Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier: Pail/oacwYejpFsay2lEomoG5VuUHduu6GrmConllIg=
Subject key identifier: 6F:CA:85:BA:18:95:AA:B9:53:76:7C:93:2A:EC:B8:7E:FD:BF:C2:EB
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial: 0196BE5C4266BF7FFA4FB25C0975B8D4730D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number: 14C3
Signing time: Sun 11 May 2025 08:00:39 +0000
Manifest this update: Sun 11 May 2025 08:00:39 +0000
Manifest next update: Mon 12 May 2025 08:00:39 +0000
Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: fw8mCvxDodCfMuF/e/zUu1HB0uNys3oahTruKeC6ak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:42:66:bf:7f:fa:4f:b2:5c:09:75:b8:d4:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Validity
Not Before: May 11 08:00:39 2025 GMT
Not After : May 12 08:00:39 2025 GMT
Subject: CN=6fca85ba1895aab953767c932aecb87efdbfc2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:1f:5b:fa:20:73:52:69:00:2d:e2:48:e8:
3b:ae:8a:5b:9b:be:bd:8b:40:50:f6:f5:42:2c:28:
bf:42:6d:86:5a:d0:1a:a2:af:2c:34:e7:4f:03:8b:
87:f2:dc:0d:74:4d:7a:97:6e:c0:7a:ae:ee:a9:4f:
42:b8:ac:f8:18:eb:52:33:34:ea:33:18:85:aa:db:
8d:0b:84:33:0d:70:6d:24:fa:56:36:a8:c6:68:65:
e4:15:b2:0a:8e:91:ca:a2:8d:aa:5e:59:fb:05:37:
d1:fd:59:92:ad:e2:2f:3a:ae:84:e4:97:10:aa:28:
73:af:0b:bf:6f:8b:95:46:f1:a8:96:0c:d9:33:da:
dc:b5:10:f2:91:90:df:5d:d8:ed:e7:26:fa:b9:3c:
75:08:23:de:9d:e4:04:19:d8:1b:56:72:b8:3a:72:
c9:c0:09:78:0e:23:2a:cb:f5:94:2a:4b:7c:bb:b0:
f0:59:47:a8:2f:95:e9:de:5c:b9:e7:63:1c:ab:56:
2a:b1:a3:7b:b2:ed:9f:2b:c2:36:14:29:77:95:4a:
2c:23:77:3d:0f:96:6e:2a:08:e3:0f:6c:4a:35:0a:
ed:68:81:22:c2:bc:a0:29:5f:1f:58:d5:18:ce:6e:
77:46:61:dd:d2:84:4f:94:7c:20:05:1f:5d:a0:36:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:85:BA:18:95:AA:B9:53:76:7C:93:2A:EC:B8:7E:FD:BF:C2:EB
X509v3 Authority Key Identifier:
keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:c2:f3:61:25:c6:57:00:a9:47:1f:8e:05:44:aa:79:cb:
2f:eb:57:3d:52:d1:68:4b:9c:84:23:5a:07:79:d1:e4:8e:e0:
4c:26:9f:5d:51:8c:9b:e5:8e:96:3e:7f:16:8a:fc:54:17:9b:
96:39:85:48:45:40:13:ec:6f:25:72:95:50:8d:4c:d1:19:b9:
9b:0b:6f:e4:b1:9c:b6:cc:66:e9:98:af:09:c1:29:2b:b5:f0:
bf:48:ee:08:44:37:c3:0a:d0:eb:49:20:17:19:9b:e2:01:9b:
3b:90:c0:f7:ca:99:c6:8a:b7:bc:4a:48:15:4e:dc:73:69:08:
5e:3e:e4:3d:5a:85:c1:5c:ff:f8:ed:36:6b:5d:5d:b4:f7:49:
5c:be:9c:fe:e0:20:1f:6f:d4:93:3c:39:ae:41:e0:f9:ff:97:
50:a2:ee:f0:58:c8:33:f1:06:89:eb:17:61:f5:68:c7:5b:9f:
f8:9c:e3:5c:9d:5b:15:f4:97:77:a9:5e:59:0f:d8:d5:cb:9a:
2b:9c:c6:c1:f5:0d:57:90:7c:eb:b0:ca:14:b6:b0:2c:26:6c:
af:94:89:5f:04:a9:61:b3:7f:4d:43:e9:4e:51:c0:da:68:00:
2f:46:34:0e:8f:eb:9c:e9:ad:84:3d:24:e7:61:84:ea:e4:a0:
19:89:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:30 2025 by rpki-client