Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: Pfkq4UUT+FmsfqlvxpRFVxc9VT+A62Wl2Ln/Fg+Bgh8=
Subject key identifier: 5E:4D:6A:A2:89:8D:68:65:59:18:56:5B:C9:F3:99:CF:5B:AC:C7:FB
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 019657CB9963904375BB7918E827150F181D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 0E7E
Signing time: Mon 21 Apr 2025 10:01:22 +0000
Manifest this update: Mon 21 Apr 2025 10:01:22 +0000
Manifest next update: Tue 22 Apr 2025 10:01:22 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: zGZHSJnarVO5H0U6PmBOkWbi9HCV8ac45jndI6ZV28I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:99:63:90:43:75:bb:79:18:e8:27:15:0f:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Apr 21 10:01:22 2025 GMT
Not After : Apr 22 10:01:22 2025 GMT
Subject: CN=5e4d6aa2898d68655918565bc9f399cf5bacc7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:c8:a6:4c:ab:92:5c:6d:5d:64:bf:bd:f1:
dc:c5:b7:dc:70:b0:5f:17:83:48:9a:f9:03:b5:47:
02:de:10:ac:f2:a9:65:e5:86:ca:58:fc:ae:85:e3:
88:b2:db:5f:e1:d4:77:f5:34:d3:06:bb:16:fe:d6:
b3:60:ad:12:3d:20:8c:7b:d2:cd:c6:f1:b7:3f:05:
5c:ce:3c:d1:43:e9:76:f2:07:99:d8:c5:3f:c7:6b:
bb:ef:f3:8c:51:ba:03:09:cd:3f:55:60:18:99:fd:
29:5a:2b:28:87:7a:52:bd:bd:b4:e8:94:da:92:02:
52:c5:7a:2f:ee:d2:93:d3:03:78:e8:3a:c2:4a:c2:
23:35:14:92:89:af:6d:b3:00:d0:a3:cd:27:3a:be:
49:ef:29:8b:d0:2d:dc:e8:d1:4c:cf:ad:c1:66:a9:
96:72:d1:45:e1:38:df:f4:8c:fa:2a:dd:38:41:fa:
7e:c5:1c:05:33:da:f8:d6:8b:04:f0:93:b4:41:2a:
3e:6a:65:57:5e:ac:2e:5c:47:bd:5b:1c:8c:65:74:
a5:a5:e9:30:8d:32:83:c3:1b:61:4d:5e:d7:72:9e:
c6:a7:2c:15:0b:d6:cc:eb:1a:42:96:33:ac:c6:3e:
07:a5:6b:f3:f1:57:1b:30:c6:50:be:e2:de:52:74:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4D:6A:A2:89:8D:68:65:59:18:56:5B:C9:F3:99:CF:5B:AC:C7:FB
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:14:50:0c:d4:a9:b7:b7:fb:69:79:a5:08:3d:af:15:a1:0d:
05:cb:8e:2a:f2:81:54:3b:28:7a:58:71:d2:99:c8:2e:fc:93:
81:08:d4:d1:e4:b1:07:34:26:a4:d2:b4:e2:7d:21:95:5e:ed:
fc:74:e5:85:13:99:ba:42:c8:a5:4b:56:35:0a:81:e3:1d:00:
cc:f4:a3:6c:d5:96:62:ef:32:20:27:36:72:73:09:1e:b1:04:
05:33:6e:6c:f5:db:96:da:b4:53:41:56:74:f4:9e:98:dc:fb:
5a:e4:90:bd:d4:d1:89:dd:5d:49:fc:f5:b3:7f:66:1a:b7:27:
66:3b:83:28:8a:16:1b:a3:22:60:45:62:02:94:af:8f:94:51:
81:d4:fb:f2:92:5d:78:5a:0a:9d:92:3c:be:80:a3:e5:51:c3:
40:0e:36:78:17:1f:8d:ae:9f:36:e4:a7:19:ea:56:bc:5f:f2:
86:62:0b:9a:dd:9e:ef:eb:2e:ec:e0:f5:df:d3:90:af:67:01:
19:b8:b1:31:f2:63:3b:c2:a7:12:6c:75:e1:0d:21:53:c4:16:
92:80:88:2b:bc:6f:e3:76:d3:dd:c0:b3:91:d4:60:05:6b:b7:
27:77:ef:fe:60:79:f3:74:bd:6b:40:3d:f3:21:e8:98:e6:11:
c9:d5:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:18 2025 by rpki-client