Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: L973KaVzlH7WUcVKIlNtiRxCiGPM7F2oh7ED/1xj/Ps=
Subject key identifier: EC:AC:30:19:8A:56:0B:E5:45:65:67:18:25:C2:50:6E:28:6B:19:CA
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 0196741E898B76E6B9620FC92A58DC0082A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 149C
Signing time: Sat 26 Apr 2025 22:01:20 +0000
Manifest this update: Sat 26 Apr 2025 22:01:20 +0000
Manifest next update: Sun 27 Apr 2025 22:01:20 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: JLGbEHeW8J+syzXXYcmNtuGpdF8Ma6cj9G3H2P6ZVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:89:8b:76:e6:b9:62:0f:c9:2a:58:dc:00:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Apr 26 22:01:20 2025 GMT
Not After : Apr 27 22:01:20 2025 GMT
Subject: CN=ecac30198a560be54565671825c2506e286b19ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:43:57:79:89:1e:2e:77:9e:22:66:61:fe:
dd:a0:70:af:77:61:69:1d:33:c6:da:0f:2d:77:a5:
66:5d:b6:29:66:03:6c:f7:b3:7f:d5:cd:a7:c6:75:
8e:41:e8:2a:a6:f2:c4:db:f3:65:3a:4d:63:16:02:
09:2f:31:0c:b7:76:62:04:69:84:97:05:89:a4:bb:
b3:0a:5a:89:45:3c:d2:37:70:32:9a:27:c7:62:f2:
43:97:c4:17:64:e9:b2:e5:7c:fa:79:bd:60:be:c1:
e8:88:2a:2c:92:95:d0:98:03:b7:55:eb:b7:fe:4a:
b8:0a:77:21:fb:e6:b9:10:fe:83:82:a7:a2:26:98:
3f:ec:ac:0b:80:a7:ff:9e:18:7a:59:7b:f3:c6:e5:
ad:b7:2e:4d:ae:d0:4f:e0:b7:96:ef:a5:c8:e1:ce:
a0:ea:0d:e5:ab:a0:2f:f8:3f:06:f9:54:d8:f9:d0:
70:2b:cb:42:23:c6:b0:a0:3c:64:f3:84:72:c0:9d:
90:ad:b9:0b:65:cc:09:ad:9e:dc:8e:e4:83:e7:80:
70:05:1d:4e:78:b8:f2:c2:b4:d5:a9:da:88:c8:5c:
59:04:0a:ea:55:60:ce:72:d7:cd:23:bb:2e:cf:f6:
d1:75:d7:fe:92:92:3c:02:e6:83:11:96:2e:a1:94:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:30:19:8A:56:0B:E5:45:65:67:18:25:C2:50:6E:28:6B:19:CA
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:37:46:f3:4a:f5:58:c6:3f:10:f5:39:2c:56:cc:e1:5a:f5:
21:41:ba:51:19:11:64:ea:dc:6d:dc:56:32:76:a7:8e:c0:66:
8d:89:48:37:48:41:bc:fe:72:95:df:26:d9:6d:20:bf:20:c1:
5d:e3:95:b5:e4:51:ad:fd:61:67:1b:47:34:06:2a:f4:64:47:
e9:81:72:8c:3e:51:18:43:4e:f6:62:f1:5c:1d:a8:6a:f0:3d:
a0:74:5d:e4:98:98:00:5b:53:16:06:2c:94:1c:88:b6:9a:8a:
17:67:96:d2:56:4d:02:27:e5:af:1e:87:c9:45:62:24:08:31:
93:03:15:8d:fc:92:63:13:66:c5:b0:89:75:4a:3a:a7:87:48:
12:df:c0:0d:53:6f:82:61:90:93:f6:bd:25:f1:d8:7c:28:a3:
9c:cc:95:37:66:37:d9:55:d9:d1:4c:30:07:e7:b1:01:0d:6e:
e8:50:ee:cd:4b:e4:87:38:86:d2:05:78:d5:41:68:be:4f:c0:
a0:d0:97:18:bd:f9:a7:22:88:0c:9c:61:8c:d4:a9:7b:1a:d0:
8b:83:67:f9:be:18:92:38:91:4d:8a:f6:d0:6b:37:c5:25:bc:
fe:2e:cd:bb:18:70:f3:89:f8:43:20:44:f6:b4:9c:03:fc:ea:
e3:d7:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:46:22 2025 by rpki-client