Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: 07IPf1kW5G5q32MomXpMXffd9ViQ171tWgALTitcNQ0=
Subject key identifier: 05:72:8C:B8:B5:51:5B:74:E2:D0:BF:D7:F5:56:CA:4A:13:E3:A3:1C
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 0196A164166CFF63692FB77193A8E04E4E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 098F
Signing time: Mon 05 May 2025 17:00:13 +0000
Manifest this update: Mon 05 May 2025 17:00:13 +0000
Manifest next update: Tue 06 May 2025 17:00:13 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: nxVV9Y32XT6c9afXCRhDYHgTsqtKy84VWEpX8bFBQd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:16:6c:ff:63:69:2f:b7:71:93:a8:e0:4e:4e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: May 5 17:00:13 2025 GMT
Not After : May 6 17:00:13 2025 GMT
Subject: CN=05728cb8b5515b74e2d0bfd7f556ca4a13e3a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:a5:38:5b:8d:9c:10:b9:fb:4c:b6:fd:7e:
f6:f8:55:a6:84:99:ad:81:b5:5c:f6:45:52:2d:b7:
f2:ae:43:e3:3b:d4:86:10:d4:49:65:b7:3d:35:df:
20:f9:4f:17:7e:34:44:15:27:28:d4:2a:29:50:f1:
5c:6c:d7:68:3f:ef:67:97:32:e0:a0:8e:0b:f7:7e:
42:5d:4a:ff:26:3f:d0:96:69:90:a1:e0:f3:fd:f1:
9a:38:eb:ad:49:a0:55:26:47:f7:0d:0c:69:b6:92:
ce:a6:fb:04:4d:fd:2a:ab:3a:43:ce:ac:17:cb:41:
ee:d2:d5:c6:fa:79:4f:cb:bd:bf:58:89:ee:b9:be:
77:6a:84:ae:97:0f:d1:36:01:6d:08:6f:85:05:ff:
c1:e8:f2:1b:b1:b9:78:5c:d6:9d:4d:6f:b9:34:0d:
e5:b3:25:fc:ea:e0:90:f2:d7:06:62:a7:fd:80:9b:
fe:4e:d6:cb:29:f8:0e:de:ad:7c:bc:44:19:0f:e9:
cf:fd:89:93:39:b7:44:d9:8c:83:23:97:2f:ed:34:
51:c9:cf:b8:15:51:da:1d:04:9f:9b:4e:fe:53:13:
eb:18:29:b2:dd:0d:d5:3b:7a:e8:47:ab:32:41:e2:
df:6c:85:fa:18:a2:27:af:7e:44:88:c3:b7:bf:9e:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:72:8C:B8:B5:51:5B:74:E2:D0:BF:D7:F5:56:CA:4A:13:E3:A3:1C
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:65:f3:61:db:f3:58:52:9c:8d:a4:c4:24:ef:fb:38:e4:
8b:dc:33:80:2e:15:54:a1:b9:76:f3:08:e7:c3:84:53:50:97:
21:02:a8:b4:89:aa:92:bc:bb:48:b6:5a:97:61:8d:40:e3:e6:
cf:3d:ac:e9:9b:de:e7:3f:bb:72:88:4c:49:8d:fe:cb:d8:ec:
de:9e:af:50:bb:2d:3f:6c:c3:bf:52:65:98:18:bb:9a:e7:22:
0f:fb:2f:ac:29:35:4f:95:ba:85:4b:a9:bc:11:4f:24:af:46:
1a:68:03:d5:3d:d2:4f:5a:50:f7:96:9f:79:ae:d6:ce:ca:92:
d9:d6:00:b9:90:60:45:3d:7d:b3:35:ed:71:95:ec:44:ac:2d:
72:7a:d9:9d:0a:a9:47:2e:2d:4e:06:24:02:f0:bc:8d:6e:9c:
53:df:7b:d5:7d:83:27:58:4a:ca:56:d6:c9:e8:fa:97:c4:4a:
92:5a:f6:86:9e:8d:63:5c:b9:f1:16:93:be:a0:71:68:37:6d:
d0:18:dd:ae:64:c8:ce:4f:12:43:b2:52:77:3a:60:b4:38:55:
e2:f0:0e:8c:5e:41:c4:bb:9a:31:ba:5b:9d:c3:ad:d0:c7:74:
ae:cb:b2:db:95:e6:ff:06:6c:41:4c:d1:fb:e0:f3:b1:f0:c3:
48:32:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:48:42 2025 by rpki-client