Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: h28IAnKDQgDXoH6pNW2dtT0ZlwuM8PdAptby9gFyTIc=
Subject key identifier: 69:62:00:64:62:9D:91:46:B1:9B:FE:E8:01:FD:5A:D6:82:42:BE:00
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 0196BEC9F302CEAA0FEE48E42AD4C4D6F399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0BED
Signing time: Sun 11 May 2025 10:00:28 +0000
Manifest this update: Sun 11 May 2025 10:00:28 +0000
Manifest next update: Mon 12 May 2025 10:00:28 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: MOFTo0+I3S7VTt1EAeaba0UeBs7DZpwSuxUvdCK1i0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:f3:02:ce:aa:0f:ee:48:e4:2a:d4:c4:d6:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: May 11 10:00:28 2025 GMT
Not After : May 12 10:00:28 2025 GMT
Subject: CN=69620064629d9146b19bfee801fd5ad68242be00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:43:48:35:0b:f3:e0:de:69:55:a3:59:b0:
84:43:56:2f:34:e8:0f:06:0b:b5:92:bc:35:03:5b:
74:9e:2f:fc:f5:d3:15:11:e4:a5:1f:fa:96:53:2d:
2b:0b:96:af:75:e2:f3:9d:82:ac:f5:62:3d:07:eb:
1f:be:bd:d5:9b:68:e9:b8:dd:e3:1a:11:3a:bf:e5:
39:13:68:ca:04:fc:9f:13:b2:86:71:08:b9:eb:72:
3a:c9:c4:24:ca:b7:e6:7a:7e:56:ae:ba:3b:ac:2a:
7b:73:3f:f9:25:e6:b8:4e:e6:ea:cb:80:2b:f9:43:
dc:b3:17:e0:a3:65:e5:a1:25:85:78:25:e0:f6:b1:
eb:f3:86:af:a3:26:b2:d7:9e:0c:18:93:4f:48:99:
20:21:72:90:aa:c0:18:97:f7:f5:16:fe:6c:c2:c6:
9c:70:05:9c:4c:52:85:94:47:29:ef:3c:4d:fe:bb:
af:10:4d:5d:71:5f:b4:be:77:4b:d8:52:a5:8a:30:
13:39:55:ca:a8:60:7b:c4:58:3a:4a:ce:dc:9d:c3:
23:ae:70:54:90:c1:03:4b:18:01:32:a1:02:75:58:
a7:af:4d:20:af:46:39:df:15:0a:b4:e1:0a:ae:57:
68:7f:2c:70:c3:e3:6c:23:0a:72:b0:05:e9:5e:aa:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:00:64:62:9D:91:46:B1:9B:FE:E8:01:FD:5A:D6:82:42:BE:00
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0c:34:1e:b3:e7:f2:cc:72:6a:5a:51:e0:cb:7c:67:ef:2e:
d5:be:a4:e0:d6:8a:ad:22:4d:0e:49:de:1c:19:5d:a5:94:6b:
42:74:33:e1:1b:e7:82:c2:8d:5a:9c:7e:0f:c4:b5:8e:60:4b:
ed:d6:0c:2f:f2:90:0a:6e:09:48:12:ed:a6:bd:93:8b:34:a7:
fa:09:94:4a:d3:c6:99:88:48:d3:18:ad:b9:9b:c2:a0:9e:1c:
59:44:e0:7e:5f:37:7c:32:18:fd:4f:74:e1:b5:f7:c0:0d:79:
21:27:cb:39:08:8b:0a:37:d6:77:4d:34:e8:8e:b0:5d:c7:bf:
5b:3f:3b:54:73:52:66:c5:68:df:de:2b:ff:1e:08:04:6f:72:
f2:e8:b2:e6:bf:1f:27:aa:40:98:c4:fa:fb:a6:f4:16:27:68:
7f:28:df:9e:c7:f0:d8:bd:2b:83:70:88:92:19:0b:de:eb:9a:
c7:ee:33:66:fd:f3:4b:c4:ea:ba:d0:70:76:b4:9a:b7:2d:09:
78:8e:1d:00:dd:72:c9:71:ba:94:80:ae:73:bd:60:48:4f:30:
23:65:2a:05:18:05:72:5d:9c:b8:17:95:51:5d:0f:9a:1b:32:
e3:74:67:a3:dd:db:33:14:6d:87:75:af:b2:04:8f:75:2c:02:
64:5d:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:04:42 2025 by rpki-client