Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: RziNml4SrHlu4lyukVpqKVHBt2+wAB5YnUxFNdkwPHk=
Subject key identifier: 70:E8:6C:80:91:73:1D:B0:BB:6F:46:5E:8B:95:29:9A:7B:90:ED:18
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 0196760C2D3B757E5379D8421B273A7BE6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 0CCE
Signing time: Sun 27 Apr 2025 07:00:31 +0000
Manifest this update: Sun 27 Apr 2025 07:00:31 +0000
Manifest next update: Mon 28 Apr 2025 07:00:31 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: XL0DyjQtY6Gr5AkjLfEt/4bO8q9YPfG8KgzTmv5sOl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:2d:3b:75:7e:53:79:d8:42:1b:27:3a:7b:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Apr 27 07:00:31 2025 GMT
Not After : Apr 28 07:00:31 2025 GMT
Subject: CN=70e86c8091731db0bb6f465e8b95299a7b90ed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:22:5a:e2:14:77:34:f9:cf:0b:0b:20:6b:
2f:4c:30:19:d3:76:9e:bf:59:4e:0b:67:5f:e5:ca:
d9:4b:27:54:1e:1b:b4:94:12:08:0f:5d:fa:ce:a4:
07:b6:f7:b2:4c:05:21:5a:b5:48:c6:6c:72:0d:c2:
5c:f4:71:f9:4e:77:29:81:45:77:d7:1d:f7:eb:56:
a0:c1:ba:76:86:3b:aa:af:c5:c4:b6:e1:72:c0:46:
7b:02:6c:62:27:ba:3d:86:e9:73:f5:99:ab:bb:d0:
21:69:25:17:aa:71:34:5f:48:87:c6:a7:be:98:0f:
d4:82:69:cc:95:5a:fa:36:c2:2b:b4:45:62:e3:bf:
52:20:c4:69:51:c4:13:b3:60:5e:66:b9:5e:09:af:
c8:b9:7f:e3:60:1a:6d:f2:26:fd:06:f5:64:fc:1f:
7e:90:da:6d:1b:77:ce:1e:a4:3d:fa:e1:07:9f:93:
1a:a8:c1:cc:1b:6d:12:52:d8:89:88:15:63:41:f6:
a4:77:a0:9b:37:e7:94:ba:f4:71:09:85:43:28:4d:
81:6d:71:94:ec:47:2f:e7:a9:5d:38:a5:d1:44:87:
d4:b2:5b:73:ad:3b:15:d3:48:78:3f:d7:de:2e:43:
7b:af:63:26:c4:29:b3:ac:4f:ed:c6:a5:86:c3:d0:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:6C:80:91:73:1D:B0:BB:6F:46:5E:8B:95:29:9A:7B:90:ED:18
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:30:4e:a6:c5:4c:6a:68:31:0b:ae:89:0d:74:89:01:13:17:
b7:9b:5b:d6:a1:48:30:98:46:ba:70:90:e7:90:0b:88:ca:53:
3d:99:aa:64:58:7e:b6:a0:88:70:95:ef:a1:c7:28:46:52:2c:
57:e9:e8:99:9c:39:ea:bf:eb:62:21:43:1d:5f:e2:35:f0:1a:
23:67:bb:e5:9b:73:b9:9c:42:41:18:07:0a:c6:4f:93:80:55:
5b:bb:ab:2d:e6:47:fb:15:ac:29:9e:79:36:52:6d:17:04:ba:
f3:69:e1:74:57:be:a0:86:2d:8e:74:64:13:da:c1:cf:e1:e5:
1c:4b:97:2e:7e:56:99:91:4c:56:74:d9:98:92:2b:3a:27:6a:
b2:4f:a8:ff:62:15:59:1a:c5:73:04:86:18:d6:d7:d4:bb:4e:
b4:20:67:48:42:4e:40:7d:bc:6b:06:c3:5b:e1:1c:5c:38:ec:
98:a7:1c:84:94:94:df:ec:44:f3:35:ed:b8:62:d5:cc:0c:46:
86:88:79:4d:f9:30:df:61:6f:7d:04:e8:d3:1c:21:f8:5b:eb:
cc:bf:30:06:6c:10:2e:df:8c:33:c3:e4:13:80:2b:5e:2b:1d:
ed:1b:e9:2a:6e:cf:12:19:21:71:ce:25:46:1b:a3:5d:4e:76:
dc:74:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:58 2025 by rpki-client