Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: mMGO2VPVSTdn3GLkhEq3HeRMDsbHCq1zwb7XQZ1b1os=
Subject key identifier: 16:83:C4:4E:FD:FF:5F:73:51:76:34:A4:06:77:20:90:95:0B:84:F2
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 0196B5C7E122B1FF041C0B7DD7FC5FF075DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 08EC
Signing time: Fri 09 May 2025 16:01:37 +0000
Manifest this update: Fri 09 May 2025 16:01:37 +0000
Manifest next update: Sat 10 May 2025 16:01:37 +0000
Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: 5gYq01/u8iXpF4R4V4THajlUjLkU6d1i1sAuULRjSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:e1:22:b1:ff:04:1c:0b:7d:d7:fc:5f:f0:75:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: May 9 16:01:37 2025 GMT
Not After : May 10 16:01:37 2025 GMT
Subject: CN=1683c44efdff5f73517634a406772090950b84f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:67:66:03:51:80:5c:cb:ab:3e:99:dd:ae:
3e:c1:95:d6:91:37:3d:52:8f:fb:10:4c:1b:3e:d2:
3b:97:2c:39:f2:a6:fc:89:d2:76:ed:f2:d5:ad:0f:
95:13:68:cf:5d:24:d0:ea:f4:83:18:a6:4f:96:64:
5a:15:33:37:f1:e6:f6:b4:7f:e5:8a:c6:1b:a9:de:
8f:e7:8d:9e:d9:c5:58:52:90:ae:ba:6b:03:44:6d:
d1:b6:9a:31:df:04:af:1a:55:08:d0:08:a9:de:19:
fc:bb:64:da:0d:54:cf:27:f6:17:88:89:6d:19:df:
15:1d:5e:e2:f7:44:fd:c3:05:66:8e:5c:7b:03:7d:
d1:16:76:ed:0e:b7:87:9f:4c:f9:15:dd:c6:ec:67:
c4:ca:68:4f:27:20:d9:dd:fb:17:9d:8c:bb:ad:61:
e4:9f:61:f1:df:1b:b0:9c:ce:06:6d:8e:20:c2:32:
06:45:32:23:52:13:c3:e0:33:37:bb:d0:c4:2a:e3:
67:e6:f9:16:27:e2:4b:9b:b1:f7:e2:b6:15:46:f7:
ef:d9:23:2e:63:87:63:26:5f:6c:18:5e:20:d2:49:
1f:e7:bf:82:14:2c:48:bd:aa:67:fa:e6:9a:b5:a8:
0c:df:db:e9:a6:a1:f0:6a:9d:97:31:1b:ec:bd:1a:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:C4:4E:FD:FF:5F:73:51:76:34:A4:06:77:20:90:95:0B:84:F2
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:aa:c6:4d:4f:84:36:99:ab:c2:a9:84:d9:91:f6:23:57:
b0:f2:7d:cc:2f:de:52:d9:ff:d7:1f:15:79:02:86:42:84:af:
d9:48:4c:4b:44:39:e8:3a:2d:0e:3c:67:f7:a8:29:9b:0b:26:
5c:35:5d:7a:3b:3b:6b:a3:24:60:b3:aa:77:c4:f9:ab:2f:07:
36:79:b5:f6:6d:a6:fa:62:4c:55:1c:7d:d0:3d:50:fc:e4:2c:
d2:7e:a9:14:c5:43:4f:11:54:6c:af:8b:74:93:cb:b6:77:cb:
52:70:2f:f1:6a:9e:d1:2b:78:ec:71:8f:54:37:0d:07:b3:96:
9a:ac:28:16:73:77:20:84:0a:16:4d:36:08:06:0e:ff:f9:00:
e6:bb:4f:12:42:be:28:f4:40:9d:23:63:74:f6:3b:80:0b:2e:
6c:17:70:38:3b:22:d9:97:e2:de:be:17:bd:cb:36:7b:c4:4a:
59:75:ee:21:0e:06:81:eb:7a:b7:68:f6:22:74:ef:29:64:27:
3e:85:3a:f8:cc:eb:fe:45:2d:d0:ee:25:3b:54:e8:b5:e5:c6:
ea:13:db:ce:89:d4:88:d8:4e:69:36:c5:5f:a3:76:d1:db:5b:
64:bc:46:a5:d6:87:95:5a:80:8c:3d:96:96:93:86:71:69:94:
b7:11:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:19:26 2025 by rpki-client