Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: 9gVDXQWACW23mQU9t13qxQ4Q/OzilqVAGSGCMcxOTWM=
Subject key identifier: 5C:B8:4E:CA:6A:C7:FD:99:63:CA:84:EB:D7:F5:98:0A:80:9F:A9:43
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 0196B7B65E9C393E7E3684F60170900517E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 152D
Signing time: Sat 10 May 2025 01:01:44 +0000
Manifest this update: Sat 10 May 2025 01:01:44 +0000
Manifest next update: Sun 11 May 2025 01:01:44 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: Sgrtnl3j6SOvtSyTkO+AKOGsYL92q8r5Ers6ddT4E98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:5e:9c:39:3e:7e:36:84:f6:01:70:90:05:17:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: May 10 01:01:44 2025 GMT
Not After : May 11 01:01:44 2025 GMT
Subject: CN=5cb84eca6ac7fd9963ca84ebd7f5980a809fa943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:5c:a3:2d:de:e3:86:60:48:13:bb:57:35:
8a:4b:84:ab:33:82:63:fb:d6:01:9e:b7:48:df:01:
e7:e7:a2:2f:fb:52:c6:c6:b7:d6:a9:e6:9b:94:f0:
11:c7:f8:80:84:93:de:aa:6b:ea:a4:70:dc:cb:60:
fc:56:c8:e1:c0:b0:8e:d7:cc:a8:c8:12:5a:44:98:
69:65:c5:54:3d:a1:00:6f:96:74:9c:48:6e:53:f2:
b4:4d:75:ff:24:6f:7d:1a:e5:34:06:ff:2d:b3:d9:
3c:96:81:21:6e:c6:b7:1e:e4:46:62:ea:df:1f:e8:
58:05:43:6c:a0:f7:4f:96:bf:45:4c:7e:92:b1:75:
22:48:81:08:95:79:11:fa:ab:69:48:d3:99:a0:97:
12:37:e2:25:00:c6:93:81:7e:64:47:71:3c:83:b3:
f2:a9:17:c2:8f:a6:fd:4d:ba:57:a3:ca:c7:b0:e3:
c8:0c:1e:f0:b0:ea:de:1a:24:60:e2:af:27:8e:37:
f1:e7:31:97:3a:e0:78:04:09:83:91:96:69:4e:4a:
08:cf:2a:61:d3:99:64:2b:08:ea:5a:ae:37:a2:28:
85:fe:63:3a:e9:cf:02:36:43:8f:67:cf:fa:8d:73:
be:b8:14:c6:56:38:33:75:5c:67:74:dc:22:9c:27:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:4E:CA:6A:C7:FD:99:63:CA:84:EB:D7:F5:98:0A:80:9F:A9:43
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ab:3b:a0:59:08:3c:19:e7:f5:ee:53:fa:7a:60:2d:5c:52:
b0:91:84:a4:70:12:a3:7c:09:62:a2:d7:11:23:e9:73:96:27:
58:c1:c6:40:15:26:0f:c2:ef:ca:0c:c5:ee:e5:45:3d:3a:64:
67:e8:77:40:e7:5e:e2:1f:b4:e2:70:70:be:3f:17:f9:c6:67:
c3:18:e3:5c:33:15:5b:6c:1f:e2:9e:ea:1a:cc:01:5d:16:d8:
14:50:59:74:51:c8:4d:80:bd:f8:1a:43:b9:cd:88:36:c4:af:
4b:da:34:49:ac:67:b2:9f:4d:03:e1:48:92:0e:83:3b:d6:72:
f1:34:b0:98:43:eb:dd:49:4b:ee:d7:2a:a6:0f:01:5f:53:39:
55:19:4d:ea:99:3a:9b:c6:63:ed:72:3d:34:7b:0a:6d:f1:c6:
56:d1:85:7f:9e:40:34:f1:29:01:f2:eb:91:77:54:1b:05:e6:
5c:6b:7d:18:f9:16:4a:22:2b:bb:de:7c:5e:90:e8:43:33:2e:
e9:a1:ad:63:61:d3:df:9c:10:2e:5b:4b:77:d8:cb:9c:54:b1:
7a:dc:b1:be:8e:d4:05:fb:77:aa:3f:29:b7:c6:e6:40:55:a9:
0f:f5:5b:7a:00:2d:a9:c0:44:64:10:32:f7:41:fb:17:b0:8e:
38:c8:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:40:14 2025 by rpki-client