Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: jzCbqjH9q22V5YGNiKZ+7mzHfy55EpbcTY3ZEwWd3S8=
Subject key identifier: 8E:54:1F:50:FC:6F:41:34:4B:C4:D7:92:BD:5A:25:32:D0:59:1B:F2
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 0196B634ED0D82377A36E9D733762068F48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 0442
Signing time: Fri 09 May 2025 18:00:43 +0000
Manifest this update: Fri 09 May 2025 18:00:43 +0000
Manifest next update: Sat 10 May 2025 18:00:43 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: siOS39ehyP8S87snYJ9Wi4nnNGswRCpKmYJpddaPtys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:ed:0d:82:37:7a:36:e9:d7:33:76:20:68:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: May 9 18:00:43 2025 GMT
Not After : May 10 18:00:43 2025 GMT
Subject: CN=8e541f50fc6f41344bc4d792bd5a2532d0591bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:93:a3:2c:aa:e1:14:69:5f:72:eb:c7:df:
5b:75:39:ef:03:62:c8:61:12:07:60:53:c9:33:76:
e7:0e:21:c0:ba:11:19:10:7a:30:1f:9f:b4:91:40:
02:22:5c:76:a1:3f:da:91:4d:b4:a2:13:09:dd:a6:
a1:67:87:0d:05:5c:45:c6:6e:67:dd:04:dc:49:76:
82:63:d4:b8:25:26:5c:f5:59:f0:2f:04:62:7c:bc:
b5:75:0f:32:26:e4:d1:c9:39:a2:a5:ea:4b:38:fe:
c2:0e:8f:05:23:b6:71:0d:92:d9:2b:6c:f9:32:c9:
68:19:91:7f:52:eb:34:dd:93:c8:10:c7:50:89:e5:
ce:25:8e:e9:3e:ed:90:a6:c7:85:2f:d8:73:4c:2e:
ea:73:09:8e:ac:c9:51:5b:4d:75:af:cb:79:d1:24:
95:a2:1b:0e:ec:2b:93:21:79:d8:3a:58:df:d1:2b:
98:f3:f6:dc:23:38:5e:da:4b:cb:fb:82:8c:d5:b7:
86:d0:17:98:e3:76:9a:ed:41:1f:28:fe:92:98:36:
30:fa:90:67:79:61:07:b4:b3:47:cd:29:32:c2:fa:
86:64:c3:df:e1:ca:b8:12:8e:1d:11:86:a0:67:ce:
c0:7d:de:69:d9:fe:08:2b:22:67:b0:eb:3c:de:9c:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:54:1F:50:FC:6F:41:34:4B:C4:D7:92:BD:5A:25:32:D0:59:1B:F2
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:84:09:76:fd:a1:bf:9f:b2:9b:97:f4:1a:b5:fa:b7:be:
3d:73:a6:83:41:a6:eb:a5:65:15:23:4e:c3:9d:36:8d:52:bd:
9b:23:ac:ba:d3:27:ba:c7:7f:d8:28:46:a4:c2:25:74:7c:9a:
c1:4a:fc:8b:28:80:2d:6a:97:09:26:62:31:64:ce:fb:3b:d5:
f3:b5:82:23:03:42:2f:0e:62:c3:4a:20:ff:76:fa:07:bf:ab:
c4:90:ef:e9:99:55:14:d2:86:08:71:ae:f3:87:bf:9c:4c:7e:
dc:1e:0f:63:06:53:be:ac:c4:ec:9d:c9:e0:d3:d0:34:77:08:
39:7a:c2:3e:46:2d:82:e0:6f:d5:3c:17:bd:cb:4d:57:2f:84:
e4:c5:0e:7d:62:40:28:10:d5:5c:ea:9e:39:76:23:81:36:86:
99:9b:e5:6b:17:9e:85:4e:c1:04:42:3d:e5:fc:94:d8:88:eb:
c9:d3:28:30:04:40:25:76:40:04:12:3d:c7:56:be:a9:fa:b2:
21:7d:4d:a0:0c:53:c2:31:21:63:a1:40:35:9e:b4:97:a8:53:
8d:7b:1a:94:6d:40:31:7f:8d:d2:63:8c:b4:51:99:25:cd:e9:
e9:86:0d:77:36:f1:d1:c4:fa:92:19:57:d9:3a:7d:2f:94:a1:
81:37:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:39:59 2025 by rpki-client