Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier: zQWzYVABQWR+48RmymIECrRdrydTb7dWCMNgUd5fE9o=
Subject key identifier: 26:CE:51:18:8A:03:84:EF:50:AE:C5:AA:85:15:81:65:0E:51:D3:7B
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial: 0196759EA586B077BE348B542607E9A6D644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number: 0398
Signing time: Sun 27 Apr 2025 05:00:53 +0000
Manifest this update: Sun 27 Apr 2025 05:00:53 +0000
Manifest next update: Mon 28 Apr 2025 05:00:53 +0000
Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: xKFlY9jgmrUoxCus5/GwESaoG+YZ2CVr2IM5Qi52jro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:a5:86:b0:77:be:34:8b:54:26:07:e9:a6:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Validity
Not Before: Apr 27 05:00:53 2025 GMT
Not After : Apr 28 05:00:53 2025 GMT
Subject: CN=26ce51188a0384ef50aec5aa851581650e51d37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:06:5c:7f:4a:07:a0:03:7b:83:8c:1c:72:
26:fa:e1:33:a9:0c:33:1a:78:71:30:4d:f3:df:18:
54:48:fa:fd:24:24:59:c2:65:94:98:f8:4a:bf:30:
89:76:a3:7c:72:29:56:e0:f2:34:56:01:62:38:5a:
ce:58:7a:84:85:29:04:f2:6b:ea:12:8e:14:50:aa:
c5:02:03:08:a3:79:32:14:31:fb:7d:a0:5a:ef:a7:
7e:89:a1:1e:db:d3:81:ac:eb:35:ee:8c:cb:d4:0a:
f2:2e:dc:24:f9:8b:d5:aa:b9:21:fd:9f:4a:cd:23:
0d:d2:55:ea:39:ae:99:3a:70:6d:20:f5:6d:28:61:
38:b4:ce:c0:4b:cf:95:ee:49:df:12:be:b9:dd:ac:
71:e4:03:83:c5:6c:9d:8d:78:f5:2a:a6:e6:5e:36:
0e:43:fa:52:d8:18:d1:f1:ef:2a:51:7d:30:b0:22:
38:fe:20:5d:79:b7:66:bd:dc:4f:b2:e0:21:5f:1f:
28:84:b3:b2:73:1e:b8:5e:c4:e3:a1:4d:d0:99:96:
ba:f2:94:f5:ca:a3:73:86:02:cb:38:dd:93:9e:0e:
71:ad:eb:45:de:7d:6c:f4:39:e6:c0:50:ba:c9:4b:
d4:d7:79:f2:44:9d:59:94:9d:1c:00:d7:6e:b6:35:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:51:18:8A:03:84:EF:50:AE:C5:AA:85:15:81:65:0E:51:D3:7B
X509v3 Authority Key Identifier:
keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:8b:7f:03:21:91:e6:41:a2:37:b9:f6:16:e1:9e:3c:e4:
50:c9:b2:ae:31:99:2a:49:58:ad:d6:51:bf:fd:0d:90:89:29:
4c:c9:fe:61:a0:03:77:d9:c9:05:b4:da:73:6b:57:a7:9c:d0:
c7:b7:10:61:8a:2d:9b:e0:51:46:09:cb:b6:79:26:5c:19:80:
60:60:56:09:2d:7f:51:b9:f1:04:4e:03:06:25:77:dd:da:4f:
d9:95:be:21:e1:07:af:5a:4f:d0:28:56:fb:b0:be:55:c1:da:
ff:39:24:93:f1:c2:38:58:cf:ca:f1:e2:83:b4:77:35:9d:86:
f4:30:0b:20:5b:87:45:a6:dd:4c:55:3a:0b:5a:20:da:23:5d:
e0:ad:ac:8c:bf:6c:c8:2e:38:6c:c6:85:38:a5:45:e0:4f:19:
d3:98:df:56:a9:82:d9:3c:90:c4:e6:2d:20:82:0b:d7:ca:05:
36:a7:d2:1c:76:99:77:73:9b:a9:dd:50:85:4b:26:7d:5f:fc:
69:4c:ee:26:ab:a1:3c:35:71:37:3c:5c:42:e0:19:07:37:23:
6f:96:87:6a:8a:6a:b9:01:84:1c:74:aa:40:6d:89:96:ec:da:
20:87:fb:65:53:89:f0:ea:ea:db:f2:33:a2:c3:b1:21:85:59:
5e:a9:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:31:09 2025 by rpki-client