Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: tvwssXzvdxfQBF4COecVsmoWu9aVEk1GCpxS6hg/p08=
Subject key identifier: 8C:31:6B:90:EE:89:F8:53:8F:39:37:77:96:79:17:97:F4:C1:8A:41
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019676432AC60E38F42A8E4691D30A79C75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 1094
Signing time: Sun 27 Apr 2025 08:00:35 +0000
Manifest this update: Sun 27 Apr 2025 08:00:35 +0000
Manifest next update: Mon 28 Apr 2025 08:00:35 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: sVqErca5s9DW9DO/Pku/w4gacH3FnSrR0j0uWPNquWw=)
2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:2a:c6:0e:38:f4:2a:8e:46:91:d3:0a:79:c7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Apr 27 08:00:35 2025 GMT
Not After : Apr 28 08:00:35 2025 GMT
Subject: CN=8c316b90ee89f8538f39377796791797f4c18a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:42:9a:00:0b:3f:cb:d8:bf:2c:04:ff:61:
d3:34:48:a7:52:ee:fb:3f:4d:07:d8:d2:f1:be:98:
94:44:ce:71:f0:8b:77:96:df:94:90:a0:e5:3d:67:
d5:a8:f8:92:0a:d0:c6:d3:a4:d0:4b:7a:84:a5:ab:
ed:e9:ba:38:b9:97:fb:5a:d7:b7:7c:d9:f6:6a:01:
7b:ad:8c:18:3b:de:2e:95:84:bb:7d:96:83:33:32:
27:a7:70:28:96:9f:fa:04:bb:db:79:f4:f9:e0:8d:
20:9e:a1:59:de:a3:c2:99:76:68:18:06:f1:52:5d:
2f:5a:7a:8b:07:f7:b9:f9:01:0d:46:ff:cb:c7:2d:
d3:e0:7c:58:10:f7:99:a6:da:a7:79:47:1e:de:e0:
06:e5:8c:48:be:72:eb:84:01:a0:0a:00:1f:50:b5:
a3:b6:77:36:11:0d:d5:54:68:b0:61:10:8d:86:82:
ca:91:95:93:69:a7:dc:06:a4:49:e6:3c:b1:6c:5a:
21:5c:88:92:b7:94:7e:f1:81:ab:0c:85:f6:cc:9d:
bd:dc:24:79:f3:18:3e:0a:9b:3c:94:07:90:99:8e:
c8:6f:12:a9:7d:5a:c0:4a:4e:f5:cf:c6:d5:b2:89:
e4:32:b9:35:21:5f:32:5d:19:a9:2b:35:ad:69:83:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:6B:90:EE:89:F8:53:8F:39:37:77:96:79:17:97:F4:C1:8A:41
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:48:52:c6:5d:eb:8e:1c:d7:88:4a:a7:a9:a6:03:1a:1a:79:
6a:22:19:9f:71:f6:94:9e:e6:fc:d5:10:05:da:74:6b:da:cb:
bd:e7:1a:3b:f2:c2:6a:29:e2:6e:63:28:58:3f:d3:29:8b:0a:
a1:c2:fb:58:24:87:c6:8b:55:21:a8:1b:18:a9:53:ca:76:16:
28:80:46:b7:c6:ef:ab:9a:b7:da:51:5c:e5:64:59:0e:cb:e8:
b8:03:c1:90:da:a6:45:92:2b:44:e5:e0:7a:a5:90:2a:6b:0a:
bc:45:16:57:4e:5e:99:03:f4:d2:e2:6b:b2:91:80:31:75:e1:
90:3c:97:2a:7e:ce:76:10:0a:e0:d2:19:58:c3:3e:e5:6b:f9:
4e:db:aa:cd:0d:cc:3b:c7:d6:40:b3:7f:b3:9e:8d:66:35:22:
58:53:16:96:1e:d3:62:c4:74:a6:2d:54:8b:d1:d2:4b:b7:a6:
f6:e0:26:d0:98:19:b2:d1:af:11:b6:ba:60:f7:e6:07:c1:f4:
54:d5:2b:14:a5:c8:0b:ec:2f:14:d1:2c:c3:f2:55:55:a4:13:
48:95:63:91:57:07:d9:ea:4d:cc:8d:8a:f1:a9:d8:62:5a:4d:
9d:3d:05:55:11:dc:fd:89:af:55:c6:b6:b0:16:4f:6e:09:53:
42:02:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:36:41 2025 by rpki-client