Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
File: ycbGTWd6yWSqxmbrrLnRf6jIq80.mft (raw, json)
Hash identifier: q/GHxOZzlZgd0t40qXWp9AdjaUkCADD68MMLO3Ue1cU=
Subject key identifier: AA:CC:A4:BA:50:24:B3:34:13:0C:CC:9F:B6:08:8D:D8:26:2C:AD:34
Authority key identifier: C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
Certificate issuer: /CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Certificate serial: 0196760C5ACA811782922F4557A01628EA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
Manifest number: 0816
Signing time: Sun 27 Apr 2025 07:00:43 +0000
Manifest this update: Sun 27 Apr 2025 07:00:43 +0000
Manifest next update: Mon 28 Apr 2025 07:00:43 +0000
Files and hashes: 1: ycbGTWd6yWSqxmbrrLnRf6jIq80.crl (hash: Bjb8EQrzB7hF5JG6//fiwTebwyNJ93vpf7UqfeEfqHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:5a:ca:81:17:82:92:2f:45:57:a0:16:28:ea:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Validity
Not Before: Apr 27 07:00:43 2025 GMT
Not After : Apr 28 07:00:43 2025 GMT
Subject: CN=aacca4ba5024b334130ccc9fb6088dd8262cad34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:b7:de:b0:79:d6:d6:24:ff:bb:2c:46:d4:
16:65:1f:ff:4f:25:a8:b5:70:17:ee:c3:bf:eb:12:
44:67:b2:d7:d0:6b:bc:79:f9:49:7b:f1:93:08:fd:
61:ac:f6:2a:31:66:b2:09:aa:bd:4c:ad:6e:e4:44:
f5:79:ee:5c:51:7b:99:3b:24:37:86:d2:7d:b0:5d:
bb:f7:43:39:cf:c6:64:1a:3e:6e:b7:72:6e:17:17:
5a:0c:6d:33:2c:1f:df:c2:e8:a0:de:08:03:0b:92:
83:94:16:89:27:73:e3:05:fc:90:0f:5f:49:15:26:
a2:fc:f0:71:ce:ec:02:b9:45:46:de:42:80:ab:81:
ab:5f:b6:be:75:33:c8:ee:9c:54:ea:fe:1d:15:75:
6c:b7:d3:e1:e4:fb:3e:f2:2f:a8:24:52:5e:83:e7:
c0:1b:0d:4e:fc:41:52:3c:5a:43:39:1f:fe:bb:19:
69:1c:c9:e4:5f:ac:e1:cb:ae:1c:bb:43:ca:39:f4:
26:26:91:6e:93:d1:01:a7:84:27:14:02:62:8f:37:
6f:76:43:a3:88:c2:59:94:5f:cd:e2:ad:f7:16:9a:
31:f2:18:49:3b:9a:8d:00:7e:f1:c9:6f:37:52:00:
3e:7d:ca:15:70:80:bb:6a:9b:eb:1b:bd:9f:db:2a:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:A4:BA:50:24:B3:34:13:0C:CC:9F:B6:08:8D:D8:26:2C:AD:34
X509v3 Authority Key Identifier:
keyid:C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:8f:21:87:43:20:a4:aa:d8:84:72:7b:0c:fe:8e:44:59:
9d:42:2c:03:4d:ad:01:e1:89:95:59:09:18:a5:9d:32:a2:20:
7f:53:1a:c6:98:34:6a:c1:9f:52:1e:62:d8:33:0b:5d:a4:16:
bf:15:9c:66:3f:0a:32:6a:c8:5a:91:84:7e:d2:af:ee:39:38:
f8:0c:c9:0e:96:82:d2:3a:81:72:3b:ce:cf:3a:fb:9c:ec:8f:
80:64:45:27:c3:d5:1f:b8:e1:d0:da:5c:da:e4:8e:7d:66:9e:
f3:cb:ae:b0:ad:9a:27:19:f1:22:ae:39:3c:cf:eb:97:06:2d:
dc:f9:08:fa:ea:da:d0:94:6f:36:ca:a4:5a:ba:2a:d9:e2:23:
47:8e:64:fd:77:6c:e7:91:1a:41:b8:6b:6c:f2:2d:cc:ed:80:
fa:b2:b3:22:e2:f0:0f:45:83:a5:14:fc:f3:0e:8f:16:9f:4a:
5d:56:1a:97:94:45:c1:8a:46:f0:f0:1a:53:e7:70:c1:cc:f6:
9d:39:4b:40:30:38:dc:ec:4a:12:a4:dc:42:bb:7c:56:59:f7:
19:a2:87:78:f8:79:61:0a:54:72:df:c1:15:43:04:7d:df:8b:
58:7e:12:99:91:8f:61:74:88:db:08:07:77:6c:98:e2:4b:dd:
9d:f1:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:07 2025 by rpki-client