Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: L6nFgoO/g64WhrboJ2hIqA92j+NLSymMFh7s9iVdAMc=
Subject key identifier: D1:FE:DA:56:65:01:B2:CA:85:10:3C:E2:99:CD:A9:4D:07:8B:0E:D3
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 0196760BFEDA6139B15B2082326161A2D95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 05B6
Signing time: Sun 27 Apr 2025 07:00:19 +0000
Manifest this update: Sun 27 Apr 2025 07:00:19 +0000
Manifest next update: Mon 28 Apr 2025 07:00:19 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: bmRfAcfTkcq3xmI0EVbkUqhmTroFd4EGQJMJ/x+lfWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:fe:da:61:39:b1:5b:20:82:32:61:61:a2:d9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Apr 27 07:00:19 2025 GMT
Not After : Apr 28 07:00:19 2025 GMT
Subject: CN=d1feda566501b2ca85103ce299cda94d078b0ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:c3:a2:0d:ca:a1:c3:b5:28:57:9d:c7:f4:
a2:f3:cb:b7:1e:ab:ff:d1:68:aa:30:c1:42:43:df:
40:bb:29:84:dd:e7:8e:f6:11:4f:e7:be:a5:d0:a7:
8d:86:34:7c:38:29:17:fa:0d:f4:b8:0d:76:6f:e1:
ce:e6:01:9c:43:08:fd:89:98:1f:7c:5a:ef:e3:bd:
55:7e:7d:1c:a4:28:1f:61:d4:a9:02:a5:9a:2b:0b:
41:7c:9d:46:f2:9f:d3:54:2c:0c:66:b3:78:3b:e4:
a3:77:75:20:2a:bd:ae:4e:7b:c8:07:bc:81:5c:a0:
85:00:4a:da:44:e3:bf:f5:3d:b4:a7:2a:73:e4:0b:
49:a5:21:10:57:c8:60:40:1d:0c:32:f7:94:1b:4c:
b5:06:a9:50:d5:a8:e8:8b:0b:74:9e:d7:90:21:16:
30:81:1a:bb:f5:da:a3:77:a8:09:4e:f8:f5:39:d8:
52:2a:b3:9d:96:e8:d9:93:53:70:8e:6d:f8:ca:9e:
6b:0b:7e:b7:d5:23:32:ed:63:5c:be:89:cb:69:40:
3c:04:c9:a9:7e:fa:a6:bd:5c:fc:ba:85:74:4b:29:
a2:8f:fd:22:4a:1d:ab:f1:ee:45:f0:e6:3f:0e:9c:
87:0d:97:e7:a7:c0:57:64:95:c6:df:cb:3c:cd:46:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:DA:56:65:01:B2:CA:85:10:3C:E2:99:CD:A9:4D:07:8B:0E:D3
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:82:ee:7f:23:c2:d2:4e:3d:bd:35:0e:41:bd:67:0a:78:3f:
5e:55:8f:12:ba:31:0b:9c:18:3e:cb:09:9c:d9:dd:7c:2c:5b:
3d:61:3c:2f:85:dd:02:28:88:51:f6:14:84:2c:9b:a9:08:1a:
ce:2f:41:11:5f:45:e0:2c:af:c7:a9:0a:2e:e0:ee:89:ad:54:
36:48:83:19:49:db:5d:95:31:58:a0:48:ca:9d:96:b1:57:11:
8e:8c:ed:a7:06:db:7b:15:1f:25:3b:29:df:78:50:05:44:51:
fe:19:c4:43:ff:99:68:08:ad:97:49:15:ea:52:17:28:bf:53:
a6:bb:fa:99:2d:cb:4a:2d:0b:cf:fb:18:0a:69:5e:25:86:02:
c8:b6:7c:bd:7c:64:b7:eb:4f:55:9f:ec:27:45:26:6e:7b:c5:
3c:f5:52:5c:66:38:51:5c:4f:98:1c:d5:30:2b:7b:ad:36:36:
b3:c8:bf:a7:ee:ab:12:ea:13:ca:a2:df:33:9b:6a:04:47:62:
6f:a1:66:a0:97:12:59:b9:4e:fe:b5:43:59:8e:4e:1f:7f:cf:
a6:28:09:5e:69:d8:90:d6:0a:d4:35:c6:dc:ff:f9:c5:62:cd:
6a:3a:05:cf:c3:0e:8c:77:2d:fc:24:9f:79:a8:75:e3:74:a8:
18:17:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:21 2025 by rpki-client