Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: Be2k+2WqnNTmHrBpv5iPXxtn2MAEvIV8bkPYQoVBP8E=
Subject key identifier: 62:2E:56:1A:88:B0:96:55:83:6D:1B:A8:1D:20:42:71:AC:75:B7:F9
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 019685801053AFC39BA5A8BA4F312BFE3124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0C1C
Signing time: Wed 30 Apr 2025 07:01:24 +0000
Manifest this update: Wed 30 Apr 2025 07:01:24 +0000
Manifest next update: Thu 01 May 2025 07:01:24 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: BXYIXvSJAUfD4tKajAvOJgCr+bNCGzl6lawu1YAY4Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:10:53:af:c3:9b:a5:a8:ba:4f:31:2b:fe:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Apr 30 07:01:24 2025 GMT
Not After : May 1 07:01:24 2025 GMT
Subject: CN=622e561a88b09655836d1ba81d204271ac75b7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:99:4c:15:83:ee:83:1a:bc:ab:01:b9:f7:
c6:18:0a:5c:b7:cc:65:28:34:86:87:d2:c8:cd:71:
4f:a0:ee:a6:10:8b:51:88:f2:21:e7:b9:a6:b0:93:
3a:26:08:fa:36:bd:0b:8f:ac:ee:9b:41:d6:5c:ef:
ef:cb:7c:e7:24:bb:e5:aa:2a:da:f3:e1:81:27:b2:
93:54:5a:35:3e:eb:3c:82:87:05:6b:ea:dc:07:44:
52:36:19:f7:b2:85:d5:40:b3:4a:39:80:da:33:9d:
1f:04:e2:93:2a:65:d6:d1:41:35:40:28:36:fd:d9:
8f:37:bb:52:3b:a5:2f:a1:e4:04:d8:c6:17:07:25:
64:cb:63:3f:71:00:dc:31:ca:e4:dd:53:ec:90:e6:
b3:5e:c1:31:5a:cb:b9:10:8b:b3:dc:67:9c:eb:ba:
d6:50:b5:6c:be:cf:17:26:ea:65:07:bf:aa:df:57:
1b:c4:19:bd:e4:e3:36:6a:6c:24:cc:32:9c:5a:2d:
9c:f4:a3:50:b4:7f:3b:73:6a:f7:a5:27:59:7c:70:
44:7b:ff:b0:d4:6b:76:a7:15:e3:03:dd:26:d3:ad:
03:1a:d2:f1:4f:c6:27:76:ba:64:75:dd:00:3d:9b:
8a:58:a7:be:51:37:0b:85:0b:ac:d3:95:e5:b1:89:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:56:1A:88:B0:96:55:83:6D:1B:A8:1D:20:42:71:AC:75:B7:F9
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ab:80:c6:d7:1f:65:49:3b:14:81:39:22:31:2b:00:4b:cd:
c8:97:5d:e8:54:63:22:47:3b:f6:d5:56:e9:0b:64:14:ce:ac:
37:61:c6:39:99:e3:31:5b:e0:4b:e3:ea:45:73:f4:b2:fd:db:
77:a2:e2:f9:b3:a8:49:89:52:13:da:d6:95:1a:bd:f3:e2:78:
9f:13:8e:0d:cd:d6:69:d3:34:dd:36:16:66:fc:5c:7d:83:5c:
ff:45:d8:5f:b6:4f:2e:85:0e:33:12:b3:99:24:41:c0:a8:85:
1f:04:4b:62:b4:54:cf:a4:2c:9d:00:3e:03:e2:6a:4b:b3:4b:
2b:e1:4a:ed:21:19:df:38:14:3a:ad:02:32:2b:c8:51:b6:fd:
b0:4d:40:af:2b:90:49:74:ba:18:37:aa:cc:02:ca:15:c0:88:
c2:86:69:8e:46:b2:22:06:cf:6b:01:c5:70:a3:a1:57:a0:aa:
da:a9:1f:ec:40:82:29:be:8b:a0:78:a5:9a:71:7c:31:5a:fc:
48:fa:cc:1b:54:06:eb:48:b4:5d:7d:17:d8:70:86:41:4c:04:
9c:95:e9:0e:35:fc:aa:15:43:df:72:29:b2:22:1c:f8:94:2e:
d9:7d:6d:93:c9:f2:33:fb:1f:7d:6b:2b:3d:79:ec:92:ec:82:
1a:9d:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:14:01 2025 by rpki-client