Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier: +lbPzmnRbNzfKV5iDhxT3t2n7NC3xSDaW0/GjWHRBRI=
Subject key identifier: 6B:52:79:EA:E4:3F:3D:F5:C0:8F:E2:88:69:AA:8A:0D:39:A1:3B:72
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial: 019675671FFA8A9A444EF19C1703AA8A1791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number: 1129
Signing time: Sun 27 Apr 2025 04:00:14 +0000
Manifest this update: Sun 27 Apr 2025 04:00:14 +0000
Manifest next update: Mon 28 Apr 2025 04:00:14 +0000
Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: Fc3YUAXFjCSezsN/pauCkBOHxXR5jSpw1LoE2fO5eEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:1f:fa:8a:9a:44:4e:f1:9c:17:03:aa:8a:17:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Validity
Not Before: Apr 27 04:00:14 2025 GMT
Not After : Apr 28 04:00:14 2025 GMT
Subject: CN=6b5279eae43f3df5c08fe28869aa8a0d39a13b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:4e:0b:3d:49:a7:a7:56:8d:b0:e0:60:98:
dc:e5:32:eb:a8:44:fd:02:08:29:fc:c3:52:4d:e2:
9d:41:ac:b9:be:c7:32:1e:e2:d5:80:9e:fc:2f:66:
61:b7:84:af:06:2f:c9:d7:3d:d3:f0:8a:e5:0b:8a:
22:e5:8b:8d:ef:63:50:c2:1c:90:49:6d:1f:25:c9:
27:5c:fb:73:ce:72:de:e5:ed:f4:b2:6f:76:aa:d0:
b0:14:43:7e:51:e0:dc:24:cb:3b:8d:6c:f1:7e:66:
4d:59:a4:a0:25:c4:59:dd:ce:9e:82:d0:be:52:a1:
15:ca:fc:6f:3f:d6:76:e1:c6:a7:ef:59:8b:12:1e:
ea:ef:a1:be:b3:03:8b:8c:e2:d0:85:bb:02:e5:98:
79:08:21:90:1d:8e:2d:6b:a6:1e:d7:07:cf:5e:6d:
2f:60:f1:d5:ad:98:fa:67:a6:7f:db:4d:af:48:8c:
1e:38:57:1f:94:42:4b:c1:03:d2:08:92:36:12:86:
f6:76:84:e6:95:3b:a3:bd:ac:df:4f:e1:47:30:ec:
9b:3e:ff:bc:b9:58:cb:a5:24:9d:8c:ec:7d:f7:fa:
8b:65:93:d6:c1:6d:30:9d:11:2c:0d:b8:52:1d:37:
0a:c2:07:cd:f8:50:3a:9d:f8:03:9e:ea:54:bd:f1:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:52:79:EA:E4:3F:3D:F5:C0:8F:E2:88:69:AA:8A:0D:39:A1:3B:72
X509v3 Authority Key Identifier:
keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3d:a6:35:51:2d:29:88:d0:52:2a:49:4c:53:58:63:af:8f:
43:c5:4e:03:b5:7c:89:2c:ed:6e:f2:2a:c1:01:11:6e:53:65:
9d:1e:49:9d:2f:e0:47:68:14:bf:83:b0:b0:af:ed:41:9f:91:
3e:b2:be:18:d2:a0:8a:de:93:b1:22:e2:bd:64:67:57:17:9b:
87:73:9d:43:b7:a6:8b:fd:fa:f0:1e:d5:14:7b:18:96:25:81:
94:75:d8:13:ec:00:ef:52:d5:b9:d6:fa:ff:df:f9:9c:b4:e9:
74:55:15:66:a4:b0:2c:f9:fa:c4:7d:8d:5c:df:39:d7:16:61:
89:0a:88:a5:00:4f:2e:10:ac:fe:e6:24:52:b1:3a:97:34:af:
d8:61:35:81:a5:5d:10:5b:36:86:76:8b:6d:bc:a5:af:97:44:
ce:d5:a0:92:82:41:4c:62:3a:92:a0:2a:ae:1a:f1:2d:55:93:
e9:9a:d9:55:3c:65:26:ae:aa:23:6b:cf:0e:56:15:59:10:7c:
bb:1d:5b:88:22:56:d1:5e:c3:b2:9b:1c:00:02:20:cf:09:a0:
bb:ea:79:89:41:20:30:39:51:e1:60:03:41:c8:c4:99:7e:ee:
0e:4d:cc:61:c2:0e:99:77:85:68:15:fa:46:9e:04:6d:13:55:
bd:8a:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:47 2025 by rpki-client