Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: 8IOuSYD6vnLJbdEsaR944j7QTsq2SoFSuKM2+8YorzY=
Subject key identifier: DB:0E:06:DB:3C:0C:CE:25:6B:54:FE:7E:3B:FD:44:A5:66:18:DD:E8
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 0196B9A3C71AB410EFFDDCB0971854BA5BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 0CF1
Signing time: Sat 10 May 2025 10:00:40 +0000
Manifest this update: Sat 10 May 2025 10:00:40 +0000
Manifest next update: Sun 11 May 2025 10:00:40 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: ztxx/0ogDie2/s+R2SKfziwmIYrQNu5xuldO9L80B2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:c7:1a:b4:10:ef:fd:dc:b0:97:18:54:ba:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: May 10 10:00:40 2025 GMT
Not After : May 11 10:00:40 2025 GMT
Subject: CN=db0e06db3c0cce256b54fe7e3bfd44a56618dde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:d4:49:af:09:dd:a9:44:cc:2a:ba:34:22:
52:3d:1c:a9:93:70:1f:df:77:29:e4:5e:39:96:a1:
80:bf:f0:74:88:90:8f:15:ce:6b:83:8d:d6:97:9e:
14:8e:b7:8e:0e:94:ee:bf:8d:fd:04:a7:15:16:4e:
c2:f9:07:43:53:83:27:59:4c:33:1d:b8:02:bd:21:
67:55:f6:83:bd:75:d3:fa:05:cf:00:cb:48:2b:01:
19:04:cd:ef:df:e3:e3:a2:c7:f8:24:41:10:6b:8a:
e9:b8:14:79:75:ec:9a:93:e0:63:9c:00:c5:70:5a:
a9:43:5b:6e:3a:62:17:11:6f:12:d0:92:56:a9:97:
f5:73:05:2a:5e:ff:ea:54:51:37:ff:92:44:ea:c2:
a3:b6:0c:93:1d:b9:b0:23:87:ce:64:0c:84:9c:d6:
89:d7:b0:fe:24:30:00:bb:fd:af:81:f3:d8:75:bd:
a2:2d:5e:c8:92:09:17:af:76:ae:1f:0f:53:38:68:
aa:1f:98:3e:39:92:8a:73:b7:26:e9:c0:3d:ae:b0:
3d:d6:a7:50:52:68:ad:ad:22:ea:5d:31:7a:cb:5e:
60:c9:98:25:70:26:56:a1:18:e0:76:ee:9f:6f:c7:
05:ce:d1:1b:6e:ec:ee:fd:15:fa:26:6c:b1:49:7f:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:06:DB:3C:0C:CE:25:6B:54:FE:7E:3B:FD:44:A5:66:18:DD:E8
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:15:68:7d:3d:1e:57:5c:a5:48:59:a3:80:9f:c4:9c:6b:
ce:e7:96:61:7a:14:ba:83:c8:0c:5f:c6:3f:45:6a:81:90:61:
27:22:8c:88:3d:36:bf:69:bd:d0:f6:3c:6d:9d:49:14:63:e3:
35:9b:06:b9:1e:f6:a3:f1:b5:47:a8:fc:f1:ac:ad:10:5d:68:
52:2e:74:7b:85:15:a4:c6:5d:4d:76:35:49:66:8b:04:2d:92:
09:3c:41:17:16:8b:34:a6:5a:37:f9:e0:8f:2d:5a:63:10:11:
52:9d:cb:df:bd:b8:a6:0f:85:26:1c:30:88:cd:43:32:08:88:
ce:62:cc:8d:7b:83:02:89:7f:b0:02:fe:9f:74:5c:96:50:3e:
36:ad:37:d9:b1:62:7f:4f:f7:07:a5:1e:18:83:0e:39:49:03:
cf:80:9a:27:2b:0e:43:74:f4:0e:16:b2:57:5d:54:98:7f:0b:
a1:cc:24:99:7d:c5:23:c6:f3:ee:9b:e3:c9:f0:5a:7a:4f:b4:
74:11:82:48:fc:b2:eb:7e:88:94:14:67:5f:ff:d3:7e:f9:fb:
94:f1:32:b6:a9:de:9d:d1:c5:d9:9e:13:f6:96:12:60:b0:33:
2d:1b:98:a6:3f:66:2e:85:35:5e:d4:9d:aa:6e:f4:38:85:f4:
45:ea:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:12:39 2025 by rpki-client