb:2b:5f:5f:52:ae:a2:59:97:1a:
ac:37:1d:30:0b:6b:50:0a:b9:8a:46:77:6e:e4:94:70:40:4f:
4c:75:6b:6d:dc:6b:32:f3:51:f7:90:51:18:7c:f1:fd:e0:68:
71:d0:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:05:59 2025 by rpki-client