Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
File: yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft (raw, json)
Hash identifier: aqQYh2YcuhvxCc8qo1NQtWKQMvYcJwzH+MgVsQzG9yU=
Subject key identifier: 7C:26:94:DD:C7:1A:84:BB:44:62:17:97:81:1D:A6:26:8F:CC:60:C6
Authority key identifier: CA:1A:1A:62:C8:0B:0F:33:34:C5:DC:18:DC:64:B7:BF:97:88:90:13
Certificate issuer: /CN=ca1a1a62c80b0f3334c5dc18dc64b7bf97889013
Certificate serial: 0196561314D9252CC5793A295A407073D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhoaYsgLDzM0xdwY3GS3v5eIkBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
Manifest number: 0816
Signing time: Mon 21 Apr 2025 02:00:12 +0000
Manifest this update: Mon 21 Apr 2025 02:00:12 +0000
Manifest next update: Tue 22 Apr 2025 02:00:12 +0000
Files and hashes: 1: yhoaYsgLDzM0xdwY3GS3v5eIkBM.crl (hash: lyGJ/DuiPYSWAUYfgV1mXSjKJGPHk2RgnCj4PB5D2Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhoaYsgLDzM0xdwY3GS3v5eIkBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:14:d9:25:2c:c5:79:3a:29:5a:40:70:73:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1a1a62c80b0f3334c5dc18dc64b7bf97889013
Validity
Not Before: Apr 21 02:00:12 2025 GMT
Not After : Apr 22 02:00:12 2025 GMT
Subject: CN=7c2694ddc71a84bb44621797811da6268fcc60c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:73:b2:60:82:31:c8:7d:a9:eb:7c:1e:4e:
dc:f8:67:d1:58:fb:38:ba:d8:50:bc:84:31:33:0a:
b7:52:a8:12:de:46:c5:ea:25:fe:c3:ba:91:59:93:
00:30:27:a9:df:39:6a:ed:fe:3d:5c:26:01:4b:aa:
9d:79:8a:4e:f3:6c:78:ef:86:47:d3:6f:bd:8b:fc:
ee:0b:12:af:36:96:c0:19:a4:2f:d8:60:e5:0f:fc:
8b:c0:a6:bc:41:75:95:a2:26:4b:fb:5a:0d:a9:ee:
56:0f:fa:5c:5e:52:33:50:d2:30:f7:84:09:2b:ee:
87:3c:95:b9:47:8a:d9:9a:94:a0:d0:ee:3e:ec:81:
be:75:cc:d0:87:79:b4:d6:90:da:f8:0e:de:23:29:
ae:70:0d:d3:14:e2:f3:42:84:56:c8:19:e4:55:eb:
a8:e7:41:4f:63:d8:14:24:56:0c:fa:79:b5:7f:a4:
35:37:ef:f7:65:5b:c4:bf:c3:01:30:8e:ae:5c:76:
3b:d1:69:f3:d2:35:a1:81:ec:9c:2c:c7:bb:39:61:
4b:b8:03:ef:a6:a1:b5:b9:bf:9a:a3:04:c8:9f:fe:
b7:d7:4e:a9:cc:ec:3c:6e:a2:fb:5a:ac:b8:56:bb:
74:a1:3d:27:3b:59:5e:36:63:4f:5e:29:cc:58:04:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:94:DD:C7:1A:84:BB:44:62:17:97:81:1D:A6:26:8F:CC:60:C6
X509v3 Authority Key Identifier:
keyid:CA:1A:1A:62:C8:0B:0F:33:34:C5:DC:18:DC:64:B7:BF:97:88:90:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhoaYsgLDzM0xdwY3GS3v5eIkBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:48:8e:7d:32:43:16:a4:0a:8d:8b:2f:cd:f6:a5:3b:a6:91:
21:87:3f:ef:75:e2:d0:ba:7c:81:22:3c:81:63:27:89:a8:a0:
97:73:7d:a6:dd:73:5a:59:73:c4:64:bb:35:6d:40:5b:5c:02:
3f:27:b2:80:55:c5:9c:54:d7:b0:bf:4e:34:10:33:a5:c5:e5:
15:22:ba:c0:05:8e:12:dd:d5:0f:db:a5:88:16:8f:bc:b1:dd:
e4:fe:77:27:ad:84:00:f2:a5:65:58:b0:b7:01:9d:f2:84:a6:
f8:e1:a6:3b:33:01:00:50:ab:96:ac:fd:93:43:3b:71:77:a3:
f6:e3:09:ec:a5:13:6f:1a:f2:20:ee:42:2c:d7:e6:33:4d:81:
6e:76:3c:4a:02:2c:83:e8:5d:a0:87:d9:96:e0:9a:e3:3f:c5:
c4:53:0c:56:61:d7:b8:90:ea:e7:53:ee:d0:cc:e5:59:92:a8:
52:c1:3c:9d:50:4a:28:0a:ae:c0:35:83:c3:df:40:47:7f:82:
47:fa:24:63:dc:19:8b:1b:e6:bb:d0:9e:57:f6:5f:2f:ce:a4:
a5:a3:3e:a9:74:e6:77:ac:9d:42:0d:0d:0d:3e:87:16:da:9a:
79:70:c1:e9:75:d8:ad:54:59:ab:d3:d5:34:89:d2:88:05:b8:
7b:e4:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:32 2025 by rpki-client