Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json)
Hash identifier: TNaSNeoifBVAo0XOARvIbtglQOi6yrj5wpsqWj1L6yk=
Subject key identifier: F3:DE:0F:94:95:A1:F2:9B:21:13:F8:44:D1:A4:8B:7F:98:E3:CB:F4
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01967868A59F0A0F3945452C9C2897A09D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
Manifest number: 01CA
Signing time: Sun 27 Apr 2025 18:00:46 +0000
Manifest this update: Sun 27 Apr 2025 18:00:46 +0000
Manifest next update: Mon 28 Apr 2025 18:00:46 +0000
Files and hashes: 1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: eINinErCRbkrQBZVri38Pyi3wOIuwfI2ZgtTG4coc3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:a5:9f:0a:0f:39:45:45:2c:9c:28:97:a0:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Apr 27 18:00:46 2025 GMT
Not After : Apr 28 18:00:46 2025 GMT
Subject: CN=f3de0f9495a1f29b2113f844d1a48b7f98e3cbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:5d:b9:1b:25:81:8d:ed:f5:95:9e:66:9f:
fa:79:29:6f:c6:b7:93:94:10:c2:ae:80:04:0b:42:
d8:7e:9c:e2:52:90:8f:26:fb:d8:8a:e5:f8:2e:bb:
b6:c5:70:a5:2b:1e:99:08:4f:30:40:76:3a:ee:0c:
55:87:56:3a:57:2c:d3:5c:8c:63:ad:0a:86:dc:b4:
89:7c:0d:7f:33:7c:13:6e:29:5c:f8:3b:d9:3c:ac:
32:9e:5c:7c:25:48:4f:06:cd:c5:68:eb:8f:40:e4:
0f:6c:4a:38:2d:9b:1b:af:47:ca:10:f3:ec:15:36:
be:7b:a0:cc:71:7f:a2:f6:8c:82:a0:09:2b:6a:1b:
92:3e:4d:7f:e3:1c:e0:07:ea:97:9c:5d:cc:ec:cd:
4e:85:c4:de:6e:f2:33:5c:35:26:15:b4:63:2a:6b:
f2:b8:95:d9:66:25:18:2c:7a:e6:f2:6b:eb:15:38:
90:24:ce:c5:5f:3c:64:3a:a4:ab:12:9e:72:14:4b:
88:76:56:40:4a:8c:8c:62:23:f0:75:6c:f0:a8:59:
44:b0:b0:e0:c1:47:be:f6:ba:14:a6:11:3a:eb:0b:
9b:bb:d7:63:e9:f1:67:c0:80:f2:f1:af:15:e8:64:
d1:88:ab:52:33:1c:e8:a8:01:ba:f2:91:7d:b9:7a:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:0F:94:95:A1:F2:9B:21:13:F8:44:D1:A4:8B:7F:98:E3:CB:F4
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:d7:df:e4:a7:95:3d:23:78:2b:4f:76:d7:78:59:36:9f:
1f:29:3e:c9:ca:4e:cc:26:f3:04:c1:f2:d3:c6:fc:1e:fc:00:
94:ae:ea:bd:77:96:14:9d:b1:e9:78:fa:84:cb:f9:40:92:7a:
c7:9a:e3:91:fa:24:ee:f4:a5:bc:78:4b:f3:65:e2:bf:15:b3:
c5:bd:f0:f7:6f:7c:ef:7c:f6:40:9d:c9:d7:b9:53:40:50:6b:
5f:ce:8b:dc:0a:79:ea:3c:72:88:5c:d8:a7:b6:ca:c9:65:13:
b4:09:8a:14:e8:2e:1b:12:42:52:b0:65:65:92:87:20:ac:05:
78:94:5d:2b:e5:6a:7e:ea:19:b2:d5:7d:f0:50:5c:a3:a5:ba:
e3:16:42:a2:ca:f6:80:94:97:33:b8:ee:5c:ba:41:08:f4:a6:
b6:25:ba:89:b8:74:07:cc:6e:80:05:f5:66:8d:cc:ef:fb:84:
5a:cc:f4:5d:0b:1e:c6:22:ff:44:10:72:23:a0:98:a5:b9:e0:
f2:cd:83:fe:d9:15:95:41:ce:3b:41:47:cb:cb:47:a8:b1:cf:
2e:d6:34:3e:6d:47:b7:77:58:0a:02:b8:ea:38:4e:6a:0a:01:
46:a7:12:bb:6f:aa:42:61:0b:52:7e:da:f0:b2:ce:f3:a8:cc:
e1:9f:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:52:41 2025 by rpki-client