Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
File: yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json)
Hash identifier: aciWsQ0HmLbA3xm5VIVOakyGaPMmT8lseU2qZbHguq4=
Subject key identifier: 6C:A3:EB:E9:9D:B6:75:52:33:27:C4:30:D0:5D:50:B2:1F:9E:24:47
Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
Certificate issuer: /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Certificate serial: 01967D20B8CB1DBD93CBBE30302E58C6E46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
Manifest number: 022E
Signing time: Mon 28 Apr 2025 16:00:18 +0000
Manifest this update: Mon 28 Apr 2025 16:00:18 +0000
Manifest next update: Tue 29 Apr 2025 16:00:18 +0000
Files and hashes: 1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: JLagtUeurXTva6+Vw3aPS58dKOzHwKKmifa+SBO/6Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:b8:cb:1d:bd:93:cb:be:30:30:2e:58:c6:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Validity
Not Before: Apr 28 16:00:18 2025 GMT
Not After : Apr 29 16:00:18 2025 GMT
Subject: CN=6ca3ebe99db675523327c430d05d50b21f9e2447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:16:21:78:ed:0f:2c:1d:a1:7b:3a:2f:e1:
0d:53:57:d8:72:de:49:8c:aa:7f:89:cf:4c:bb:03:
94:a5:a9:fd:b7:28:28:57:bb:48:69:53:e8:f2:e2:
4c:4a:01:b3:93:0f:90:81:39:f2:b3:33:0a:ed:12:
81:9f:05:69:5f:d8:54:b0:39:d3:8f:6e:81:a3:43:
4f:db:ef:ae:62:81:37:45:af:ed:47:55:3a:44:d5:
ae:7f:a1:a4:fb:6b:9b:c0:45:a1:f9:93:ad:f7:57:
96:99:5e:f0:2e:9c:89:cc:20:41:6d:e3:0a:77:f5:
8e:da:58:ec:39:d4:bc:1b:5d:7a:bd:43:fc:4b:5b:
cc:9c:98:dc:59:8b:ce:a5:aa:85:94:0c:07:6e:eb:
94:fd:ed:a1:9d:ec:14:70:d9:3e:57:74:a3:93:a3:
3a:c0:05:49:34:72:f6:f0:92:c8:94:af:3b:58:4e:
67:34:89:8f:dd:84:34:36:db:53:ac:81:17:af:88:
bb:39:ca:22:1e:42:1a:3c:40:19:a8:a0:fe:bf:19:
bd:1a:f7:6e:57:a6:06:a2:f4:53:5b:4a:62:c2:dd:
d7:d6:eb:80:25:83:19:f0:ce:69:19:46:5e:98:7a:
11:02:3f:15:40:fe:30:2a:ec:6e:e4:0c:ef:62:f3:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:EB:E9:9D:B6:75:52:33:27:C4:30:D0:5D:50:B2:1F:9E:24:47
X509v3 Authority Key Identifier:
keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:02:17:15:9a:0c:27:da:03:93:5d:6b:32:df:4d:18:9b:96:
a8:64:2b:c7:15:e0:f2:cf:e0:8d:03:55:4c:91:91:ab:9c:3b:
c4:ec:fb:26:15:4f:8c:5e:f2:e1:47:86:46:0f:b6:39:47:47:
00:68:69:d5:33:76:e0:20:f8:1c:1e:75:88:22:70:de:6c:1a:
e0:96:b5:52:fd:5b:e3:62:ea:e0:f4:80:f0:ae:61:18:d1:27:
9a:87:a2:a5:ce:37:e2:02:b2:1e:99:f4:8e:3e:d7:97:83:5b:
cb:f5:e0:c6:9a:12:f0:74:11:cf:bd:70:cb:ba:e0:a4:3d:b9:
c0:d0:2e:7c:df:e8:c2:04:1f:60:86:ee:98:4e:3a:f9:ad:ca:
69:47:56:3d:cd:84:b8:ce:8c:f1:0c:55:68:2b:94:e4:98:a5:
75:70:d6:96:dc:3d:6d:1d:75:f3:00:b7:04:bb:ee:c3:52:8a:
74:18:5d:17:8e:a2:59:dd:20:23:7b:32:4f:fd:76:96:22:fb:
e0:a5:a8:ca:cf:eb:16:7f:73:1d:0f:02:d4:dc:2c:08:34:08:
8a:cc:53:19:eb:14:c5:7f:64:ae:59:5d:96:bf:5d:69:5f:6a:
22:10:31:b4:a6:98:21:f0:3b:c8:f1:92:b8:9a:8c:39:1e:95:
9f:7f:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:23:01 2025 by rpki-client