Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: KKBJP31B5/GKO5s67Bq18RC88mEGctmdFSUOh64yowU=
Subject key identifier: F1:20:81:DB:75:D3:7D:0E:AF:16:0C:C6:27:A8:54:69:34:5C:61:FD
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019676B0DFCA41A75E015172956760667F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 10:00:24 +0000
Manifest this update: Sun 27 Apr 2025 10:00:24 +0000
Manifest next update: Mon 28 Apr 2025 10:00:24 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: 5h3Wh0Ck6EPoukAiRR3F5KVliMgH6KQaZp10ayjuOUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:df:ca:41:a7:5e:01:51:72:95:67:60:66:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Apr 27 10:00:24 2025 GMT
Not After : Apr 28 10:00:24 2025 GMT
Subject: CN=f12081db75d37d0eaf160cc627a85469345c61fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:4e:30:a0:39:3c:31:d0:da:27:f6:9f:4a:
8b:34:f4:f5:21:36:93:e0:a9:c4:90:1d:9d:53:5c:
1c:9a:b9:5f:48:71:5b:42:cb:5d:a3:6b:47:54:cf:
67:ed:77:c5:20:b2:65:82:73:d3:1a:22:69:52:e1:
8c:50:31:b8:42:37:80:2c:21:f4:9f:21:98:00:3f:
32:f1:f5:ff:03:f0:2e:8b:1a:95:74:9b:13:45:3c:
fa:bb:e1:77:a3:27:4f:df:af:f8:38:61:b4:19:d0:
df:bb:55:70:3c:12:c1:ec:57:ab:8a:4e:fe:cc:64:
af:d8:1a:e3:8a:dd:9b:1b:54:f0:e7:d6:5e:04:14:
16:97:7d:33:91:d9:3b:ec:bc:c1:c2:99:30:00:4a:
bc:aa:55:55:fd:97:c2:d1:2f:ff:44:79:83:70:8c:
8c:fe:46:b4:4c:ec:24:42:7a:a0:f9:11:e5:ae:50:
70:60:16:e3:c6:13:95:55:76:e6:da:d2:01:07:33:
75:c2:5d:96:96:1e:83:2e:d6:ee:69:49:9f:f0:f9:
4f:91:80:c2:76:38:ff:ef:f9:cb:63:66:46:5a:37:
dd:1b:ca:da:2a:d9:48:f5:60:a5:14:ab:1f:21:70:
f9:7d:0d:57:c7:c7:ac:6a:1d:0b:6b:16:6c:56:0d:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:81:DB:75:D3:7D:0E:AF:16:0C:C6:27:A8:54:69:34:5C:61:FD
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:79:6f:68:38:7d:e9:89:fb:32:21:3e:07:05:31:a2:de:c1:
b4:06:b4:96:d0:51:b6:03:1f:91:d8:14:0b:45:5d:93:36:c2:
9a:c9:db:83:c0:d2:da:7c:1a:48:f5:4b:b4:17:b2:8b:40:31:
3e:29:fa:ab:c4:d5:54:5f:e4:df:44:34:af:7e:e7:3e:17:b7:
83:6c:dc:d8:bb:f7:6b:ae:e4:23:68:97:93:cc:a0:0f:a8:1d:
78:bd:2c:e5:5b:14:56:75:67:db:7d:f9:38:33:c4:52:59:d0:
e0:be:9f:95:93:e6:bb:f4:8a:8a:e3:09:6d:cd:46:91:86:ca:
7d:d7:01:6b:c0:59:28:e4:e2:7a:66:66:6d:3a:07:f3:61:6f:
5c:58:36:1e:ad:15:a5:11:4e:a6:38:7a:5f:63:93:90:42:eb:
4a:dc:09:ee:59:c2:30:91:f6:e5:b1:a2:7b:4c:18:30:3d:ea:
3e:eb:aa:9d:89:31:e1:56:81:8d:4c:99:94:bb:e9:f2:4d:0a:
5a:c6:4a:03:8a:ad:95:e3:94:28:66:c3:2a:0e:42:d1:73:55:
e6:dc:0d:f6:68:a4:01:07:25:12:dc:ff:c5:e4:bc:f1:71:e1:
eb:9b:67:f7:3d:63:7b:ad:e7:25:34:b8:f8:da:85:34:68:78:
b3:3c:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:59:19 2025 by rpki-client