Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: kQHKCznLUvdEVD/Db/LJvihohYp0IKHSHsnN8VhD1c8=
Subject key identifier: 9D:5C:30:44:C5:66:B7:4D:C9:67:D6:E2:3E:05:9B:57:37:AE:21:ED
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 0196BD80C75C603948D28106309FB4CE972F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0C39
Signing time: Sun 11 May 2025 04:00:55 +0000
Manifest this update: Sun 11 May 2025 04:00:55 +0000
Manifest next update: Mon 12 May 2025 04:00:55 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: tUnsyhbHNf3XykMih3eL3/2GsnEZs8Ixzz131G6BmhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:c7:5c:60:39:48:d2:81:06:30:9f:b4:ce:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: May 11 04:00:55 2025 GMT
Not After : May 12 04:00:55 2025 GMT
Subject: CN=9d5c3044c566b74dc967d6e23e059b5737ae21ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:b9:a6:51:28:ad:54:41:a3:25:c3:0b:1c:
1d:af:af:4f:5d:39:fe:d1:77:0c:bf:1c:4b:47:d9:
85:d5:a0:67:34:3b:8f:bb:c2:ec:e2:27:69:a7:e0:
e0:21:1f:d8:d4:48:1a:08:75:5c:85:46:3e:8c:28:
cf:dc:09:87:59:44:36:5d:63:60:1e:e2:f0:85:af:
87:f8:2d:94:73:80:f6:a6:e5:0c:ac:fc:ae:92:8d:
ba:a3:7a:3e:66:ff:ae:c2:39:a5:96:7c:6b:55:62:
d9:41:b2:07:8f:04:cc:0a:75:be:a9:1d:15:13:b6:
79:9a:57:e5:71:ae:4c:c4:63:7c:a8:f1:83:65:22:
88:e6:59:0f:1e:4e:29:f6:52:b7:34:b3:23:c7:e7:
b8:df:69:d5:89:01:5b:90:d2:2b:e9:09:bc:ec:30:
e3:8d:a2:41:94:e3:49:67:ae:55:08:12:db:ba:de:
e2:d3:94:ac:f9:da:39:38:3b:d6:62:81:e1:27:03:
13:66:f7:56:85:4e:60:d9:b7:b0:2b:c3:bf:9f:a0:
fc:3c:47:31:c4:7c:af:a8:db:08:31:f7:45:63:b9:
97:d2:00:77:af:51:31:8f:7d:59:57:65:f1:58:40:
a5:fe:fe:ec:c7:77:70:32:8c:f9:fe:5b:2f:1c:db:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5C:30:44:C5:66:B7:4D:C9:67:D6:E2:3E:05:9B:57:37:AE:21:ED
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bc:ed:05:22:e2:d1:ed:72:4b:17:e3:cd:a9:ef:20:ac:06:
28:25:a6:c8:71:0e:ef:4c:82:1e:b5:46:a9:fb:6a:41:38:80:
9a:b4:42:29:ff:35:0e:80:46:ac:0f:f9:e3:d0:84:db:7c:46:
e9:44:3d:4f:7f:9e:20:74:3e:45:c1:b8:5c:71:9c:32:d1:de:
c6:98:e7:61:dd:20:58:c2:cd:0d:c3:78:f7:e4:0e:9b:fe:f7:
f9:06:21:bc:7f:16:33:74:6f:0f:7d:88:d5:98:ac:83:da:7c:
ac:78:ec:12:68:e4:bf:3a:0b:28:fc:c1:ff:50:11:c1:cc:78:
f7:84:c2:86:c4:d6:99:ae:c1:8d:04:84:0e:36:74:2c:37:b8:
53:0c:a6:f4:bd:fa:34:1f:91:9f:c5:85:d9:fd:28:a1:cb:83:
92:39:a5:a9:e1:a4:29:85:af:64:7a:44:e6:a7:f7:18:9a:ac:
0d:71:08:d4:5c:b8:e3:db:8f:80:c9:1c:83:f5:bf:42:56:02:
27:bd:8a:59:9f:3c:f1:ef:ca:ae:fd:80:70:b1:24:15:5a:b8:
e6:40:35:4b:d6:1c:c8:7c:d9:cf:c6:93:48:09:6d:3e:f4:6a:
6f:79:09:9f:ae:6d:46:c4:ae:92:7a:78:b2:46:1c:7f:47:8e:
20:49:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:34:30 2025 by rpki-client