Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
File: yrjSpYc51mIvFaU8wb1U-dsIAcY.mft (raw, json)
Hash identifier: qNkQxk+PqPrLj4V6zosFmuM0aeS9t/z2AdOnY6/UO80=
Subject key identifier: 29:70:83:86:BA:0B:3D:4D:36:30:B2:1B:BC:30:AC:0C:73:7A:23:87
Authority key identifier: CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
Certificate issuer: /CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Certificate serial: 01965BA7934692FC1F52D69971FAA4D51F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
Manifest number: 0338
Signing time: Tue 22 Apr 2025 04:00:30 +0000
Manifest this update: Tue 22 Apr 2025 04:00:30 +0000
Manifest next update: Wed 23 Apr 2025 04:00:30 +0000
Files and hashes: 1: yrjSpYc51mIvFaU8wb1U-dsIAcY.crl (hash: bjjDjPVO8mucBVMjxaU9qmsxaHQD6njIIrUqo/ns/vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:93:46:92:fc:1f:52:d6:99:71:fa:a4:d5:1f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Validity
Not Before: Apr 22 04:00:30 2025 GMT
Not After : Apr 23 04:00:30 2025 GMT
Subject: CN=29708386ba0b3d4d3630b21bbc30ac0c737a2387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:63:44:cf:25:df:65:b7:07:b2:0a:e8:99:
e6:34:17:ee:25:e2:d7:0b:f9:c9:5f:ee:fb:a9:a4:
47:4f:df:bb:6f:b5:42:f9:a1:ee:b5:0c:57:a0:ba:
72:f8:00:fa:ab:ba:c4:53:e4:cd:1d:e6:b3:e3:8b:
ae:cf:b9:16:58:b4:85:27:dd:19:98:b9:46:5d:7d:
77:0c:35:86:19:99:e8:f9:7b:c7:39:bf:80:aa:60:
fb:29:d3:b0:60:21:01:9a:a1:ab:cf:24:75:aa:41:
47:4d:21:f2:48:50:ef:e4:ca:77:36:25:f5:41:db:
3f:f0:fb:78:5d:83:37:7f:e7:06:ad:6a:09:04:6c:
52:de:d1:f3:a1:c2:59:32:6e:fe:5e:2d:69:19:26:
ac:d0:54:2a:25:97:c7:93:d9:ec:c7:11:6d:0b:6c:
bf:9c:ac:62:e1:1e:76:f1:8a:25:11:4d:75:8e:85:
db:09:06:53:10:2b:e7:71:64:09:f2:d5:1a:c8:b7:
ca:77:3d:b1:7f:4d:8a:e1:01:96:1c:e4:bd:a9:3d:
c0:e1:75:1e:85:7a:e7:04:80:6c:43:73:c0:99:47:
b7:a4:b1:c8:59:ec:80:ca:d3:dc:cf:fe:70:ef:b0:
9a:20:d0:1e:23:14:de:26:ee:1c:df:00:fd:0b:60:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:83:86:BA:0B:3D:4D:36:30:B2:1B:BC:30:AC:0C:73:7A:23:87
X509v3 Authority Key Identifier:
keyid:CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:86:c7:16:93:c5:94:5a:17:ff:d4:89:24:55:e6:57:9f:cb:
9c:b5:85:96:8e:18:6f:0d:06:46:bd:0f:46:9b:5d:d4:03:3a:
85:a4:c8:5b:9b:0e:95:22:e7:ff:1f:a8:41:25:11:97:9e:31:
27:49:9d:37:fb:5c:11:79:34:fe:36:17:c0:f3:89:dc:51:6f:
ef:e8:1a:67:fc:9b:23:85:a2:ec:d0:0d:8d:c3:cd:79:3c:85:
4b:1b:49:50:0f:b2:fa:4d:b7:f4:98:1f:bb:f1:1a:01:33:21:
97:ce:65:e5:86:5f:68:70:7a:fd:6b:7c:ae:55:db:0c:88:a4:
2a:34:70:4c:11:52:d3:d5:86:a5:33:75:69:ee:4b:15:0f:21:
b2:ac:1d:20:0a:49:3e:2f:5f:2d:0a:7d:2b:20:7f:b3:f2:71:
c7:6c:5a:e2:24:fe:9a:2b:b9:d8:8d:41:32:0f:02:78:60:28:
0d:35:4d:60:54:2d:8c:a0:c3:7d:f9:77:83:cc:ba:1d:9e:c0:
d9:f4:7b:78:f6:f0:86:14:18:dc:50:b1:04:78:2e:7e:5f:eb:
ab:66:d4:06:bf:48:0a:d7:a7:a1:bf:47:89:a1:9c:5a:58:b7:
22:64:22:c3:7b:1a:f7:16:ee:cc:ec:70:72:8b:b9:ee:44:04:
f3:a0:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:32 2025 by rpki-client