Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: 2IilbKluxvbJ6AsMsQniBxS2eb+Jk/y8ggC6CQwdfE4=
Subject key identifier: E0:DE:5D:75:C7:A2:85:A8:B7:DB:9C:08:93:A7:56:F3:D1:F6:60:CB
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 01965C1591C25AA5157957EFB4D0ACEC9728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 11
Signing time: Tue 22 Apr 2025 06:00:39 +0000
Manifest this update: Tue 22 Apr 2025 06:00:39 +0000
Manifest next update: Wed 23 Apr 2025 06:00:39 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: 714fNw6J0s56mQYWZ+vTm3bNYDDMWIHrWyuAWVwtUA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:91:c2:5a:a5:15:79:57:ef:b4:d0:ac:ec:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Apr 22 06:00:39 2025 GMT
Not After : Apr 23 06:00:39 2025 GMT
Subject: CN=e0de5d75c7a285a8b7db9c0893a756f3d1f660cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:28:6a:4d:1a:b6:f5:ac:87:3f:de:d4:64:
93:b0:1e:46:5b:2d:54:49:41:84:37:bf:a2:e3:45:
c4:c9:af:1d:6d:6a:b9:d9:b1:10:5a:48:08:db:20:
23:28:31:49:e3:97:e4:7d:de:28:d4:0e:31:77:60:
78:a1:fe:20:e6:13:19:75:43:2a:df:f7:e7:d6:62:
5e:af:63:6e:53:f0:a9:9d:92:31:84:08:47:96:f7:
64:13:3f:da:6d:a2:b0:26:21:ce:cf:c0:59:2f:4b:
b4:7c:e3:1a:83:a5:d3:23:c7:ff:ca:49:58:18:bc:
40:9e:2b:68:2c:65:f3:ad:54:b9:8b:fd:09:bc:c0:
7e:73:21:06:8f:89:af:da:ca:65:17:f7:4e:99:6c:
d7:da:74:2e:52:c3:1a:13:e8:07:ee:36:52:32:28:
1e:e9:e8:12:e5:32:6b:e2:2d:b2:36:b4:4e:39:e7:
7d:b7:f6:9c:e4:a9:a9:c8:a1:40:03:49:43:ca:37:
14:9b:1a:97:36:78:61:10:74:9a:0c:6d:ad:23:79:
1e:26:9f:0b:d4:01:b7:bd:67:95:7e:2c:58:fe:ff:
6b:61:34:02:81:ba:b7:bc:19:95:4e:cf:1b:21:74:
df:02:2b:ac:a5:08:1f:5b:65:d7:ce:1e:ee:88:6f:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:5D:75:C7:A2:85:A8:B7:DB:9C:08:93:A7:56:F3:D1:F6:60:CB
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b9:22:db:c7:0a:b4:87:7f:6a:26:2c:3f:b8:e2:8d:98:e9:
cc:2c:4f:5d:c6:65:15:2e:ee:06:d7:6f:da:f9:36:36:b9:86:
fa:de:b7:4d:f7:c6:2e:14:ab:2e:f7:d6:f5:ff:17:7c:b8:93:
ef:4f:9b:3e:17:b2:e6:a5:d8:d3:27:01:f4:35:f5:0a:0a:90:
48:a6:79:fb:ec:d0:6f:68:5c:61:e8:34:d9:8c:f3:d4:4e:b8:
db:33:35:32:2c:74:2b:14:b8:73:3f:d2:44:20:15:d5:7f:76:
52:ac:b2:3c:7f:82:45:51:16:b8:2a:15:da:68:40:14:4c:07:
59:c8:7c:09:9f:44:20:a7:14:63:cf:65:db:fb:cc:41:5e:df:
c4:dd:ad:cc:09:1f:97:8c:87:e3:f6:a8:4e:a5:34:98:eb:2b:
e2:9e:e0:b8:8d:dc:20:2e:f4:9f:f7:c5:93:0c:4c:a8:c6:b4:
18:b1:5d:30:50:cf:5d:df:32:dc:27:04:46:99:f7:fc:f5:51:
28:44:2f:5e:74:c6:81:43:f9:e4:40:3f:08:65:39:aa:cc:94:
c1:92:6b:ab:83:78:d9:35:68:a9:fd:31:a9:39:34:93:03:29:
78:30:77:df:eb:86:d2:96:13:f2:33:9d:23:be:39:36:57:57:
b1:a2:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:28:59 2025 by rpki-client