
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
File: Y31k1HJWO36HP1t5-RydP__D2_k.mft (raw, json)
Hash identifier: zvF+w8mJjoWbtBqe+Z8xGgesTf9F+OYW/QO+Wua7Ppw=
Subject key identifier: AF:19:0A:21:87:07:C4:6D:89:21:B9:21:AE:78:AF:D1:ED:A6:EF:42
Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
Certificate issuer: /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Certificate serial: 01964DEC22309CEDC169AA742FE6D951682B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
Manifest number: 0DB5
Signing time: Sat 19 Apr 2025 12:00:42 +0000
Manifest this update: Sat 19 Apr 2025 12:00:42 +0000
Manifest next update: Sun 20 Apr 2025 12:00:42 +0000
Files and hashes: 1: Y31k1HJWO36HP1t5-RydP__D2_k.crl (hash: C1Nx3yxPylVr9kkUJ4+EYdhn1sHzrhDVUv7LrcOPAGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:22:30:9c:ed:c1:69:aa:74:2f:e6:d9:51:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Validity
Not Before: Apr 19 12:00:42 2025 GMT
Not After : Apr 20 12:00:42 2025 GMT
Subject: CN=af190a218707c46d8921b921ae78afd1eda6ef42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:d1:b0:ad:d6:77:fb:ff:f4:fa:1e:43:53:
47:e5:a8:83:3b:26:15:dc:d5:78:c1:fd:94:e8:ca:
fb:79:7e:44:5d:64:33:b2:e6:90:73:3a:ba:60:63:
e2:b6:0b:44:7d:2d:10:6d:e8:90:4c:f9:20:b7:3c:
af:0f:02:95:b7:61:7b:ed:21:dd:a8:1d:a3:3a:fd:
69:54:ce:d3:11:55:64:d0:f3:8f:04:a3:79:15:99:
90:57:10:27:9e:c1:4a:3f:7c:40:76:9c:80:b9:9a:
b6:3b:bd:a4:e1:39:97:28:e5:24:c7:2e:23:3b:5e:
43:a6:b1:cb:d4:16:6e:99:b4:3c:d3:e6:44:1b:c5:
9e:30:8a:d0:0d:61:cb:e7:b0:52:7f:15:54:75:44:
7c:01:ba:a4:53:ef:1a:d1:7a:ac:45:e1:63:32:72:
c6:48:3b:d9:92:35:26:72:a2:75:6b:9f:05:60:8a:
ab:b7:1f:ce:92:f1:c0:5b:f5:ec:b2:9e:64:db:d4:
65:78:02:ed:db:71:85:b8:ae:2a:8b:c9:38:2f:3a:
20:ad:e0:c1:28:3f:12:a8:ce:b6:06:67:13:2d:a7:
a0:e2:3a:68:fb:77:74:ef:09:3c:13:05:b0:29:bb:
ba:98:4e:8c:84:b4:3c:0c:92:e1:81:cd:6c:39:73:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:0A:21:87:07:C4:6D:89:21:B9:21:AE:78:AF:D1:ED:A6:EF:42
X509v3 Authority Key Identifier:
keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8f:90:10:79:35:06:80:a8:bc:b9:14:47:f0:55:73:aa:33:
80:ba:e9:28:32:26:b8:e6:32:55:83:23:4a:a8:f7:4b:af:54:
65:b9:76:ec:f9:45:31:80:dd:3d:ca:36:72:90:98:11:71:f5:
08:f4:24:e4:bf:c6:02:75:84:38:d7:27:69:a7:1e:6e:dd:fb:
7c:79:74:2d:78:0e:c3:42:23:7d:ee:f3:b9:8b:1b:e5:ed:03:
57:65:3a:cd:bb:47:6f:7b:65:59:34:c1:71:dc:ab:27:de:03:
76:d6:8f:44:d7:69:45:88:e4:67:34:7c:76:61:62:92:01:18:
03:92:1b:94:aa:34:eb:6b:3b:8d:6b:10:d4:6d:be:a8:d6:0b:
d2:6e:20:4f:bd:49:d4:a4:d1:b8:71:00:c1:ac:dc:97:61:56:
08:6c:41:2a:25:c7:b3:4b:c9:66:87:6d:01:dc:3f:91:17:ca:
2f:ec:6a:5a:df:5d:92:88:da:cf:41:af:a6:cb:f5:5c:34:d0:
12:d4:4c:f7:12:c7:78:ee:d8:79:ff:3d:3c:0a:b9:3a:f3:77:
5b:1c:16:8b:4f:ee:9a:01:2b:7e:11:9e:01:34:11:a8:45:8a:
c9:74:48:1b:d9:0f:3c:56:31:0b:8e:ba:b9:cc:63:1b:69:70:
85:85:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:22 2025 by rpki-client