Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File: Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier: EIqZ6LSxaXBk84QtRuxhQxrwK/CxPsEaN/Zvc5WlIXY=
Subject key identifier: AD:BD:07:2E:43:E3:19:0F:96:DB:B7:F6:1A:6D:9A:D5:73:17:38:41
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer: /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial: 01967D210CAED9DBD9FB990BCCA27135CD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number: 08DB
Signing time: Mon 28 Apr 2025 16:00:40 +0000
Manifest this update: Mon 28 Apr 2025 16:00:40 +0000
Manifest next update: Tue 29 Apr 2025 16:00:40 +0000
Files and hashes: 1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: 7bNsX4jqSxrhrGJPCsyl8kgXBnvefN9yzqJ8wfSkZzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:0c:ae:d9:db:d9:fb:99:0b:cc:a2:71:35:cd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Validity
Not Before: Apr 28 16:00:40 2025 GMT
Not After : Apr 29 16:00:40 2025 GMT
Subject: CN=adbd072e43e3190f96dbb7f61a6d9ad573173841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:b8:4f:ac:5e:ab:8e:c2:46:bb:62:a9:e5:
88:77:4f:bd:1c:9f:bb:d2:f2:75:fc:ed:8b:d4:44:
5d:c2:f2:37:4c:c3:33:9c:40:a1:32:a4:9a:d3:1f:
b1:57:cc:4d:cb:a8:31:a3:34:dd:e7:69:03:ed:b2:
23:10:6a:71:af:67:19:91:db:b6:a1:2d:84:83:ad:
42:73:3e:9c:aa:29:fa:a4:36:7e:3f:c4:69:2e:64:
33:76:52:61:19:6b:60:d4:e3:c5:aa:de:3b:da:49:
d5:d4:7a:4d:f1:ad:2e:6a:d6:9b:25:c6:27:a2:c3:
95:c2:85:5c:12:ae:5e:1e:47:a2:90:d9:7d:c9:7c:
89:94:3d:bd:f6:58:14:45:f0:54:c9:a0:c8:8a:b6:
82:1a:fb:91:9d:79:8b:9e:37:ee:38:b8:d2:55:ce:
18:44:cc:a2:87:ca:12:bf:62:ac:85:cd:91:66:e7:
9c:7b:82:44:a3:a2:5b:7f:a6:26:c1:fd:c0:18:1b:
1b:79:98:a4:9f:ca:9f:c3:67:01:b5:5a:fc:93:c2:
b4:8e:db:c3:c2:91:65:69:9f:b4:fa:0f:ac:ce:a4:
c2:45:fc:72:4c:eb:41:3e:3f:8c:7c:8d:ba:5d:22:
a9:9f:74:95:43:f8:c3:3b:b2:5c:c5:07:71:55:9e:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:07:2E:43:E3:19:0F:96:DB:B7:F6:1A:6D:9A:D5:73:17:38:41
X509v3 Authority Key Identifier:
keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d7:38:8a:28:ae:5c:c5:89:eb:32:2d:9b:9e:aa:a6:0d:35:
cb:e0:93:ee:16:a4:25:30:75:40:87:2e:56:ae:7f:00:13:14:
e4:11:6c:55:85:88:b0:60:af:bb:a1:59:5d:a4:20:c1:ae:2c:
6d:67:42:31:bb:df:26:94:99:da:3e:30:ae:ec:d8:52:a2:0b:
aa:82:29:c3:22:c0:1c:56:f6:52:38:20:86:03:b5:5c:28:6d:
20:a3:f7:ee:ac:78:54:4b:93:8a:b2:db:9a:e0:2d:78:78:73:
0e:df:7e:d5:94:32:15:4b:e0:df:00:76:fe:01:9c:ad:3b:7d:
96:2b:3f:66:18:92:01:69:2e:c8:d1:4e:44:bc:d1:2b:ba:bd:
91:6b:7c:8c:9f:16:08:ce:72:89:43:ff:60:44:d8:ed:ac:96:
43:40:dc:4f:81:9c:93:07:50:60:13:6c:d6:ee:11:40:2f:e9:
a5:e4:67:15:90:31:85:a6:fa:41:2f:07:00:79:68:57:e3:9f:
6d:7d:21:04:77:c0:0a:29:ee:37:8a:8c:62:8a:ff:9f:8c:55:
de:da:1e:3d:91:ff:65:3b:11:7a:f9:54:83:67:56:ef:49:45:
26:65:d3:bd:e7:07:2c:4b:3b:78:ec:77:d8:f1:61:8d:8b:03:
b5:ea:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:10 2025 by rpki-client