Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: 8SkvorO+8x7cF2r7BsgR2+J1pzpr1Rgt3ANe5UZ3m2Y=
Subject key identifier: 8D:58:D4:ED:4C:B4:81:FA:3C:B9:BC:3E:B5:8F:11:0A:0C:96:BD:8B
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 01967DC667D8C48BA3CF17C20CC6AA04C32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0A5A
Signing time: Mon 28 Apr 2025 19:01:16 +0000
Manifest this update: Mon 28 Apr 2025 19:01:16 +0000
Manifest next update: Tue 29 Apr 2025 19:01:16 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: si+1VVJ2JnLINldcl5oZeQ84kPc31mftwrqsdrN5fbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:67:d8:c4:8b:a3:cf:17:c2:0c:c6:aa:04:c3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Apr 28 19:01:16 2025 GMT
Not After : Apr 29 19:01:16 2025 GMT
Subject: CN=8d58d4ed4cb481fa3cb9bc3eb58f110a0c96bd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:15:e0:7c:c4:95:06:d8:bb:ff:51:d5:5c:
57:01:74:6c:01:9d:d8:60:1d:96:68:e2:25:5d:02:
02:83:21:ed:8a:ab:13:7d:f5:05:56:d6:08:33:82:
df:f5:1d:9d:2d:db:62:ff:66:89:c8:0c:87:76:2c:
c1:70:a6:49:e3:38:70:64:72:29:a4:91:3d:8a:f7:
27:01:da:b5:97:ae:cd:e1:be:c5:76:3f:ed:56:ad:
5a:ec:af:91:90:cc:e7:15:dd:74:68:3f:b5:75:15:
d7:26:45:ce:90:26:da:63:be:9e:02:17:f2:78:c8:
04:e1:ba:b1:54:2b:b8:cc:12:8d:cd:1a:08:8f:59:
cf:88:db:1e:64:25:b9:92:b6:07:da:a9:5f:65:14:
d3:ce:c4:10:cb:81:e4:fd:77:5f:86:4a:a5:7a:2f:
f6:8c:18:fc:95:87:a0:f2:e9:ce:8a:c6:8f:3e:35:
5b:56:81:1c:fc:61:0c:05:c4:69:7d:b4:c4:b7:6f:
2a:7b:a5:ea:ac:20:e1:94:3c:bc:3a:31:08:16:8b:
68:f7:86:3d:62:5b:fe:b8:6b:4d:b7:25:b0:39:92:
f3:a2:aa:e5:cc:25:63:be:df:b3:a2:14:a9:b2:4b:
71:e6:9f:1c:f0:8f:eb:fe:36:70:46:bd:ba:bc:59:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:58:D4:ED:4C:B4:81:FA:3C:B9:BC:3E:B5:8F:11:0A:0C:96:BD:8B
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:75:1f:7b:ea:50:aa:c6:14:7a:38:46:84:a4:c7:88:8d:f7:
a0:8c:ec:be:e6:17:6f:81:5f:3f:64:89:10:60:1a:f3:5c:13:
47:1d:d7:49:9f:b1:73:22:10:d5:aa:2b:fe:3d:71:f0:7c:01:
de:92:3f:99:17:23:95:16:ac:3d:b3:98:52:72:9b:0f:33:36:
e9:6a:11:62:bb:17:14:74:c7:e5:ac:52:b2:7c:83:53:0a:97:
60:b2:e0:ec:48:a6:3e:51:68:10:01:9b:23:b2:28:b7:16:60:
f8:54:4c:4e:38:7a:a8:c4:f1:3d:58:11:d1:46:9c:f5:ca:22:
3c:bb:5d:1f:7c:5b:d0:a0:2f:60:dc:10:e7:ec:72:e7:c0:91:
bb:c2:a5:37:5a:03:40:d5:b1:06:34:1d:4b:21:59:57:19:e3:
66:1c:22:21:80:1f:0b:68:6b:a8:36:53:7e:80:c6:5a:40:e2:
e2:83:15:f8:e8:18:b4:60:9e:ce:c0:d3:97:d7:87:38:3e:a5:
07:1d:8f:1b:5b:a4:f7:ea:9f:39:14:d6:4f:e2:88:8a:20:2e:
d9:34:7a:2f:93:d5:62:07:a4:cc:b7:07:43:77:49:5c:11:0a:
53:9b:b6:13:4c:e3:c9:84:08:82:1f:83:0e:cf:13:7a:d3:76:
f0:c5:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:00:32 2025 by rpki-client