Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
File: CyKQB_XS3fo_clwPpFLEe22dhU4.mft (raw, json)
Hash identifier: TFFoulBbPT+Bu98VAYv7C/e32rGb6XXpY6B8w065rWA=
Subject key identifier: 13:31:51:C7:69:0F:06:B1:94:58:A6:4F:C8:42:50:AC:31:06:5F:9E
Authority key identifier: 0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
Certificate issuer: /CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Certificate serial: 0196A465C9C3B483F986C6694D48794AE61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
Manifest number: 066D
Signing time: Tue 06 May 2025 07:00:56 +0000
Manifest this update: Tue 06 May 2025 07:00:56 +0000
Manifest next update: Wed 07 May 2025 07:00:56 +0000
Files and hashes: 1: CyKQB_XS3fo_clwPpFLEe22dhU4.crl (hash: fSzFJ+X5/Yq+t2u1EmhhOtpkPLg0AocGl0f73CNpxgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:c9:c3:b4:83:f9:86:c6:69:4d:48:79:4a:e6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Validity
Not Before: May 6 07:00:56 2025 GMT
Not After : May 7 07:00:56 2025 GMT
Subject: CN=133151c7690f06b19458a64fc84250ac31065f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:ce:c6:c7:2a:29:a4:92:07:03:aa:c4:65:
7f:9e:48:9c:47:d3:05:5d:d1:22:22:1e:6f:11:59:
73:13:14:e6:5c:41:79:23:0c:04:76:ce:00:8a:ab:
04:a7:d3:f0:e2:e8:0b:fb:e3:67:0c:aa:3d:2b:fe:
e9:b9:73:39:d5:ba:1f:7a:0b:fe:3d:5b:48:91:b5:
aa:ac:0e:35:99:66:4f:52:7b:69:6b:63:2d:42:86:
f7:13:1a:e5:30:24:23:a6:1c:c6:2d:75:63:07:66:
7d:74:5e:1f:79:53:bd:a5:79:02:0d:c5:19:85:88:
21:c9:8a:1a:85:1c:59:0b:d9:ae:00:14:05:83:01:
1e:30:63:fd:0d:ef:0f:e8:28:06:17:fa:ca:4a:cc:
cf:ce:b1:ae:ef:0d:58:ec:f9:4b:f4:b4:be:bc:ff:
39:78:fb:85:35:93:27:50:e4:ab:4a:a2:29:6d:d1:
54:39:4e:bd:bb:ff:4b:ca:0a:b3:69:be:13:af:b7:
03:8a:cd:49:88:83:a5:87:b6:80:00:cf:fc:51:d1:
9a:9d:fc:d6:40:4d:e2:fa:35:0d:e9:01:17:47:8b:
16:73:25:d9:9f:39:71:b3:83:bf:4d:18:2d:56:ec:
b9:a8:56:3a:92:16:1e:86:2f:9f:1d:ac:98:8e:7f:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:31:51:C7:69:0F:06:B1:94:58:A6:4F:C8:42:50:AC:31:06:5F:9E
X509v3 Authority Key Identifier:
keyid:0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:70:dd:e6:cd:d1:ce:d4:96:8b:41:a8:6b:3a:28:1c:7b:4b:
5d:99:26:ad:b0:08:2d:3b:5b:76:c0:11:c6:db:b1:45:49:ad:
c1:94:67:d1:e3:80:01:6a:9b:68:65:0d:80:31:53:0a:df:6a:
cb:70:4e:ba:f2:b3:13:61:8d:26:23:0e:b1:a6:7f:3b:6f:45:
55:0e:1a:81:30:35:a5:6a:34:6d:b9:f3:de:a8:f6:05:78:2b:
5e:e5:69:c9:7d:0c:04:90:d4:2f:83:0b:04:6f:d5:67:56:1c:
ef:df:e3:47:b7:17:d6:74:ee:33:e2:10:be:ba:1e:16:e6:25:
b6:05:3d:e2:05:7e:c0:82:80:c4:48:b1:9b:1a:69:f6:cc:a4:
57:73:3f:00:33:65:d6:d2:72:80:36:54:54:78:33:c0:cd:8a:
2b:61:25:ae:98:7a:bd:bf:8e:cc:b5:ab:4e:ac:05:60:34:f3:
b4:e8:ab:3a:e2:43:9d:e9:79:e1:da:5a:cf:6f:a9:17:25:77:
90:2e:97:fa:bb:79:f4:57:c6:b1:31:b2:3f:be:5b:30:01:f2:
b0:43:cd:21:81:2e:29:39:96:00:76:f8:10:6b:85:a3:41:ba:
ad:82:33:a2:ef:83:26:b6:49:21:7f:a7:61:69:cf:6d:44:4d:
ac:e1:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:25:59 2025 by rpki-client