Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: gzHcDhldK7XG3l9iLV2RryYFCKUCT4Mi+EMR8lJbu1I=
Subject key identifier: D0:6A:8A:D4:57:1C:1C:F8:08:D2:C2:40:64:C2:4C:25:7C:8C:C5:F3
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 019677FB384BFF29D4DA42354C8F6C5CB597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 0FFD
Signing time: Sun 27 Apr 2025 16:01:14 +0000
Manifest this update: Sun 27 Apr 2025 16:01:14 +0000
Manifest next update: Mon 28 Apr 2025 16:01:14 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: DKoeH8br+8yEzNGCll+q70qkZbP7QjoMNwV6kbTEHw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:38:4b:ff:29:d4:da:42:35:4c:8f:6c:5c:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Apr 27 16:01:14 2025 GMT
Not After : Apr 28 16:01:14 2025 GMT
Subject: CN=d06a8ad4571c1cf808d2c24064c24c257c8cc5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:2e:fb:f1:c1:4d:68:e9:9b:64:f2:1a:94:
91:97:7d:1a:41:ef:39:17:14:88:79:60:3c:bd:64:
1f:58:62:04:5a:85:6f:42:c6:31:a8:50:47:91:d7:
f4:dd:e8:35:96:19:53:bc:2a:60:f9:57:21:2e:bb:
57:3d:26:39:92:02:83:00:19:d5:d6:7c:2c:65:2f:
18:a0:e2:3a:4a:b5:e1:7a:14:42:df:28:4f:ae:e3:
61:e2:63:76:01:cf:04:21:b6:ac:cd:1e:f3:12:b2:
04:d3:6d:81:d0:9e:cd:87:82:6d:be:21:a9:03:eb:
53:89:88:d4:84:2a:0d:dd:18:9b:93:d9:c9:6d:c3:
a4:ef:83:11:af:ac:28:b5:41:01:29:ec:f1:33:6d:
c8:a5:da:d9:71:97:5e:67:97:a0:a1:18:b6:61:2d:
ea:48:e6:22:60:01:95:92:21:03:15:4b:a2:09:f4:
83:64:fd:de:0d:e4:3c:bf:16:1d:d6:6e:93:71:4e:
6c:66:01:d9:64:82:00:6f:46:e6:c7:b4:8a:6d:a4:
55:b2:95:37:8e:9b:d5:bf:dd:41:34:a1:58:88:0b:
9f:16:9b:8f:c8:f1:7a:69:7c:ac:92:1b:89:11:3c:
b3:76:7d:86:8b:52:bf:67:a2:eb:33:6c:07:9f:6b:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:8A:D4:57:1C:1C:F8:08:D2:C2:40:64:C2:4C:25:7C:8C:C5:F3
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:cd:66:c3:87:28:f2:bd:a6:d5:ca:b5:34:0a:a9:0e:1f:
a4:1f:72:3d:e1:76:35:a6:3c:8b:61:06:19:2c:63:c0:89:f4:
15:71:95:ae:57:7e:05:a8:a6:29:ea:f7:d1:43:d8:6e:7a:e1:
ae:35:cc:7c:87:eb:37:b4:5e:4c:91:ba:98:0f:9b:c5:14:35:
c9:cb:3b:2f:ae:42:bd:2b:73:d9:0a:10:fb:c4:d4:e8:0f:bb:
71:72:0c:d9:e8:23:cf:35:24:cb:50:8c:d9:a9:b2:49:81:3f:
97:dc:c2:46:a7:88:37:2e:32:01:63:42:8d:66:01:01:37:5b:
7c:c5:0c:b7:9f:04:68:15:61:b2:89:32:b5:78:b7:2a:d2:78:
bd:f8:e2:e0:5d:1f:66:ce:56:2c:c0:0d:89:5f:e7:ab:2b:f9:
dd:bd:68:20:eb:b4:84:5d:a3:56:5f:f5:01:44:54:16:74:b9:
c9:53:dc:97:40:cf:70:9e:90:c3:b1:36:c5:05:0d:0b:c4:8a:
9f:ae:dc:4d:16:c7:9b:7b:73:51:15:59:48:c5:b1:b9:77:4b:
fc:be:dd:77:b4:b8:1f:89:7a:6b:01:e7:e5:20:fa:70:60:94:
3b:77:37:19:e2:74:76:46:23:02:2c:a9:be:08:5a:a5:0c:bb:
46:33:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:12:40 2025 by rpki-client