Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
File: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json)
Hash identifier: TQLPoCcL6yynhCfqX2Th2VKcc0xU7LkB4gTbt9gGrZc=
Subject key identifier: 86:8F:64:14:A5:77:74:30:0E:C5:66:57:75:97:B4:EA:1B:59:FC:77
Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
Certificate issuer: /CN=63ef6bdbc42ad06defdad72679414346d8d048df
Certificate serial: 01968D01D28DB1E4F3BCE8291DC20DC0617E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
Manifest number: 1516
Signing time: Thu 01 May 2025 18:00:28 +0000
Manifest this update: Thu 01 May 2025 18:00:28 +0000
Manifest next update: Fri 02 May 2025 18:00:28 +0000
Files and hashes: 1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: joO/ns8UMbbttSNyijgQtAh4PH+LDNV2Ql6+J/SJA9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:d2:8d:b1:e4:f3:bc:e8:29:1d:c2:0d:c0:61:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df
Validity
Not Before: May 1 18:00:28 2025 GMT
Not After : May 2 18:00:28 2025 GMT
Subject: CN=868f6414a57774300ec566577597b4ea1b59fc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:0e:fd:7e:b0:62:c8:34:c3:05:bb:30:52:
41:9d:5c:63:2c:15:33:0e:a1:90:10:ac:14:98:fa:
09:4a:f9:07:9a:ef:25:43:e4:d4:33:72:c5:96:12:
87:1a:50:cf:9a:6a:b8:71:f0:74:46:6e:4a:12:86:
07:46:1f:f0:9d:d5:b4:ca:93:b1:75:86:65:e6:db:
f9:69:96:8c:07:b1:88:f3:72:99:4f:d5:19:d1:ac:
67:f5:c5:61:98:d2:15:c1:56:7c:28:7c:7c:a7:22:
ac:f6:47:29:77:77:8f:7e:de:4f:24:f7:c8:81:93:
7b:e9:d9:10:57:21:7f:cb:2a:1e:f6:2b:37:af:24:
4b:0d:bf:1c:38:63:bd:57:c6:7b:8d:d1:d7:d8:ed:
12:5d:5a:9f:38:6d:8d:49:d9:23:fa:0c:09:b5:a6:
66:35:fe:96:04:60:a8:50:de:6a:97:78:18:b7:e6:
8b:3c:98:48:da:4c:32:c4:aa:64:85:a8:32:db:f2:
9a:3a:67:d4:7d:a4:fb:fa:02:23:e9:3e:36:18:e6:
30:f9:9d:37:1b:1a:a7:4c:e9:dd:bf:69:5e:d5:26:
63:ad:38:c3:d1:05:2c:bd:7a:67:a4:62:80:8b:73:
8b:cb:b3:31:11:3b:3b:ed:fc:96:e3:ac:d7:02:c3:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:64:14:A5:77:74:30:0E:C5:66:57:75:97:B4:EA:1B:59:FC:77
X509v3 Authority Key Identifier:
keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8d:76:bb:66:08:b8:1e:88:cd:25:a1:12:9e:aa:7a:7f:39:
21:ec:8e:fe:8e:db:30:76:ea:d7:a4:01:f6:00:ab:96:38:65:
a2:d0:c7:72:a8:2f:12:76:7a:45:6b:6b:ff:8a:7d:91:c5:b7:
01:5c:64:f3:8e:80:c0:3d:70:a0:c4:d0:d0:a4:b3:96:dd:46:
00:6c:25:5e:38:07:ba:1a:24:0c:57:e0:d9:b7:29:96:9a:45:
78:6f:4c:99:81:69:f4:4b:04:96:e7:d5:23:b7:c1:b3:e7:91:
f1:50:a3:dc:7b:b9:ae:08:64:2d:97:c0:f9:b4:fb:64:39:63:
a9:cc:37:46:a0:69:16:2a:9a:1a:c8:d9:14:f4:d4:1a:dd:9d:
e4:9a:0d:82:1b:e6:e4:17:c8:bb:d8:67:ab:de:5c:d6:7c:b0:
63:b7:de:6e:de:21:4e:f3:2e:2e:ba:9e:8b:ba:db:9d:0f:22:
f6:d1:be:57:0a:71:a2:90:18:40:37:76:ee:5f:ec:cd:14:f3:
4d:f4:4e:88:91:58:f6:e7:48:03:c8:b9:eb:dc:55:af:68:2b:
0b:fd:9a:62:55:1c:6b:7f:c4:93:26:2c:7b:43:e9:91:f6:f6:
17:64:69:e9:94:cc:4d:41:19:13:c7:88:1f:c6:4f:f7:dc:81:
6c:09:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:24:19 2025 by rpki-client