Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: ZiV31aaz/exXR3nmWTRu6F2N/dJGYHzssAIesTKnx04=
Subject key identifier: 2B:B4:70:69:43:50:02:0A:48:D6:9D:DD:6D:3A:CE:11:3A:3B:B3:CE
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 0196760C81C31BD0B70DB9304CECBC74BEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 08D4
Signing time: Sun 27 Apr 2025 07:00:53 +0000
Manifest this update: Sun 27 Apr 2025 07:00:53 +0000
Manifest next update: Mon 28 Apr 2025 07:00:53 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: bg7lD2VtCr+KSu9PcZ2cMze22l0k8QioAIcTxu6S9Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:81:c3:1b:d0:b7:0d:b9:30:4c:ec:bc:74:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Apr 27 07:00:53 2025 GMT
Not After : Apr 28 07:00:53 2025 GMT
Subject: CN=2bb470694350020a48d69ddd6d3ace113a3bb3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:cc:6e:81:2f:0f:4b:69:44:24:04:ae:3b:
dc:8a:79:92:29:b5:23:a1:bb:c2:fc:4d:b0:d7:86:
66:18:2a:91:a4:b5:57:ae:49:67:30:3e:1a:e1:90:
af:73:e9:c0:a8:7a:a8:78:5f:d5:74:44:59:c1:71:
75:57:b5:a6:06:34:bb:52:f0:94:82:1c:ad:40:0d:
72:53:21:15:40:7c:b5:55:f3:9c:22:30:8d:44:ec:
44:89:e5:cc:ae:a8:60:a0:7a:74:4f:02:77:b9:10:
81:c2:75:25:2a:0e:64:eb:0f:57:e4:be:ce:3d:28:
fb:23:84:7b:92:ea:ed:68:0f:79:ed:1b:4b:92:7f:
65:f2:a6:0b:a9:e8:1d:9f:5e:c5:3c:de:00:c0:35:
a8:1c:35:91:4f:0f:33:6d:36:7f:e7:5e:65:55:c4:
40:f0:9c:1b:ff:d7:c0:e2:62:26:18:57:47:08:3a:
c2:6f:63:6f:c1:07:8e:de:f4:90:fc:18:d9:59:f7:
0c:19:60:e0:38:df:c5:69:0b:8c:b5:be:85:b1:97:
e2:98:65:6a:5e:ec:86:a1:f3:63:e5:c5:b6:9e:7e:
d2:24:32:94:92:ad:59:24:80:b8:69:73:4e:5c:11:
49:31:f9:2e:9a:a8:90:6a:32:15:88:40:1b:8e:9f:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:70:69:43:50:02:0A:48:D6:9D:DD:6D:3A:CE:11:3A:3B:B3:CE
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:77:01:2f:2d:d9:a9:b9:7c:0c:df:ef:59:3b:a5:8b:5c:62:
68:c5:1f:40:8b:43:54:1d:ef:3f:95:7f:f8:88:71:80:2d:29:
4e:62:eb:b1:c7:87:79:23:74:59:15:02:4c:76:1b:bb:c0:08:
a7:d2:35:a4:bd:e6:09:51:7c:ff:1b:b9:b4:a9:ca:39:21:11:
40:f5:41:be:ca:52:76:75:5b:25:09:f6:80:6a:48:dd:92:ce:
f7:fa:30:1d:46:6e:0b:67:3e:ff:85:f6:c9:02:b0:e0:17:72:
84:8b:9b:3f:af:b1:62:b4:95:45:42:d0:f1:01:61:27:df:38:
2d:38:d4:61:16:56:e5:27:ed:2a:b1:90:29:f1:13:a1:73:28:
29:e8:28:7f:ef:64:bb:31:51:99:d5:ff:07:b7:23:40:25:f3:
e9:8a:56:87:eb:79:2e:9c:8c:bd:8c:76:63:33:d0:32:df:00:
ab:ff:0e:b1:9c:bd:af:f6:7c:01:60:87:91:53:f1:95:b9:cf:
7d:de:93:f7:3b:1f:67:84:ec:d9:ed:51:45:b8:74:c8:ba:cf:
bd:b1:ae:b0:3d:8c:95:f2:a2:98:d1:1d:34:09:5a:11:25:80:
88:44:ca:d4:a3:4e:81:b2:a8:34:af:e6:79:71:b2:5d:9d:13:
ec:dd:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:18 2025 by rpki-client