Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: oafRP6EJ6MqVccO3HXLHl/xVx5xRw4SeoztIlC6dpyE=
Subject key identifier: 79:66:D3:E0:09:91:35:BD:95:3A:1C:B9:10:CD:3C:A6:4C:D5:AC:23
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 01967BD74FABA0B0A3C5BD6B9BD5EC4E31DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 10:00:30 +0000
Manifest this update: Mon 28 Apr 2025 10:00:30 +0000
Manifest next update: Tue 29 Apr 2025 10:00:30 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: Kr4uMxkAj/IswJRUvk4UE6QxvruD8Ezkpt5/MvsM78Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:4f:ab:a0:b0:a3:c5:bd:6b:9b:d5:ec:4e:31:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: Apr 28 10:00:30 2025 GMT
Not After : Apr 29 10:00:30 2025 GMT
Subject: CN=7966d3e0099135bd953a1cb910cd3ca64cd5ac23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:95:89:14:64:6b:61:84:b6:cd:e6:95:a1:
0d:56:99:fb:cc:20:9f:6d:02:dd:4a:8f:3c:d0:89:
6c:81:3a:92:86:dc:2d:dd:ba:e9:7d:a0:74:1e:18:
e9:ee:d5:19:68:5c:94:5b:25:0b:93:fa:30:c4:4f:
96:e5:46:6c:0a:50:ed:51:1e:72:b2:1d:56:53:c8:
f1:77:ec:fa:cf:0c:7a:70:e0:4c:cd:36:4a:e8:a1:
8e:5d:f2:ed:82:5c:3d:f1:47:26:12:9c:45:13:ed:
f0:f2:60:08:42:ac:bc:ee:72:10:82:02:6a:6c:34:
9e:e9:a7:65:0d:eb:87:f9:a0:e0:d9:fb:ad:1a:70:
b4:69:07:42:02:0c:8f:c5:fd:af:39:45:0d:80:1d:
a3:da:9e:0b:4a:96:db:8f:aa:03:2c:9f:54:02:c0:
ed:de:5a:29:4e:15:25:dc:15:36:c9:7f:a1:21:5f:
1f:3f:5a:07:29:90:ce:21:cc:e4:5f:2b:d2:64:45:
bf:4e:69:7d:89:25:d5:e5:9a:f6:59:a2:1c:d4:d8:
75:44:95:3d:fe:2d:d1:a5:a5:68:8e:35:5c:df:17:
da:e9:3d:d9:2b:7d:83:b3:fc:cb:ff:2c:8e:43:f5:
b9:74:0f:6b:48:91:b3:fc:2d:d6:10:c2:95:b9:b4:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:D3:E0:09:91:35:BD:95:3A:1C:B9:10:CD:3C:A6:4C:D5:AC:23
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:56:66:cc:a6:fc:61:2c:61:60:1a:b1:a1:ec:9a:7f:69:1c:
a1:b3:ed:a1:3b:57:a5:de:06:d7:3c:5a:a7:5f:b1:dc:92:40:
59:27:09:ab:7a:0d:1c:3f:73:07:f7:20:87:00:09:d1:1b:f1:
d5:75:ff:58:9b:77:96:5e:e7:a0:be:ca:77:32:11:c0:e5:f2:
cb:36:be:ee:80:fc:fd:16:02:89:86:8a:51:7d:cd:e6:54:84:
f0:20:2e:bc:fc:07:52:c0:6b:03:21:53:44:76:f1:65:b8:7a:
f8:ab:60:2d:1c:1f:60:b7:5a:0e:dc:f0:95:5a:a0:98:71:f1:
3a:6d:30:3c:16:1c:c6:5a:70:be:5e:2c:84:ca:67:26:a2:f7:
c3:63:f8:fb:a5:a2:24:8c:a7:89:ff:90:6d:75:e9:51:e8:9d:
29:88:64:58:d7:83:39:66:75:c3:49:5a:dc:31:3d:07:65:69:
4b:bf:e6:82:9a:dd:40:6e:f5:cc:79:23:bd:0f:de:f8:03:41:
1c:3d:d3:96:60:ad:53:14:6d:a4:04:ea:7c:07:9c:e7:17:f5:
59:f4:ec:73:70:8d:e4:d5:11:b8:35:55:7e:ba:01:4c:91:99:
83:76:0e:cf:20:93:9f:89:9e:04:58:20:7c:a1:83:16:61:bb:
cf:ec:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:04:42 2025 by rpki-client