Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: FXYC9NXfpxbtEILEY/Q9lg/Xt2U9npCppwaEG15caKw=
Subject key identifier: 51:28:10:73:CA:6C:C7:B5:F2:84:F1:2D:17:8E:6E:72:71:AC:87:58
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0196BE5C51FCAD266A867A912576C9775214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 08C7
Signing time: Sun 11 May 2025 08:00:43 +0000
Manifest this update: Sun 11 May 2025 08:00:43 +0000
Manifest next update: Mon 12 May 2025 08:00:43 +0000
Files and hashes: 1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: JSyIxRGt6iBXXva4kY1wQGBg0VPFYnDvCTA3W97HhvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:51:fc:ad:26:6a:86:7a:91:25:76:c9:77:52:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: May 11 08:00:43 2025 GMT
Not After : May 12 08:00:43 2025 GMT
Subject: CN=51281073ca6cc7b5f284f12d178e6e7271ac8758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:09:a5:d9:bc:d0:29:51:ec:2f:66:e9:17:
96:10:c4:27:fb:b0:c8:be:06:9b:7c:05:c5:17:95:
d0:49:90:5f:bc:d1:f7:2c:43:cf:fa:5f:f8:3a:0f:
6f:60:b6:99:29:ea:84:aa:40:44:0a:7a:90:c9:ff:
f1:50:db:66:4c:c4:99:48:d6:4a:7b:2a:13:05:be:
74:74:84:f9:d8:59:53:ed:66:91:c8:0d:80:f0:be:
f8:02:93:ba:b6:df:25:20:72:1d:16:4a:e4:e3:62:
d7:47:9e:1d:b6:75:4e:ea:96:2e:db:83:84:77:68:
a6:de:03:f4:e8:8e:36:e6:48:13:fe:86:0d:a9:b3:
e8:f6:17:d4:dc:39:d1:ce:62:8e:a9:d0:90:1b:aa:
20:36:3b:12:95:89:6f:5a:27:e0:83:45:df:4a:1a:
20:3c:1d:7a:bd:49:1f:4e:78:3b:11:22:54:2c:92:
fc:dd:bc:4a:58:fe:87:0a:32:55:f9:f1:d5:cc:5b:
c1:ee:f9:a7:c1:37:ec:d2:f5:e3:df:cf:36:a6:68:
d9:71:69:7b:78:22:ff:0b:ef:d9:ee:58:83:05:45:
21:07:fd:48:ec:a6:7f:74:06:b7:e4:7c:62:8b:61:
56:ba:8c:2f:9b:3d:aa:9a:2e:6f:2a:29:50:d0:7e:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:10:73:CA:6C:C7:B5:F2:84:F1:2D:17:8E:6E:72:71:AC:87:58
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:63:11:6d:a8:ba:e0:fa:fd:bd:38:6b:e7:bb:46:d4:ee:ba:
12:02:89:ae:71:65:d6:20:c6:03:f0:4a:26:85:a1:61:82:a7:
d7:60:65:6b:73:d2:b6:f0:9a:2e:80:00:92:de:99:ce:9d:96:
ab:80:f3:16:ef:8e:fa:2a:20:6a:a1:9b:25:c5:2c:b5:c8:e6:
26:fa:8c:b3:46:b2:b3:64:2e:d1:53:6e:5a:05:7c:80:eb:32:
c0:f6:87:a3:17:f5:06:a2:b9:11:12:3d:43:2a:02:ac:2f:7c:
33:93:88:01:b4:a6:49:e5:25:f7:5b:25:04:c5:7d:5f:15:f2:
73:c9:d1:f4:e9:a7:22:f1:cc:65:20:f7:d0:24:97:73:e3:7b:
21:00:fa:73:85:3e:36:a3:3e:aa:4b:0b:d1:7a:46:df:fa:9a:
1e:3b:3b:0a:90:0e:22:9d:99:44:35:f8:ed:62:53:aa:bb:f5:
d9:50:25:5a:d8:76:fd:af:6f:91:08:8e:2b:77:4f:8b:28:0e:
0c:ee:fe:96:59:51:eb:38:ca:9f:82:ec:44:27:7b:e7:24:e7:
81:96:a3:a2:38:73:0f:e2:9b:fb:99:6e:ec:30:ce:6e:30:0b:
31:ca:bc:61:77:7c:d9:f7:b3:a6:2c:20:f9:cc:36:bc:e9:b7:
20:c7:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:02:35 2025 by rpki-client