Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: vhHTV+OahLQ/6a0Uh2J1L0O8LS192Cpvj9gIfa8KWgU=
Subject key identifier: 77:75:0C:F3:4B:6A:38:F7:6C:F3:B6:C1:47:A5:54:5E:40:CA:98:DC
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 0196549327FEFD250A63CC2B3CAF1782EA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 0CA1
Signing time: Sun 20 Apr 2025 19:00:52 +0000
Manifest this update: Sun 20 Apr 2025 19:00:52 +0000
Manifest next update: Mon 21 Apr 2025 19:00:52 +0000
Files and hashes: 1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: MJjd18tq/vVMBXgw0nez4e0+/sC/kyCjHtMjf5xwVCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:27:fe:fd:25:0a:63:cc:2b:3c:af:17:82:ea:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Apr 20 19:00:52 2025 GMT
Not After : Apr 21 19:00:52 2025 GMT
Subject: CN=77750cf34b6a38f76cf3b6c147a5545e40ca98dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:7c:a3:27:90:54:49:e0:89:18:04:d5:12:
f2:6e:a3:54:26:00:1d:58:e7:39:58:e6:67:66:6f:
68:01:b8:73:b2:3f:35:29:f2:35:21:03:45:fd:eb:
97:89:79:86:3a:2b:85:2a:96:b7:1b:27:ef:a2:3b:
d4:c9:e8:ea:0d:fe:bf:0b:3e:d1:d5:19:0e:e9:0a:
45:5f:9b:32:15:2d:e2:39:80:9c:31:c6:0c:3c:0f:
11:f3:d1:d1:40:37:d8:1b:c6:d1:f7:24:56:03:f6:
cc:01:75:56:63:85:56:12:85:68:e1:9c:88:7f:3b:
64:34:7b:c9:52:a9:84:b2:78:d2:b8:bb:05:32:a8:
88:25:69:6a:67:75:2d:5a:81:dd:84:99:81:56:bb:
e8:53:c2:d3:e4:2b:ab:06:02:33:5d:22:5f:17:db:
66:2d:81:18:e8:9d:d2:64:6d:5e:c0:78:40:ec:a9:
14:da:46:2b:b7:0f:e3:67:e2:63:f7:98:79:a2:7d:
22:ac:18:fc:05:7e:83:6f:5d:18:19:bd:ed:84:40:
79:e6:9e:10:cc:85:82:eb:3d:91:46:f7:16:e1:f6:
22:d8:a0:0a:30:8f:21:3d:30:20:6c:47:ae:6c:ef:
4c:18:aa:d5:ae:12:3c:75:98:08:8f:86:50:72:b6:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:0C:F3:4B:6A:38:F7:6C:F3:B6:C1:47:A5:54:5E:40:CA:98:DC
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a8:40:84:3e:1e:bc:16:c3:86:5e:94:cc:dc:e1:24:4f:99:
e6:6c:ee:13:5c:30:12:45:b9:ce:b4:a5:78:17:e9:50:86:fc:
c3:2f:19:56:41:1b:dc:8a:ea:8e:3d:69:82:1f:2b:9d:3e:0a:
57:1a:25:b6:e2:fc:a6:a5:3c:9b:3c:8e:36:e8:a5:1e:63:f0:
2c:1a:de:a1:79:dc:5d:a7:9a:9b:f9:3d:04:df:de:ff:46:91:
14:78:05:71:c6:54:78:ec:f7:17:58:e4:35:e6:6f:3b:1c:28:
ad:bd:c8:0b:76:2c:7d:fd:3b:bf:53:c4:3d:ae:85:16:bf:3a:
5e:ca:f8:66:c3:08:35:b0:e8:96:ba:a6:76:27:cc:f7:a7:07:
00:36:e9:ec:54:cd:23:9d:c0:71:8c:a1:83:ba:9e:8a:50:d0:
5b:b0:5e:22:b5:02:f2:89:8d:2a:63:54:7e:a5:de:95:50:3e:
ec:25:d9:28:f8:65:55:65:4b:45:50:9d:0a:c4:05:4f:1b:80:
1e:ec:7d:26:79:c9:86:99:4b:25:cc:d2:1c:63:09:8e:0f:e7:
39:e4:a2:66:7b:25:50:f9:5f:f6:8e:67:0b:26:b2:30:e2:72:
cf:43:25:5d:cd:70:f9:0d:6d:a8:c1:d2:12:86:6b:d8:ca:83:
88:f3:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:55:32 2025 by rpki-client