Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: YXG8Tz8l9GY6Qmj+I2kb9veix3u41c3P/GWQVsV9jh4=
Subject key identifier: E6:E9:01:35:AF:03:4E:FB:66:CB:80:DC:31:B4:13:B4:4C:2E:20:A7
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 01965793D0FA48402CDCCDB4BF0B9568FB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 0D72
Signing time: Mon 21 Apr 2025 09:00:27 +0000
Manifest this update: Mon 21 Apr 2025 09:00:27 +0000
Manifest next update: Tue 22 Apr 2025 09:00:27 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: CS+1mqqdNb80tpzhm05Ch4wWu2HZWTBLd7U9vpnEnhw=)
2: v1PRoA5ebsh_hlHI-WdJ9oH7RYY.roa (hash: g731f8Kk7ZRmBzHdANv/XJyJm7Gc4rKXDwNwW3MJnpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:d0:fa:48:40:2c:dc:cd:b4:bf:0b:95:68:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Apr 21 09:00:27 2025 GMT
Not After : Apr 22 09:00:27 2025 GMT
Subject: CN=e6e90135af034efb66cb80dc31b413b44c2e20a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:92:6e:28:59:f5:38:23:f0:31:6d:ec:9f:
ee:1f:28:87:ce:de:e4:4a:5f:07:f0:2d:ab:17:d0:
2d:6f:09:31:80:17:2c:24:14:3a:02:00:59:55:ad:
c9:15:57:50:5f:ef:41:bc:1e:20:fc:5e:89:8b:25:
26:47:56:00:2d:97:63:e8:42:58:dc:f2:9b:8a:bb:
46:a3:76:ef:1b:cd:e3:6f:da:b8:5f:ff:88:27:f9:
14:c3:09:d7:8a:36:72:a8:68:10:ee:43:f6:5f:13:
1d:54:12:53:8e:eb:68:da:9d:b9:ad:04:b4:24:94:
f2:c2:e2:8c:c9:e1:48:f4:f1:1b:4f:37:a1:e8:fa:
2a:a7:a2:fb:54:96:34:70:c3:9a:9e:66:51:11:85:
4d:0c:87:2a:79:45:20:fb:c5:e2:3d:ec:35:55:3c:
82:a2:82:e3:a9:8c:b4:da:19:b4:25:fa:74:ec:91:
78:bb:3e:ae:26:ca:d4:b7:78:07:2f:37:ef:16:bd:
03:4e:db:56:f8:7f:b7:e2:4d:d5:a5:18:22:6c:59:
d4:bb:00:a6:e3:67:ca:07:a4:49:2b:4e:cc:65:8f:
f0:11:9a:07:42:c4:78:d3:6f:07:6f:79:92:1b:a0:
04:c5:71:a2:70:eb:43:eb:0e:46:4f:d4:2e:55:81:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E9:01:35:AF:03:4E:FB:66:CB:80:DC:31:B4:13:B4:4C:2E:20:A7
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:76:a6:1e:7c:da:19:3a:db:9c:c4:22:f2:d9:0b:c7:a7:ca:
b4:a5:b9:a0:fc:83:4d:10:04:58:d9:f0:cc:24:2e:7f:53:2b:
0d:e9:41:05:e5:ad:08:aa:b3:ce:dd:a6:8e:bc:9b:3e:c3:1c:
01:73:3e:ae:18:55:7c:87:52:cc:0b:87:49:e5:7a:0e:7a:2f:
83:b1:01:c0:ff:1c:f3:f6:3f:ba:a8:a8:b8:61:c9:f5:51:08:
04:5b:d6:72:d8:1a:73:cc:ee:68:4e:41:19:ca:bc:f2:d6:b8:
9f:96:dc:07:b9:03:75:d1:11:67:89:58:1f:e5:17:f0:bd:7a:
1c:1b:72:bf:14:2e:a0:f6:ec:ad:81:cf:03:0b:44:04:55:19:
91:19:3e:d9:e3:5e:52:d6:62:e5:3e:34:94:c1:45:74:61:96:
40:3d:82:32:c9:98:52:70:c9:de:a1:0e:41:94:af:69:bd:32:
bd:19:6e:fd:9f:62:33:b0:8e:f5:89:7f:86:10:5c:73:a3:9a:
8f:d5:86:9f:bc:91:ae:f2:19:8c:a1:4b:8f:09:61:f2:8e:e1:
e2:32:f7:3e:6b:b2:fd:87:0c:48:e7:9e:d3:e9:c7:77:36:19:
14:26:b8:95:19:c2:20:bc:bd:f7:ee:b4:ca:2c:21:66:8c:5f:
39:fc:9e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:08 2025 by rpki-client