Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
File: Yv8lPFoTQ6JWma4I51dnrya52-U.mft (raw, json)
Hash identifier: Miilh/ZoAN0xAz+9MHMyNr96aL5jI6DAnOcsUSeWYXQ=
Subject key identifier: A4:A9:5D:F7:69:B3:4E:9C:F9:CE:B5:A2:9B:33:04:E3:20:AA:1A:E2
Authority key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Certificate issuer: /CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Certificate serial: 0196A5AF95A9BC09E205C5F80EBD63B95DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
Manifest number: 14B7
Signing time: Tue 06 May 2025 13:01:09 +0000
Manifest this update: Tue 06 May 2025 13:01:09 +0000
Manifest next update: Wed 07 May 2025 13:01:09 +0000
Files and hashes: 1: Yv8lPFoTQ6JWma4I51dnrya52-U.crl (hash: z/aGTE5vErwxrFO+4jlL+FKgkQdaVovvzkMihDyRoJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:95:a9:bc:09:e2:05:c5:f8:0e:bd:63:b9:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Validity
Not Before: May 6 13:01:09 2025 GMT
Not After : May 7 13:01:09 2025 GMT
Subject: CN=a4a95df769b34e9cf9ceb5a29b3304e320aa1ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:d3:c5:73:0b:37:44:9e:45:00:ee:57:28:
25:c3:9f:e7:4e:55:a3:66:0c:93:ad:58:5f:98:f2:
03:db:14:7b:01:ab:0d:64:61:7e:3a:23:2e:41:c4:
b5:6a:f0:ad:b8:47:32:aa:c6:68:f6:26:f1:ea:20:
23:d7:4a:c4:7e:30:ca:55:fd:38:e0:60:aa:da:ee:
d9:e1:91:12:4b:d8:c1:2d:56:cf:52:c3:92:be:9c:
04:1c:5e:84:c8:ca:ca:09:ef:bd:17:f8:44:1c:68:
0a:04:98:b9:9c:87:25:be:dc:b0:d8:99:be:e6:81:
1c:47:ab:22:c4:de:24:2b:d0:12:eb:53:7e:dc:87:
ea:46:c2:74:cb:87:5f:03:10:b4:8e:9a:31:6c:14:
47:10:a8:73:c8:8e:2c:68:d5:17:9c:f9:03:7c:b0:
96:69:35:e8:71:ec:e8:f6:6f:91:8d:3f:c4:c0:42:
7c:7f:e0:2f:fc:88:85:fd:3b:d1:73:83:ff:38:2c:
b3:55:83:42:7a:0b:d2:70:63:55:bf:51:68:3d:1a:
b2:47:53:66:01:72:da:8d:cb:c8:65:e3:3a:8c:6d:
45:4e:8d:07:13:97:aa:bb:5e:b0:67:12:da:65:e2:
28:02:cc:1a:29:00:74:b1:f0:46:59:88:bb:74:95:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:5D:F7:69:B3:4E:9C:F9:CE:B5:A2:9B:33:04:E3:20:AA:1A:E2
X509v3 Authority Key Identifier:
keyid:62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:df:fc:79:35:99:90:7c:92:2c:c2:08:47:50:77:b4:83:de:
a6:43:eb:89:90:c5:d7:1a:7b:39:87:4c:db:81:ad:eb:cb:70:
5e:0e:5e:47:36:4e:c1:b3:8b:c4:96:b5:76:2a:29:5e:8f:fb:
bb:6b:0c:d7:2d:2e:ce:0a:4b:c3:22:23:6e:ef:e6:2a:ce:bf:
c7:c3:8f:13:4a:f7:63:e8:5e:20:92:79:73:f4:98:12:92:06:
c8:b7:ef:e3:6e:63:64:21:72:88:b8:17:6a:9c:13:5a:38:f8:
d7:b3:7c:a6:4b:03:eb:bc:2f:56:87:ce:f9:e3:a4:aa:fd:80:
1e:5d:cb:c4:5c:7b:7f:fb:bd:8c:c0:15:0d:bf:09:16:2d:a3:
7a:2b:fb:d8:9b:dc:36:5d:3c:9d:1a:cc:a3:13:79:49:66:4f:
33:79:1f:80:7b:70:5f:e7:9e:13:6b:06:64:67:c8:7d:a1:dd:
3c:84:ce:4b:55:8e:16:d6:20:8b:9b:d3:42:03:02:10:c2:6b:
b7:b0:0e:cf:dd:09:2c:2b:09:6a:df:17:22:8d:96:90:13:f7:
6a:58:f1:d9:e1:29:ca:c1:02:46:74:9b:25:b5:b4:54:59:82:
27:a3:46:e5:82:bb:f6:7e:85:0d:12:f2:9a:ff:a4:38:a4:c6:
42:a2:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:26:19 2025 by rpki-client