Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
File: ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json)
Hash identifier: oQH/vBhYFjEci1Eh7/Ul5T38BvxCsN3Q4ojDmJiPCSc=
Subject key identifier: 0E:EA:68:4B:BB:55:19:5D:B3:CC:74:03:9C:15:8E:BE:B8:0B:A1:E7
Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
Certificate issuer: /CN=c92a961c87ac90518ea752f185bb65128aba2866
Certificate serial: 01965B03D25F56AD15DA5604C312F43CE16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
Manifest number: 01A5
Signing time: Tue 22 Apr 2025 01:01:39 +0000
Manifest this update: Tue 22 Apr 2025 01:01:39 +0000
Manifest next update: Wed 23 Apr 2025 01:01:39 +0000
Files and hashes: 1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: O/waXdMnJD6w9JgSrf/2nAIG5bfn8jDW5RvU5mfXMRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:d2:5f:56:ad:15:da:56:04:c3:12:f4:3c:e1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866
Validity
Not Before: Apr 22 01:01:39 2025 GMT
Not After : Apr 23 01:01:39 2025 GMT
Subject: CN=0eea684bbb55195db3cc74039c158ebeb80ba1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:34:48:6b:a2:6b:7b:64:7a:93:15:8f:3d:40:
2e:9f:bd:33:9b:7e:72:d5:53:b5:0a:2f:ca:de:fe:
a7:b4:8e:70:a1:3a:08:8a:7d:ce:91:1b:d8:da:88:
cc:18:5f:75:da:80:d6:5e:ec:af:ef:3b:e2:95:5f:
58:40:13:dd:bd:e1:69:f8:b3:89:ae:76:cf:10:b2:
e0:1b:39:10:9a:1d:98:0d:89:f0:67:36:56:db:a4:
bb:2b:17:2b:2d:13:7f:13:27:39:9f:6b:ea:f7:41:
91:17:95:49:ad:3c:48:a3:d9:0d:7f:0c:0d:61:bd:
c2:e4:bd:04:41:25:53:46:31:2b:7d:4d:eb:11:a2:
3a:3c:9b:f7:25:f9:37:38:e6:8d:35:1c:29:03:b2:
05:a5:d1:bf:58:1f:47:0e:43:6f:c3:cc:d9:66:94:
15:72:7b:67:f2:b0:09:89:e6:20:51:72:7e:93:9a:
bb:22:e6:99:79:0b:32:fa:2e:b4:09:c2:8e:d7:ed:
a4:bb:07:22:f3:b6:f7:c2:b3:15:f8:64:fc:b9:d3:
0a:31:52:a0:3f:b5:4c:6f:39:2d:a1:0f:58:a1:2d:
50:00:a6:63:01:f2:84:0e:dd:17:9c:d2:72:c6:fa:
98:9b:7c:19:cf:59:6a:5a:c3:58:d2:d2:6f:5f:7f:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:68:4B:BB:55:19:5D:B3:CC:74:03:9C:15:8E:BE:B8:0B:A1:E7
X509v3 Authority Key Identifier:
keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:b3:a0:30:49:33:e0:f0:c4:35:e3:ee:f0:db:b7:e6:96:
f7:e2:f7:a9:ba:8d:bc:8a:79:07:28:8d:7b:50:3c:cb:58:5c:
82:f8:c5:1b:58:22:cf:41:fd:c4:a5:f5:28:86:ad:de:23:56:
60:f2:a1:c2:29:cb:09:da:4f:0d:e8:37:1a:cd:ee:a4:36:29:
44:e5:ed:c8:98:54:bf:9d:ca:89:bd:76:11:43:f2:15:9a:44:
98:19:59:d0:8a:1e:d8:15:f6:46:26:1e:51:8c:f9:ce:f7:ed:
9f:a9:ad:02:a0:91:79:4a:9c:79:c7:77:b9:fa:70:fa:23:88:
10:b8:a2:8e:5c:10:af:b2:b6:1e:42:17:85:ff:a7:d1:ae:8c:
7b:16:d9:af:39:68:f7:e6:81:76:64:2c:01:9c:86:cb:6d:fd:
9e:1d:57:d6:e7:22:d9:e1:b2:57:74:f2:e1:98:e1:5a:29:3d:
9f:dd:ca:69:0b:78:b7:12:d8:17:aa:ef:53:78:d2:9d:8e:70:
cd:ae:f8:6a:82:51:88:e5:d1:26:4f:e4:55:55:e0:70:bd:db:
0d:3b:84:0c:78:91:c5:49:34:63:c2:b4:04:3e:a9:e8:04:d5:
99:65:61:f1:b0:0f:e7:29:e4:e0:d8:6a:ba:4d:ea:6c:57:55:
ed:db:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:13 2025 by rpki-client