Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: aqU9502SbossBKlKWHkIuCxrF8US3eK03AfOcSZBfWk=
Subject key identifier: C0:13:ED:F6:68:2A:2D:C7:90:8C:BC:0B:E4:B9:C8:DE:3B:C8:E4:D3
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 01964C6B684DAAE93B120F3D652197BA65D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0963
Signing time: Sat 19 Apr 2025 05:00:29 +0000
Manifest this update: Sat 19 Apr 2025 05:00:29 +0000
Manifest next update: Sun 20 Apr 2025 05:00:29 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: Bs/vl82cMyFdtyuS8TlY9/eex52roAAudtvtaspJqEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:68:4d:aa:e9:3b:12:0f:3d:65:21:97:ba:65:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Apr 19 05:00:29 2025 GMT
Not After : Apr 20 05:00:29 2025 GMT
Subject: CN=c013edf6682a2dc7908cbc0be4b9c8de3bc8e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:a3:63:ab:9c:97:37:c4:1c:5e:0d:af:a1:
b1:e9:26:91:21:92:40:0b:bf:14:d4:cb:10:92:13:
91:30:9d:85:df:4e:31:95:84:33:c4:18:eb:2c:f0:
43:2f:28:f2:5e:c4:1d:11:f3:db:35:fa:b5:17:74:
39:db:69:90:46:b0:90:18:c7:7f:af:b8:bf:5e:fe:
57:38:97:ea:1c:88:ab:9e:15:01:26:e8:52:63:8b:
1f:76:82:f0:f8:28:11:49:3e:52:3b:aa:23:1f:37:
ed:a7:50:89:5a:f4:a0:e3:e7:0d:53:ed:85:60:d4:
35:fe:86:69:35:c9:0b:57:4d:20:9c:1d:fc:47:a5:
f5:18:f7:67:e7:29:01:67:c0:fa:3e:49:4c:07:e6:
72:1b:7d:c9:f3:f0:45:a7:bb:30:8a:90:26:74:44:
a5:28:4b:48:d3:6d:c4:24:21:af:62:57:4f:8e:f8:
96:fe:39:e3:3f:f1:07:83:fe:9a:ac:f5:70:46:4c:
2a:f4:ea:a7:2a:e4:99:24:1f:a9:3f:9b:0f:21:b9:
0e:2a:7f:87:81:07:a0:fa:4f:d9:35:fc:3a:8d:bb:
2c:bf:db:23:c9:35:06:c6:3d:8f:53:cd:9c:1b:0c:
16:b2:4d:a7:bc:8c:d5:d3:db:46:25:52:a2:44:96:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:13:ED:F6:68:2A:2D:C7:90:8C:BC:0B:E4:B9:C8:DE:3B:C8:E4:D3
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:76:6f:b2:0b:ac:58:3d:e8:bf:b9:de:e1:0c:0b:7e:b0:e4:
e0:83:71:18:62:36:f7:8e:be:62:96:fa:98:f5:80:8b:44:d4:
16:45:cf:13:b2:ff:df:3e:10:6d:2e:b8:9f:c4:14:46:9c:d7:
e8:01:f8:ea:99:5e:68:98:08:b8:0c:32:93:31:e2:a7:27:53:
58:36:14:d9:b2:81:02:08:aa:11:f2:37:ca:b2:1a:90:6e:8c:
64:13:87:37:4f:7b:d5:02:d4:03:f9:f1:2f:fb:a4:29:af:02:
5e:e0:e3:f5:e0:a0:75:a7:f2:d3:49:45:9f:18:a1:32:16:51:
7c:46:bc:45:d2:49:13:22:f9:d9:77:88:dd:dc:dd:f1:9e:94:
9b:98:a4:47:58:24:eb:85:7a:73:0b:0d:3d:11:72:b0:65:f3:
fb:63:66:23:82:9c:e2:91:68:6c:49:6d:a8:4d:21:a1:49:81:
18:db:53:17:26:fa:39:31:8d:67:b9:2f:24:3a:4f:b1:7e:d0:
49:05:8f:f5:04:11:f6:70:a8:43:e8:cf:d2:fd:70:c1:de:52:
c4:87:d9:d8:7b:22:5c:b2:66:08:c3:55:f7:06:2d:e2:7e:ad:
81:b6:c0:f3:bb:86:fb:a2:a1:a2:06:11:e6:8e:6a:a8:af:fa:
28:c8:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:41:55 2025 by rpki-client