Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: yHEFbgU9C6G13v1KXAiieKb18Bm90iykcKwFIW6EFoU=
Subject key identifier: 67:71:F5:EF:33:B1:DD:2F:D0:72:A1:87:99:06:F5:04:D3:1D:8F:57
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 0196895C70DC6FA20D3D81772EDE9ED06DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 1017
Signing time: Thu 01 May 2025 01:00:58 +0000
Manifest this update: Thu 01 May 2025 01:00:58 +0000
Manifest next update: Fri 02 May 2025 01:00:58 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: N8ESL0Ab/ZanaLE+2lNkl4Fp+UjgRasN3fEAb17yi/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:70:dc:6f:a2:0d:3d:81:77:2e:de:9e:d0:6d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: May 1 01:00:58 2025 GMT
Not After : May 2 01:00:58 2025 GMT
Subject: CN=6771f5ef33b1dd2fd072a1879906f504d31d8f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:dd:2e:7e:23:de:ca:6e:63:47:8f:9e:96:
36:9c:7b:19:25:33:5e:b7:cb:ba:c2:62:63:25:23:
22:c0:fd:75:cb:fc:b8:55:d5:3b:4d:46:17:38:53:
de:16:07:a5:76:f3:ec:cd:7e:cc:83:d3:81:74:9d:
2c:dd:9f:c7:2a:ad:23:d8:4d:35:ee:61:00:40:ee:
ea:8f:e9:45:58:63:01:02:ca:a1:5c:f3:f3:da:9f:
d4:02:03:d2:3f:e9:92:a4:d6:54:15:c0:b2:c8:48:
0d:7a:93:80:72:6b:ff:5a:89:e0:09:b3:fd:a3:5b:
f6:a4:b7:23:12:21:f6:2c:e7:9e:62:32:7e:62:d3:
ae:c9:d0:29:33:ac:3d:ac:b5:5d:79:78:62:c0:93:
6e:65:78:d7:04:05:43:71:f9:a6:cb:7a:63:e8:a4:
26:3c:89:eb:1b:cd:c1:eb:33:fd:3d:fe:a9:ae:43:
27:a5:aa:29:1b:35:11:98:74:34:89:53:4e:47:7a:
6d:8e:44:7e:20:7a:49:63:2c:70:ce:cf:27:61:c6:
d2:a0:66:a8:c5:cc:fc:5e:c6:b3:95:cf:20:a5:8d:
55:a7:dd:54:c4:4b:bc:40:c3:82:4b:0a:5b:9e:ef:
0c:a7:9f:6d:a8:ea:5b:a8:e3:61:d7:df:4b:64:07:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:71:F5:EF:33:B1:DD:2F:D0:72:A1:87:99:06:F5:04:D3:1D:8F:57
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:99:7f:d5:09:fa:d0:2e:45:bd:f6:fe:91:a7:d8:e0:e0:b7:
f0:2c:49:65:c3:a6:5b:00:81:5a:1a:eb:d3:00:3c:78:8e:90:
ae:c2:3f:57:f0:b7:cb:66:67:cd:eb:3e:ee:fb:d1:b1:09:49:
22:c4:6b:f5:4f:9a:70:04:e4:c4:5e:ed:32:11:4b:6b:e0:31:
aa:c4:4b:78:fd:ca:eb:2e:56:9c:ba:63:fd:14:95:27:37:e6:
fc:b1:34:29:7b:a3:2f:b2:85:74:0c:8d:8f:0d:35:03:40:1e:
fb:09:cd:9b:70:10:f4:ee:e7:51:51:14:6d:e8:4d:6d:fe:14:
3a:98:4c:15:59:84:a5:c0:7a:3b:88:a6:ec:94:87:b1:13:9b:
7d:28:e0:38:92:63:8d:76:b8:57:ae:35:13:41:7d:0d:74:5f:
dd:00:c0:d2:6c:02:c4:50:f9:01:40:41:b5:7e:48:59:a6:68:
bd:61:08:bb:f0:e7:e8:7b:f6:3c:3d:b1:52:bf:5a:90:e1:0c:
0f:15:03:8d:94:5b:f8:47:ff:0b:8f:53:4d:c2:99:1b:86:83:
97:c5:4a:7e:17:48:71:04:b8:c8:b4:40:cd:5b:29:80:3a:be:
d9:46:84:58:59:35:aa:00:99:8a:c3:9e:a4:08:e1:ef:e6:25:
26:41:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:45 2025 by rpki-client