Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: xnFOcpI23wBMCRW4Kkk4Uh/JYt/4old6SXKehuRK828=
Subject key identifier: 2B:B6:64:84:92:3C:42:20:30:CD:86:2E:18:A5:72:C6:EB:E2:BB:C8
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 0196C34BCF2BA13918BACED9DB912DB1DBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0866
Signing time: Mon 12 May 2025 07:00:47 +0000
Manifest this update: Mon 12 May 2025 07:00:47 +0000
Manifest next update: Tue 13 May 2025 07:00:47 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: yKrBc7rnCOqALAMc2iyvKGNocbQ0U13BzSHEAbj9sPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:cf:2b:a1:39:18:ba:ce:d9:db:91:2d:b1:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: May 12 07:00:47 2025 GMT
Not After : May 13 07:00:47 2025 GMT
Subject: CN=2bb66484923c422030cd862e18a572c6ebe2bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:ed:9b:a1:3a:76:1e:97:b3:0e:8f:63:e8:
7f:8b:85:57:97:27:07:3a:14:64:7f:ec:e2:f0:48:
9c:b6:2b:75:b2:17:49:54:0b:52:00:38:a6:3b:5a:
ce:f5:c8:18:f0:3c:cb:99:c8:10:fa:51:a6:9c:3f:
c8:9e:13:2e:29:ad:e7:3f:64:d2:ec:9a:f5:56:71:
8a:36:16:eb:7a:5b:99:8d:a9:96:2d:44:47:c8:9e:
4a:fd:99:ce:f3:b2:12:2b:56:42:f3:95:10:cc:01:
e3:30:98:5f:80:ab:12:13:6e:24:a4:1f:bb:b4:bc:
fe:1d:ce:96:e6:e1:8c:f1:ca:d9:77:67:30:17:b3:
d9:2a:f2:a1:2c:90:6e:ac:94:c6:96:ed:2c:b5:ea:
fb:cc:b3:e6:03:36:1c:94:70:e6:fe:35:99:3c:e8:
6a:73:b8:f1:98:cd:d1:3a:11:90:ef:5e:6c:b0:88:
8a:8d:9f:f7:03:53:c2:b4:30:6e:61:ec:7e:c8:08:
04:e1:ad:4c:d2:d3:1f:0e:6d:c4:31:80:a3:e5:cb:
19:fa:9f:d7:be:d7:cb:ee:e1:10:ba:18:7c:0a:b0:
e3:54:19:60:3b:7b:e8:4b:41:a5:e2:2a:5c:23:e5:
84:cb:6e:43:56:21:50:fc:6e:9b:21:bc:a0:8c:48:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:64:84:92:3C:42:20:30:CD:86:2E:18:A5:72:C6:EB:E2:BB:C8
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:4c:29:d3:20:cd:3c:e0:a5:33:a1:5e:3c:16:3b:5e:49:
79:9b:d4:b5:29:df:43:d7:41:6b:05:0c:3e:ca:05:c7:4e:02:
35:fb:cc:f1:aa:c2:ef:68:35:8d:0c:92:f3:96:5f:23:60:76:
b7:7c:48:12:97:43:7f:37:c8:35:5f:3d:d0:1c:34:a4:e3:a4:
e0:f6:af:39:2a:be:0f:1b:cb:ae:10:22:29:a8:f6:7a:9d:27:
dc:d7:29:45:d5:70:c9:12:eb:d4:7b:c9:66:52:c4:98:c0:bf:
e6:69:60:d3:59:44:5b:86:bf:69:47:63:a5:e6:ec:53:90:36:
e4:e2:8b:34:70:16:e3:52:f5:63:d0:97:29:99:88:f3:4a:89:
b9:bd:76:6a:c0:b5:97:90:55:f0:b0:68:b2:47:e1:59:1a:b1:
85:14:b7:b8:dd:cc:e3:44:c1:8d:f0:71:21:06:41:77:59:1b:
4c:37:2d:19:ab:2d:f0:95:83:dd:02:36:b1:3a:cf:e1:8f:d4:
9f:ad:7d:ef:2c:f4:b7:c1:ee:6a:71:42:de:bb:3b:0b:c4:0a:
8d:4d:45:8b:a8:b0:fe:87:09:2c:47:39:c7:07:7a:bc:47:b1:
75:1a:86:20:34:06:0b:02:a4:65:62:34:02:2c:e9:13:89:0f:
45:56:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:43:23 2025 by rpki-client