Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: BIg/n9JqV0rpwjSMgdE4wysfZfX45WsELpPh4ZS9qFU=
Subject key identifier: 90:87:8F:10:F0:74:AF:87:51:91:F7:02:0C:47:AB:EB:62:29:6F:E4
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 019685ED648C82F902EF9C0BEBBD3B6427B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 0400
Signing time: Wed 30 Apr 2025 09:00:49 +0000
Manifest this update: Wed 30 Apr 2025 09:00:49 +0000
Manifest next update: Thu 01 May 2025 09:00:49 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: FddTiOh0cVuPPNbtltYB0mVTkT9XRECrluBi8un+W38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:64:8c:82:f9:02:ef:9c:0b:eb:bd:3b:64:27:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: Apr 30 09:00:49 2025 GMT
Not After : May 1 09:00:49 2025 GMT
Subject: CN=90878f10f074af875191f7020c47abeb62296fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:4d:70:f0:88:0b:e2:37:78:a6:75:e5:c7:
cf:36:b8:e0:53:f0:3e:85:14:f1:b1:87:84:56:1e:
d2:5b:8d:fc:2a:e3:12:61:61:2b:a6:e4:be:97:a4:
4e:43:f7:bf:1f:bf:08:f0:db:85:fb:d2:2b:13:0f:
68:14:ad:01:9c:58:50:dd:2b:e5:00:43:b1:54:78:
37:d1:b8:cc:40:75:27:21:c5:94:07:ce:9b:dd:d7:
b9:fc:5e:32:5c:07:6d:44:a1:72:0e:ea:ed:88:f0:
b4:fe:db:40:78:5a:60:71:fe:b1:4b:ef:83:ab:69:
04:3d:66:96:5a:36:66:d0:eb:63:9f:7b:03:db:46:
c1:d5:38:2b:74:4d:03:79:22:3d:51:79:ef:1e:3b:
32:23:5b:82:a4:ee:c2:94:08:5a:e0:fd:24:e6:49:
f3:17:a8:4f:3d:92:65:66:9c:dd:4b:a0:0b:e7:d2:
0d:26:31:7f:8e:60:83:88:4b:96:6b:7d:09:e5:83:
3e:bb:dd:42:c8:f9:cd:7c:4e:0d:85:56:84:9e:4b:
9c:32:00:2a:a3:2b:f9:e2:41:09:56:49:22:3a:3a:
e4:bb:59:d3:3b:61:b2:b9:38:f5:af:34:91:9f:ac:
5a:2d:5b:31:16:e1:e6:83:e3:96:f9:97:41:f3:a6:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:8F:10:F0:74:AF:87:51:91:F7:02:0C:47:AB:EB:62:29:6F:E4
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:82:d1:7a:67:00:07:b4:8c:49:b7:d3:4b:b6:f9:48:c0:e4:
b3:a1:0b:57:6f:e9:60:0a:c4:b7:48:76:a8:65:6a:ff:1d:eb:
86:4d:66:80:25:3b:a0:e8:39:ed:d3:68:d3:13:af:0c:c7:c1:
bb:95:43:2d:f1:07:ba:2f:78:51:f1:d4:b5:3e:d0:1e:92:b9:
89:d3:6b:27:45:64:21:d6:e1:46:47:c9:65:5f:59:9c:61:f2:
13:f5:91:06:78:0d:e2:93:02:05:87:42:16:4a:ad:b2:84:51:
bf:e0:5f:43:27:36:f9:83:c2:f2:9f:06:92:ed:d2:ac:5d:0f:
f6:ec:3f:d4:59:89:a1:9a:6d:33:70:03:3a:cf:65:dd:49:ab:
6c:5e:96:99:97:5c:30:2e:fc:39:15:dc:06:1c:82:e2:a3:fd:
c1:77:3b:17:2a:bd:87:b5:74:b5:df:0d:8f:35:cd:3b:7c:58:
d8:e1:21:c8:a1:e4:f4:e9:cc:56:1a:b6:9d:3e:da:6c:8f:60:
39:b4:c9:c3:65:bb:63:83:56:d8:50:31:da:5f:b1:2c:3e:d6:
3a:e5:68:8a:71:da:54:e4:39:21:a3:44:23:84:1b:10:f6:1f:
a3:62:87:88:4c:67:a0:64:48:41:92:72:fb:46:99:86:8b:9b:
b5:c9:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:17:47 2025 by rpki-client