
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
File: iYDaJ6VQ15vmUa15rnGcz8vFo28.mft (raw, json)
Hash identifier: G70uZQfc8kYchkzTpZNnM6R8VjFPwq3hOgsT1XC72Nc=
Subject key identifier: 50:10:A5:74:2B:1A:CE:CC:3C:BB:A9:67:6C:4A:AE:75:D4:4C:8E:02
Authority key identifier: 89:80:DA:27:A5:50:D7:9B:E6:51:AD:79:AE:71:9C:CF:CB:C5:A3:6F
Certificate issuer: /CN=8980da27a550d79be651ad79ae719ccfcbc5a36f
Certificate serial: 019689CA7238686D523FE9D48F5ED4C6FA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYDaJ6VQ15vmUa15rnGcz8vFo28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
Manifest number: 0283
Signing time: Thu 01 May 2025 03:01:08 +0000
Manifest this update: Thu 01 May 2025 03:01:08 +0000
Manifest next update: Fri 02 May 2025 03:01:08 +0000
Files and hashes: 1: iYDaJ6VQ15vmUa15rnGcz8vFo28.crl (hash: aLbOBk85LQ++65RtbSo3JOGitR+KlGqtugjL613aZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYDaJ6VQ15vmUa15rnGcz8vFo28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:72:38:68:6d:52:3f:e9:d4:8f:5e:d4:c6:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8980da27a550d79be651ad79ae719ccfcbc5a36f
Validity
Not Before: May 1 03:01:08 2025 GMT
Not After : May 2 03:01:08 2025 GMT
Subject: CN=5010a5742b1acecc3cbba9676c4aae75d44c8e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:9c:ca:d9:f2:2a:66:44:d1:e5:d7:0f:ad:
46:68:64:eb:13:0b:b4:04:cd:bd:ef:62:14:08:19:
46:b6:6e:8f:08:b3:48:05:2a:46:30:7c:e2:3b:51:
fc:da:59:05:b4:e5:c9:b7:33:59:25:18:d0:f3:b5:
ed:50:7c:e8:38:8a:66:90:f2:9b:6e:cd:83:c9:3e:
de:af:6c:d5:77:25:ad:16:d5:00:bb:57:f0:ad:5f:
31:ec:5f:06:c6:49:1a:0d:93:6b:66:e3:71:19:27:
eb:c1:ae:43:01:55:df:22:74:2f:f5:52:26:2f:48:
9f:e0:74:74:39:9a:3f:90:c3:ba:08:49:81:f7:f6:
1f:e3:51:7e:7b:51:2b:05:8f:86:9c:bb:7e:a9:58:
44:76:89:ce:04:08:68:63:0e:11:1a:a6:f4:a0:96:
53:ea:58:30:e3:bd:eb:a0:fa:34:77:5c:8a:94:19:
89:f7:1c:e8:78:57:ec:a6:02:00:0d:5a:0f:07:50:
cf:94:fe:d2:52:6c:62:5e:ef:89:22:f0:02:7b:77:
51:96:0d:a5:a9:1b:4d:8e:49:1d:3f:3f:b6:23:f4:
5f:5a:f7:c0:f4:49:4d:2e:75:94:79:15:d3:5f:3c:
d5:e6:42:e0:d7:3f:5e:57:c8:4e:d9:85:c9:54:c6:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:A5:74:2B:1A:CE:CC:3C:BB:A9:67:6C:4A:AE:75:D4:4C:8E:02
X509v3 Authority Key Identifier:
keyid:89:80:DA:27:A5:50:D7:9B:E6:51:AD:79:AE:71:9C:CF:CB:C5:A3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYDaJ6VQ15vmUa15rnGcz8vFo28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:31:17:f8:09:e6:2b:7a:27:e7:70:50:9b:eb:94:25:ec:12:
16:4a:f6:7f:2d:7b:c9:bf:06:6a:ca:37:07:94:40:f0:1d:d0:
c3:b8:c6:d7:8d:c8:b5:5d:ca:e6:4e:2f:45:91:9b:76:40:6e:
75:4f:c3:8c:56:c8:1f:46:76:f2:22:2e:e2:66:7c:21:98:47:
22:d3:9b:3a:12:55:43:5e:80:27:b6:fa:82:c8:29:c6:ee:a8:
35:80:78:f4:2f:d4:32:37:3f:b7:43:61:c0:0d:96:33:90:01:
97:27:32:a9:17:31:59:ed:6d:b8:a6:b2:da:ff:6f:32:00:5d:
cb:87:7a:16:3b:35:f7:e3:10:50:8d:17:d8:4f:07:d6:80:46:
d0:fe:02:15:c8:d3:49:34:47:42:09:d8:7d:9b:9d:cf:e8:cf:
54:75:e9:4b:d4:5d:b8:72:ff:0b:75:7f:d5:5b:b6:7f:cc:8d:
a3:f0:26:13:e1:17:40:eb:57:72:66:cc:90:e2:66:71:85:f5:
03:e9:0a:77:8a:94:48:15:04:8a:d0:9f:e7:95:5f:c3:27:79:
97:86:32:ef:4c:dd:f9:66:05:dc:b4:ac:94:13:bc:cf:56:d2:
d6:ce:ba:21:0b:13:26:39:2e:dc:f7:f0:c4:6c:24:94:32:9f:
77:cd:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:35:19 2025 by rpki-client