Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: SMYQbg0idb/Qu8Zw4qqH5lOgIXLgBSYK86xXJbHwCJQ=
Subject key identifier: 4C:AA:EF:04:88:8B:DB:6D:22:DD:57:65:79:ED:CA:62:E1:EF:5B:D7
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 0196C4272F02507413BA6BAFED95C604EEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 11:00:24 +0000
Manifest this update: Mon 12 May 2025 11:00:24 +0000
Manifest next update: Tue 13 May 2025 11:00:24 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: xvcoltKYDw4PV5o3Pv33eCIAYNkOjoYU5wxo9xq6+f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:2f:02:50:74:13:ba:6b:af:ed:95:c6:04:ee:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: May 12 11:00:24 2025 GMT
Not After : May 13 11:00:24 2025 GMT
Subject: CN=4caaef04888bdb6d22dd576579edca62e1ef5bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:8d:91:82:78:f7:99:08:18:6a:d8:be:eb:
35:08:4c:d7:5e:4a:dd:18:c2:21:15:fa:81:6d:5d:
66:48:68:b3:3b:be:52:4e:a6:e8:2d:3e:e3:8b:be:
47:cb:e1:93:85:57:d6:f4:c1:20:35:2a:f8:d1:18:
f7:61:ee:a5:1e:7c:5a:bf:9e:85:96:21:66:ae:c3:
14:cf:ca:21:e6:9e:90:47:4d:af:0b:5a:a8:6f:de:
2b:e3:f9:96:52:71:ce:75:91:b4:01:22:17:92:58:
b5:41:32:51:6b:64:a8:3c:69:23:f9:06:ce:3e:b3:
02:e3:75:17:71:27:3b:af:0c:7f:5c:cd:66:56:2e:
48:5b:c4:af:eb:d5:84:a2:a4:bf:53:e3:4d:0b:de:
87:14:0e:e8:a1:e5:c4:34:5e:4a:6f:e1:75:e5:dd:
22:14:32:8b:d3:14:16:ea:fd:71:c2:f1:6f:1d:fe:
29:5d:b1:a9:28:24:32:a5:49:fd:b9:90:b5:d4:d0:
3d:0a:dd:f9:4c:7b:28:48:17:9b:f1:3d:60:b8:22:
e9:03:1f:10:32:ee:6a:84:cd:1b:7d:84:6b:2f:a2:
97:68:47:b1:bb:b4:57:9a:a0:6f:9e:49:36:1b:ab:
a0:5a:db:5a:0c:7c:17:fa:dd:88:90:13:80:3a:01:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:EF:04:88:8B:DB:6D:22:DD:57:65:79:ED:CA:62:E1:EF:5B:D7
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d1:08:b9:ac:ce:57:34:6d:6a:a8:4b:38:f4:f1:18:6e:ed:
26:77:a3:3a:50:71:c6:aa:d4:cb:6c:ce:6e:25:eb:e8:4a:80:
1f:3f:d3:66:bf:19:e1:37:11:81:e6:dd:fb:6f:d8:80:6a:cb:
98:e6:e7:0b:20:46:0a:77:79:74:e3:66:60:0a:0d:4e:eb:bf:
14:a6:16:14:dc:54:8c:1e:e6:38:46:af:8b:46:05:7d:7f:64:
c1:66:d4:59:f4:10:90:5a:5a:5e:c0:03:82:9c:b5:fe:61:1d:
0d:e5:46:65:8a:8f:5a:33:c1:05:77:e4:87:5d:a7:18:a9:92:
1d:4e:7c:cf:75:20:62:fb:38:f2:46:98:cb:2a:f0:e1:5e:87:
f5:73:9e:0d:a1:dd:f0:f4:e3:35:03:04:20:ce:9e:0d:3b:88:
55:77:8e:e3:2c:b1:e0:3a:cf:6a:51:76:85:6a:24:36:73:33:
2a:b3:c4:ab:b1:50:e2:30:f5:9c:23:53:85:5f:58:8b:31:fa:
72:71:23:93:a6:b4:91:50:40:5d:36:48:84:54:3f:4b:fd:38:
73:72:19:70:77:87:22:59:9b:97:58:38:b7:8c:b6:e0:f5:e5:
b9:a4:d6:ae:7c:9d:86:54:a7:92:4e:d0:6e:94:26:2b:3e:a1:
d2:c3:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:05:44 2025 by rpki-client