Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier: EeeNwBEPcjzbnMkUJcyeSEiiSzPPgicjdiyNrT1hekI=
Subject key identifier: A8:67:05:A5:2D:55:19:87:F3:2C:DC:3D:75:A8:90:6C:E1:35:AD:DD
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 0196944D854CDCE0FEF0F767320ECCF4A956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number: 097D
Signing time: Sat 03 May 2025 04:00:30 +0000
Manifest this update: Sat 03 May 2025 04:00:30 +0000
Manifest next update: Sun 04 May 2025 04:00:30 +0000
Files and hashes: 1: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: cm+looTqapDWvfQqYcYZaYM4CRrL/7CEO9iIdvRJIu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:4d:85:4c:dc:e0:fe:f0:f7:67:32:0e:cc:f4:a9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: May 3 04:00:30 2025 GMT
Not After : May 4 04:00:30 2025 GMT
Subject: CN=a86705a52d551987f32cdc3d75a8906ce135addd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:22:1a:e9:5b:4f:4a:5a:7b:ba:dc:86:73:
33:7f:8e:e7:41:75:60:4a:3e:7b:b1:e3:a5:38:59:
2a:ed:37:85:44:5f:6d:da:7d:33:f3:f9:9d:f4:15:
b8:f0:78:40:6a:55:bd:63:17:43:6f:3e:6f:dc:3e:
55:18:b7:78:7f:7e:74:ce:7b:dc:24:76:98:94:85:
0c:2f:77:1e:a6:68:e6:0d:9f:8e:10:10:b4:39:93:
4a:15:c7:d3:14:a4:95:f2:e6:e0:7e:17:d4:36:77:
58:44:c0:96:a0:48:3c:66:c9:d7:ea:d3:fc:5d:75:
81:b4:e5:aa:85:95:d6:ce:c4:ee:75:d4:df:c9:51:
0e:e6:36:79:32:18:fa:ed:e2:c2:bf:7a:b6:78:0a:
e3:d4:95:43:4a:27:3f:35:69:21:44:29:75:32:0b:
f5:02:36:0c:11:06:dd:2e:e5:de:f8:d2:e1:c0:ea:
98:a2:db:9b:30:67:48:d6:6b:84:8e:85:32:f3:26:
28:be:ab:21:2f:bc:27:77:d3:9b:7e:e6:6a:00:80:
72:23:ec:3c:82:cd:90:ed:81:70:0f:4b:a9:20:b5:
04:07:24:e3:b7:02:dd:0b:28:22:86:09:52:60:5b:
9c:11:58:11:cf:7c:3a:28:d4:d6:f7:a1:68:9d:ef:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:05:A5:2D:55:19:87:F3:2C:DC:3D:75:A8:90:6C:E1:35:AD:DD
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cd:67:e9:39:e6:22:e0:38:b2:4d:88:17:17:4f:76:39:b7:
49:d9:4a:fa:b7:fa:0a:6a:37:bf:2f:65:78:dd:25:95:ea:f7:
3b:75:14:1b:d0:ec:ea:2b:b7:29:d9:1d:a3:7b:fb:bf:b5:6d:
4e:29:bd:7e:12:c8:3d:80:a1:5d:29:84:f3:7f:65:e7:49:c2:
b3:a5:ad:69:af:bc:f7:27:08:1f:b7:68:2a:bd:e9:aa:15:9a:
45:5c:13:12:2a:d4:f3:f4:ee:25:66:44:85:c5:14:fc:44:d1:
9a:f7:89:c8:cb:f0:26:f1:60:6e:96:a6:94:5c:bb:62:ea:c5:
41:f5:9c:14:81:a5:40:5c:f8:7f:45:45:63:73:c5:54:ff:17:
40:4e:15:c7:da:47:fd:1c:5e:e6:b8:7d:b5:f9:6e:a2:16:05:
79:82:b8:ab:8a:61:3d:0a:a4:20:ba:6f:ec:b9:8a:a2:ae:70:
d1:d3:03:e5:35:be:2e:a0:11:3c:24:56:ce:b7:80:5b:94:3b:
b9:7d:b3:71:b3:f9:e5:8b:79:2e:02:32:03:2b:94:c3:78:48:
3d:60:d9:8d:50:e5:f6:3a:68:3e:b3:98:e6:f1:45:fa:d0:27:
25:62:e6:80:69:7f:06:32:a6:03:da:9f:08:bf:07:9e:28:5b:
08:f9:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:03:51 2025 by rpki-client