Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: gknLt6rShLGbyO/qd6Tb70cbswmjeqpK2kGzOVkiq4Q=
Subject key identifier: 0C:62:F7:36:41:94:6F:1C:CE:63:3B:98:8B:A3:A0:87:DB:8D:6B:15
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 0196591454ABBBB16CCA351BC5E9E3CD3892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 16:00:26 +0000
Manifest this update: Mon 21 Apr 2025 16:00:26 +0000
Manifest next update: Tue 22 Apr 2025 16:00:26 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: XjCBcXJwAq2+qX36ogUmGY6oVNiOdlKzIns5kcXrOrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:54:ab:bb:b1:6c:ca:35:1b:c5:e9:e3:cd:38:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Apr 21 16:00:26 2025 GMT
Not After : Apr 22 16:00:26 2025 GMT
Subject: CN=0c62f73641946f1cce633b988ba3a087db8d6b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:95:ec:e1:dd:dd:d8:e3:0f:46:85:17:49:
48:30:9b:2f:06:6b:09:c6:d0:25:d4:ad:e8:ed:36:
4b:dc:e3:e7:ad:d7:b9:78:ca:f6:12:cc:9e:97:59:
e0:68:72:cc:b7:42:08:73:5e:e8:26:a2:1b:19:02:
d4:e3:cd:42:c4:2c:b7:65:11:ef:ad:9c:0b:a9:be:
b3:3a:eb:89:0b:a0:0d:2a:f7:4b:d9:cc:3c:92:db:
ab:b2:ee:a1:b0:0d:a5:39:0e:73:3c:10:eb:c3:18:
df:16:78:43:97:db:9f:39:54:88:cf:92:d4:e0:4e:
10:e2:04:b7:f4:39:0e:5e:02:56:76:5b:e8:4f:7f:
9c:c5:b3:bb:3c:7f:cb:c4:61:da:b9:30:b4:34:64:
57:1c:3c:c4:75:11:6c:b4:8f:11:4c:69:69:00:11:
16:d5:2e:13:4b:f7:88:91:70:dd:e5:7b:02:12:65:
7a:2f:e0:9a:e1:9f:a5:d6:f3:4a:18:94:ea:b3:5c:
c2:00:da:23:31:26:34:43:44:6c:1b:af:b6:5c:58:
8b:0c:a9:e2:f2:f3:74:34:ad:ee:b9:a8:f0:39:54:
9e:5d:76:47:e2:81:a2:92:83:d4:65:8d:b8:a3:f5:
a9:bb:a8:51:8b:ac:70:df:f5:7d:f1:6c:6e:9f:a8:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:F7:36:41:94:6F:1C:CE:63:3B:98:8B:A3:A0:87:DB:8D:6B:15
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7b:fa:7f:39:1c:8e:94:5b:df:86:62:12:25:98:cd:80:72:
95:4b:3a:18:df:d7:1b:62:f6:00:5f:65:20:a0:5f:d6:19:01:
48:80:96:8c:cf:3b:c4:c4:48:48:ba:87:b3:c5:f9:01:01:da:
1b:9f:b0:cc:25:ba:0d:35:7d:05:9b:3b:90:62:f4:09:a3:a4:
8a:58:17:39:84:1c:6f:01:6b:34:bd:e2:67:c1:16:cc:01:3c:
7c:48:c1:05:7c:4f:e3:a1:3e:1a:c5:e8:af:a8:e6:c5:b9:af:
6a:2c:90:a5:e9:bf:13:01:f0:78:cf:5c:61:00:48:86:2b:41:
4a:98:07:15:af:d0:65:36:9a:13:81:34:eb:cb:a5:e6:45:f2:
88:03:b8:5c:a1:c8:d8:ba:d3:89:6c:37:6d:3a:cd:c1:51:07:
71:28:76:a5:9f:7d:71:f4:45:03:fd:b9:13:0d:60:25:99:4e:
7d:eb:98:fe:fe:5b:f0:36:01:ec:12:53:f8:94:cf:a0:65:92:
5e:cb:da:5c:df:dc:b5:fa:9e:f8:a9:44:29:28:fe:7a:da:bf:
65:d9:7a:59:6a:ac:cd:5f:5f:94:0b:28:e8:b2:c1:90:08:a0:
d6:ff:de:6c:83:50:33:34:af:d0:81:75:35:8a:8d:66:f6:53:
47:87:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:35:07 2025 by rpki-client