Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: S9sQtIkgkS4Dk6oEjvr6niYb+9Lnd4VM77C/q4etTKg=
Subject key identifier: 60:A4:57:9E:31:5F:60:80:33:EF:AA:E8:6C:EF:E7:CD:B3:CE:B9:C9
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 0196760C416EBE2BFF59C3D5B01A06987170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 08CB
Signing time: Sun 27 Apr 2025 07:00:36 +0000
Manifest this update: Sun 27 Apr 2025 07:00:36 +0000
Manifest next update: Mon 28 Apr 2025 07:00:36 +0000
Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: hWDYHF/+9mQyMtE0SkA0ZLdKEkfAj4WlvxfrHVAmpsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:41:6e:be:2b:ff:59:c3:d5:b0:1a:06:98:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Apr 27 07:00:36 2025 GMT
Not After : Apr 28 07:00:36 2025 GMT
Subject: CN=60a4579e315f608033efaae86cefe7cdb3ceb9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:1b:12:46:25:9d:45:12:b8:7e:bf:97:e7:
ca:9c:ad:60:15:09:55:65:7b:f9:6b:5f:b7:53:bc:
04:b3:a6:62:1e:a3:01:92:4f:54:5e:ba:e1:73:1c:
ae:12:2b:0e:e4:c0:04:b4:86:e5:e9:21:3f:0a:57:
96:30:94:8b:d2:62:27:5b:cb:ea:58:f1:53:47:99:
e4:cc:ea:93:67:88:6a:15:08:bd:62:78:8c:09:28:
b8:a9:78:8f:39:f0:68:be:09:d2:f3:29:12:eb:3a:
ff:de:12:fd:2c:7f:74:1c:7f:e8:ff:70:0a:d2:d8:
25:f0:59:03:e0:cc:4b:a0:bf:04:11:66:af:cd:a6:
00:48:31:02:06:72:28:60:19:7a:a7:e0:0d:2e:ec:
e8:42:a2:d1:97:c1:32:43:55:f5:8b:7b:a2:25:6c:
16:fe:88:02:b4:8d:de:cc:66:73:c2:b0:88:56:e4:
05:a1:a9:8c:78:22:2c:33:fd:5b:b1:ef:41:a2:4c:
53:56:c2:2f:e9:ed:9e:53:68:6e:87:c8:6e:20:9b:
c5:ab:34:a7:a5:3f:57:1f:93:e8:4e:12:87:82:f1:
63:4f:2a:7c:64:75:b5:91:fe:59:bb:f7:cc:e9:48:
43:1e:c6:5f:72:74:65:6f:9e:c8:97:87:2b:91:60:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:57:9E:31:5F:60:80:33:EF:AA:E8:6C:EF:E7:CD:B3:CE:B9:C9
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e9:de:fa:44:4c:ea:2a:df:2d:93:c9:34:ea:9e:6d:f7:96:
d0:63:42:8a:7a:26:73:01:73:67:d8:01:39:c2:14:a9:ed:cb:
9c:7b:26:76:81:08:8d:a8:33:8e:64:f3:ad:79:4f:8a:ba:50:
7e:a6:de:e1:70:0b:75:fc:42:8d:7f:88:16:25:1a:9f:59:26:
ba:f6:43:64:62:cb:be:f2:e3:38:39:3f:f2:de:78:db:ea:ba:
a6:06:30:dd:83:26:94:9c:b7:d3:a2:66:65:11:42:53:61:3a:
94:39:f1:9a:bd:27:c9:e8:a6:73:a4:7b:3e:0f:ea:f2:ce:9b:
77:ce:d4:f9:e8:7b:4b:f1:74:27:7d:33:4c:52:b2:9f:f2:c1:
ae:2a:9b:3d:65:00:73:24:99:21:3c:91:d8:8e:f7:ce:fc:ad:
77:2d:cf:65:0b:88:d1:42:12:06:73:82:9c:4b:2c:da:50:e8:
0c:f8:4f:7b:40:f4:e0:90:a7:fc:12:fa:4b:8d:90:6b:a1:9a:
bf:bc:2a:5e:98:5c:6b:8f:9e:61:7b:4b:a8:40:7c:67:e2:d8:
cb:30:c8:3a:0a:1f:32:59:f1:23:57:9b:58:50:39:f9:7a:2b:
6d:8a:b6:f9:78:72:c1:64:dc:6f:fb:b0:e2:90:24:66:2d:fb:
4d:2d:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:31:42 2025 by rpki-client