Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: SMAnaD5wYWxA2zsytIhV88I7v8VjCYYpwrSRUdYZ0qs=
Subject key identifier: 93:7F:72:4A:C2:38:D6:6D:CC:25:82:22:24:4B:83:5E:C3:1C:D9:C4
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 019655DD1FAA1F45E7F19DF3BE947B72E525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0BF2
Signing time: Mon 21 Apr 2025 01:01:16 +0000
Manifest this update: Mon 21 Apr 2025 01:01:16 +0000
Manifest next update: Tue 22 Apr 2025 01:01:16 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: +7ye/1HAainQb6LopnX+eaxvAYil4z1bhA9ZUlPKjTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:1f:aa:1f:45:e7:f1:9d:f3:be:94:7b:72:e5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Apr 21 01:01:16 2025 GMT
Not After : Apr 22 01:01:16 2025 GMT
Subject: CN=937f724ac238d66dcc258222244b835ec31cd9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:76:f3:1f:fd:d0:1b:cc:ac:5c:52:78:c6:
93:1f:36:85:08:8d:1f:5f:ab:ec:1d:40:b1:16:2f:
58:70:38:f5:83:e6:26:60:4b:e0:87:da:2b:77:1f:
8e:40:bf:3f:ea:81:81:00:6b:0a:00:38:c6:97:b2:
c2:8b:a9:31:5a:8c:eb:3d:ba:c9:74:ff:64:c9:c2:
4e:5a:b4:46:d8:73:97:a2:75:ea:12:f8:31:82:17:
f7:7b:5c:1e:6d:c4:a3:2e:4d:70:aa:83:ea:1f:17:
8d:8d:1e:ff:53:1b:6e:5c:a3:e7:62:e1:49:33:83:
10:b0:bf:87:43:a5:87:2f:d6:aa:c0:f9:f2:a0:fc:
37:e5:52:2c:23:d6:f9:90:93:b7:94:73:cc:cc:18:
be:cb:77:b1:d5:29:9b:77:4f:ac:cc:3c:80:a4:f8:
a6:54:1c:55:2c:b7:04:f8:01:af:86:65:de:29:de:
6d:0f:b7:05:ba:a0:3c:0d:5c:26:48:76:cf:2b:43:
2f:80:5e:ee:72:ea:fb:e1:72:12:8d:b4:f4:48:8b:
b4:cc:04:fd:31:35:91:ce:b4:06:15:0d:a5:5d:27:
48:3f:5b:2f:35:bc:f5:8f:1f:aa:35:b3:75:9a:ca:
e3:b8:8e:c2:73:fb:89:cf:1f:da:55:b7:b2:85:4c:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7F:72:4A:C2:38:D6:6D:CC:25:82:22:24:4B:83:5E:C3:1C:D9:C4
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:64:b9:b6:fe:b5:4f:c1:1f:ef:4b:71:d6:5a:13:22:43:0d:
93:71:81:63:f5:32:37:8f:0b:38:43:b1:77:b6:cb:aa:a9:e5:
e2:ea:fc:76:9a:21:e2:0d:0e:46:b3:2a:98:6d:b5:c5:7d:09:
6c:a3:81:32:8b:af:17:6b:2d:58:b1:c8:23:bc:a9:06:f3:3d:
03:1f:72:57:92:d9:96:ab:15:a9:15:81:a4:22:d4:d3:90:3d:
df:25:1e:94:98:3c:ec:a2:e4:83:b2:ea:b6:60:9e:8c:8b:7d:
36:7e:be:78:d3:22:97:2b:2c:c0:21:f0:90:c2:44:8b:f4:66:
63:33:da:57:a0:56:bb:33:4d:22:41:95:56:50:d0:5b:2d:d8:
76:b4:ec:f4:89:82:9d:cd:84:a2:3a:28:e8:45:0e:01:7d:27:
93:ee:f5:47:05:76:f3:93:35:e6:e3:c6:bf:4c:37:09:77:07:
6f:16:06:6c:5c:92:88:7b:1b:a4:0a:12:ed:fa:b4:54:97:c1:
40:35:41:75:73:a0:c8:72:78:46:1b:26:99:27:f5:67:2a:04:
53:08:2f:8c:33:32:b6:b8:2a:b1:74:fb:ea:a6:41:74:ce:4b:
69:ba:d6:5d:db:7c:92:c7:52:56:b2:40:30:1a:37:c1:5a:b0:
1f:65:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:47 2025 by rpki-client