Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: AcEAGymlz/uaM0P3gHdQxLXxWwHJx0yVEMDWn6h0PjQ=
Subject key identifier: 23:EA:A7:9F:87:79:8F:CE:CD:CA:42:AC:D8:72:C7:0F:08:82:B9:F2
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 0196B3D83504445B44362D726903FC3B148A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 1491
Signing time: Fri 09 May 2025 07:00:12 +0000
Manifest this update: Fri 09 May 2025 07:00:12 +0000
Manifest next update: Sat 10 May 2025 07:00:12 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: Cnre4l0C4phXYh4Q/JbtpX6ll6IVXDp7+xwjDmN4CoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:35:04:44:5b:44:36:2d:72:69:03:fc:3b:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: May 9 07:00:12 2025 GMT
Not After : May 10 07:00:12 2025 GMT
Subject: CN=23eaa79f87798fcecdca42acd872c70f0882b9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:12:58:5b:24:9c:e4:7c:c6:ac:27:81:d8:
37:a8:77:7e:73:3f:03:3b:bd:9f:6f:96:0d:52:18:
56:a1:6b:70:57:b5:67:2b:80:f7:d5:17:ab:7c:71:
d9:e9:d5:ef:89:4f:59:c3:29:ee:c1:8f:d7:75:ce:
90:58:e2:11:9f:a7:09:b9:f0:06:3a:16:26:ef:6c:
73:5e:f1:fe:7c:8b:56:cc:3c:57:cc:0c:eb:5d:13:
0c:d3:ab:2a:e7:d4:05:47:f6:2b:8a:a7:7d:e3:30:
ad:6f:ec:10:a3:5a:21:13:a6:b3:3f:3a:0f:8e:9d:
de:d9:2a:2a:bd:68:f0:c7:5f:28:c1:b1:34:67:5d:
ab:57:9f:80:f0:73:78:4a:1f:f5:3a:b4:45:0d:6b:
8e:b4:b6:17:1b:d6:b6:a9:df:8a:d1:0a:1c:fc:68:
48:a2:27:2c:1e:3f:97:0d:53:90:ad:2f:da:12:58:
69:7b:76:fb:86:fe:7a:e7:2f:5c:61:ce:74:23:d3:
43:a0:2e:1e:5f:56:2e:b0:1b:30:6e:6b:cd:b8:7c:
48:71:36:31:e0:2e:8e:35:eb:95:15:11:8d:9b:dd:
d6:67:8c:22:c7:2f:14:a4:04:df:16:61:be:e8:5b:
a3:67:dd:b4:82:b7:33:5a:50:0b:5b:2c:11:fe:e0:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:A7:9F:87:79:8F:CE:CD:CA:42:AC:D8:72:C7:0F:08:82:B9:F2
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5c:5b:7e:8e:7f:87:25:31:27:b0:c1:eb:c3:8d:0f:ef:b7:
5d:cc:8d:79:95:dc:c5:7f:75:6a:16:75:e0:96:9e:68:35:78:
2c:9f:67:cc:d0:81:31:13:d6:f7:7e:8c:0e:15:28:50:4a:bd:
2d:0c:15:ff:6f:ea:e8:90:e5:43:ed:dc:aa:8c:bd:b6:f8:75:
16:eb:f5:d3:03:5d:c9:95:be:38:c9:af:42:83:7d:2e:c9:ef:
3a:3b:28:4b:1e:e9:1a:46:3e:a2:21:6d:76:f4:8c:68:50:35:
f8:ef:09:cc:5f:2a:a0:44:81:dc:06:e3:2b:bf:30:be:7b:40:
16:40:e8:78:8d:99:a3:1f:1e:f8:02:e2:b3:87:18:c7:1e:3d:
da:2a:fc:a8:a8:65:f2:e4:d8:01:4f:b9:57:cd:56:11:85:0e:
69:1a:65:1a:a3:64:7f:a4:87:1a:8e:ea:1f:ff:01:80:35:4d:
90:4a:0d:eb:08:f3:c7:f5:2d:eb:93:56:8e:ff:aa:52:0b:74:
3b:73:94:d9:81:d7:4c:5a:37:04:23:5f:bb:47:20:e3:fd:38:
17:30:d2:e6:4c:c1:1c:66:e5:1d:02:64:38:c9:a6:2b:2a:02:
55:27:17:84:08:c6:64:16:72:99:d6:1e:05:f1:5f:70:1f:4c:
19:f0:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:21:18 2025 by rpki-client