Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: WJGtQT8yH3hDMy0r//0GsQvFyWG50jbVnem7e7DzXZY=
Subject key identifier: D3:E4:1D:9D:EC:2C:2F:85:22:6E:59:26:A6:17:2B:93:30:3F:74:CE
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 01965613C5F0F4E63F50AD784E2346FDB3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1220
Signing time: Mon 21 Apr 2025 02:00:58 +0000
Manifest this update: Mon 21 Apr 2025 02:00:58 +0000
Manifest next update: Tue 22 Apr 2025 02:00:58 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: aTTLjB1cnucwJhxJ1TyBeDuwZw/7TqSzCuOv5/Y/c98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:c5:f0:f4:e6:3f:50:ad:78:4e:23:46:fd:b3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Apr 21 02:00:58 2025 GMT
Not After : Apr 22 02:00:58 2025 GMT
Subject: CN=d3e41d9dec2c2f85226e5926a6172b93303f74ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:55:4c:80:d2:da:a7:56:14:68:62:e3:0a:
7a:67:80:7e:59:f3:7a:53:46:66:65:c3:31:f8:54:
5b:83:70:68:fc:80:ed:0f:46:1f:35:12:3d:31:14:
ab:da:53:60:c1:a9:15:fd:80:da:89:22:fe:6e:3c:
c2:4b:55:c8:17:03:32:2f:16:8f:66:18:ce:38:b1:
25:97:4f:5b:c3:b2:71:26:09:48:54:a9:67:17:b7:
c6:64:3c:42:08:55:2c:e4:5b:c7:66:04:f1:95:82:
64:ed:22:0f:66:9b:ef:ee:c2:76:41:89:6b:a9:08:
8a:ac:e8:fe:d6:c1:b3:3b:23:f8:e9:22:ae:95:86:
98:3c:51:1e:79:3a:53:59:57:95:21:3e:55:7f:78:
b5:55:a9:26:1b:b2:e1:80:96:82:b2:22:dc:99:f5:
ad:c5:35:9b:32:8b:29:65:00:17:bc:61:c9:c1:c1:
8c:23:67:96:7b:66:57:89:17:5b:ac:2b:c6:c9:ff:
49:8e:d3:bc:bc:d1:46:00:bb:91:cc:d2:14:b1:73:
cb:d8:ef:18:32:bb:fe:dc:0c:83:46:e7:c6:d7:4c:
90:e0:8c:3f:0b:be:ff:e8:fd:e4:4a:0a:ed:04:4e:
80:7d:a8:f1:b8:87:9a:63:a2:f9:a8:19:e5:d0:46:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:1D:9D:EC:2C:2F:85:22:6E:59:26:A6:17:2B:93:30:3F:74:CE
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:57:c6:60:63:ce:1e:d6:b0:10:bc:20:ea:78:a7:5b:1c:e3:
5c:2b:dd:9b:ad:b5:fd:cd:b4:65:f4:88:48:42:41:49:71:e2:
ca:73:b2:d5:2d:13:97:50:37:c6:7f:b0:4e:93:be:09:49:7a:
9c:a5:bd:c1:65:b0:2d:0b:6d:e3:1f:92:af:47:6d:6d:56:e2:
7e:c1:34:48:6b:dd:64:bf:5f:be:ec:3e:40:02:dd:2d:20:c0:
5c:eb:94:5b:bc:f5:ae:77:db:4c:bb:0d:6b:7c:54:52:e9:71:
de:1a:b2:d6:77:c0:08:92:35:7f:bf:ec:30:54:75:73:92:c0:
22:18:c4:e7:cb:a4:1e:1e:05:d2:b2:6a:01:07:9d:83:f5:5d:
22:dd:c5:dc:08:81:db:94:10:44:e2:43:5c:c7:55:3d:76:0a:
a0:d7:be:5e:43:1b:eb:63:47:01:58:69:40:c2:62:0c:51:a2:
43:1b:b0:6a:2b:57:52:05:57:4e:7a:0f:c1:af:13:cd:11:35:
85:2a:47:7c:10:fc:c3:2c:a8:0e:96:1f:c3:fe:47:ce:b7:f0:
56:36:10:42:19:71:c4:9c:1c:d9:87:0f:74:46:54:11:7f:fe:
1a:c4:d1:cd:99:96:85:b5:91:fc:b7:24:e1:3f:9a:63:ab:4e:
c9:1a:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:36 2025 by rpki-client