Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier: jt91TOQ04Dt2WAKEMQmmOo8t0aC7KISJFt80ie67RUs=
Subject key identifier: 45:69:66:A4:CC:C5:07:D6:C8:E4:41:00:66:C0:7A:42:25:CF:1F:6F
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial: 01965BA7F31B30C6362ACB9DBF6B1FBE54F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number: 026B
Signing time: Tue 22 Apr 2025 04:00:55 +0000
Manifest this update: Tue 22 Apr 2025 04:00:55 +0000
Manifest next update: Wed 23 Apr 2025 04:00:55 +0000
Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: V+t6rPc2WOgKRUZ2iZEJwzgw7ncG4u9LsGoTqVcmI74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:f3:1b:30:c6:36:2a:cb:9d:bf:6b:1f:be:54:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
Validity
Not Before: Apr 22 04:00:55 2025 GMT
Not After : Apr 23 04:00:55 2025 GMT
Subject: CN=456966a4ccc507d6c8e4410066c07a4225cf1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:d3:92:62:8a:50:b0:f9:32:47:f8:35:d7:
a6:fc:84:f4:70:de:81:fc:1c:c6:22:77:c8:77:15:
a6:35:33:39:f6:7d:e8:c4:79:ef:71:8c:10:51:67:
84:e6:c8:e7:50:12:a7:d9:23:bc:51:41:e9:d7:01:
3f:6a:f7:fd:75:e0:01:3c:d2:0a:99:ca:2d:35:5c:
fb:bb:69:03:bb:e0:3b:11:30:64:6d:cf:d8:97:c8:
44:e4:38:dd:56:69:3a:e0:d8:c1:10:79:31:ad:be:
03:1b:92:f5:25:f9:ab:87:83:94:64:c7:80:ff:9f:
7c:d3:d7:47:38:76:8b:f1:92:ee:eb:0e:bc:57:ca:
d8:d8:22:71:e0:58:3a:d1:b8:a9:14:ba:06:cb:2d:
16:e2:a0:19:af:f4:1c:cf:79:af:85:3b:5e:12:31:
c2:9c:b3:09:66:87:0f:6a:7c:ae:0a:66:75:09:6e:
9b:83:82:cf:9d:37:54:61:2f:a8:87:bc:df:6b:db:
08:d5:29:dd:21:34:59:7f:93:e1:73:9f:0c:a8:29:
1d:b7:ef:f2:14:aa:20:00:af:4c:8e:6f:ac:bd:91:
e1:aa:b1:dc:e7:ff:1d:3e:48:9e:2b:9d:69:43:09:
91:5c:d7:02:5e:12:48:35:f6:4b:e0:04:cb:de:48:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:69:66:A4:CC:C5:07:D6:C8:E4:41:00:66:C0:7A:42:25:CF:1F:6F
X509v3 Authority Key Identifier:
keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:81:12:86:58:a4:cf:eb:93:98:42:d0:3e:d9:16:99:69:ea:
75:16:a5:03:29:76:ff:74:91:83:d5:f4:26:d1:e6:62:fe:e4:
c1:a7:6d:59:c5:eb:5b:5d:95:b0:5c:12:61:a1:bd:4f:be:53:
61:37:bf:c9:fd:8e:65:05:62:6c:7a:58:cb:6b:14:83:9f:87:
99:b7:e4:b1:84:a6:b1:cb:24:03:68:97:b5:5c:e0:68:0b:80:
4d:3f:20:44:6b:a6:f3:45:e4:c8:cf:41:87:08:24:ec:50:f7:
5e:c5:fa:95:ad:d6:6d:d4:1d:c8:af:90:06:df:4d:66:de:d4:
5e:63:ff:d7:3c:5d:11:0f:db:a8:fb:2d:a4:3b:51:53:99:51:
4d:4b:8a:b4:1f:fd:66:59:01:f7:1a:b7:00:ad:6a:35:37:90:
1c:05:f7:d9:80:a1:c7:fd:5e:5a:84:1a:4e:10:ed:30:8b:64:
ec:5c:11:69:8a:cc:d0:cc:80:27:dc:62:51:c0:7e:f6:8b:c7:
df:e5:83:a0:3c:69:8c:9d:67:1d:0e:0d:81:eb:f9:00:be:9e:
db:42:ae:39:f8:15:b5:b5:69:dc:eb:88:f5:ca:0b:76:09:45:
31:ed:68:b5:f1:1f:26:b0:35:eb:be:79:32:53:c4:ae:9d:3c:
2a:56:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:37:33 2025 by rpki-client