Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: YHtVBQw8hMBspY0ZtMS2MW11Obkd+PWKXrCX8W9HPb8=
Subject key identifier: 58:10:4C:6B:A3:4D:6B:28:3C:0F:9C:C4:5E:15:14:2B:57:E2:4C:66
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 01965D9629978480EBB7080809FD30F16777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1509
Signing time: Tue 22 Apr 2025 13:00:44 +0000
Manifest this update: Tue 22 Apr 2025 13:00:44 +0000
Manifest next update: Wed 23 Apr 2025 13:00:44 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: tLBiNb+S2APrSFrMNv7UauH0IQhXZrJeFlPO6Z1nrUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:29:97:84:80:eb:b7:08:08:09:fd:30:f1:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Apr 22 13:00:44 2025 GMT
Not After : Apr 23 13:00:44 2025 GMT
Subject: CN=58104c6ba34d6b283c0f9cc45e15142b57e24c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:e4:d7:3c:a1:d9:7d:0b:f1:08:57:16:19:
e4:97:1a:ea:4b:bc:d5:4b:2e:fd:e2:58:ad:11:fa:
3f:ed:b1:b7:08:2d:93:71:0a:0e:a6:6d:7a:a9:fd:
f5:57:99:62:27:17:b2:3a:82:a1:cd:d9:2c:77:13:
eb:27:d7:7a:8b:5a:f7:ae:96:23:be:6a:dc:6c:95:
b2:55:4e:7d:60:5a:c9:36:a7:04:15:11:4d:b9:d1:
6c:2c:7e:88:9e:4b:b1:1b:2d:31:0e:53:12:3f:8d:
e5:9e:87:f7:06:12:40:48:6d:f6:6f:33:04:62:51:
81:b2:14:ea:f4:f5:ca:26:6b:23:71:88:e3:01:c6:
42:9f:67:20:2a:e5:5c:4c:a6:ed:67:a1:9c:db:0b:
c2:e0:18:45:4a:30:95:5f:36:0e:bc:56:e3:5a:f8:
23:1b:c1:52:ec:da:c2:2f:09:e7:d2:a5:98:a6:09:
f8:7a:42:cf:21:27:a4:56:e5:a0:2d:ed:5e:1c:b7:
09:37:b1:77:36:24:7a:02:2f:0b:8b:50:2d:df:0b:
50:a4:d4:84:79:7f:a0:db:c9:61:5d:d9:5a:59:9b:
47:58:fa:47:20:d4:c0:fd:83:b6:f7:41:7c:19:74:
e0:fd:05:a8:fa:86:32:cc:48:c9:25:74:7a:a8:9f:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:4C:6B:A3:4D:6B:28:3C:0F:9C:C4:5E:15:14:2B:57:E2:4C:66
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6c:44:91:fc:bc:33:18:ba:ce:d5:5c:e2:ee:f8:c7:49:4a:
c3:3e:b5:b4:d6:e1:4a:65:c7:4e:3c:0f:de:33:88:51:a0:9c:
c4:0e:dc:e7:74:52:4d:26:14:99:c9:53:80:42:87:f1:56:9b:
88:c4:c6:28:32:cf:2d:cf:e9:29:2c:9f:6f:4f:9c:bd:69:a5:
ff:7e:38:32:f6:e6:46:c5:ce:2b:9e:af:44:63:85:0b:1e:8d:
f0:7d:64:a0:9c:aa:68:d9:25:4b:c9:ee:cb:2d:25:25:63:1e:
a9:08:c0:d0:d6:50:28:6d:98:4c:3f:30:7d:b8:ae:eb:43:dd:
16:b1:a7:25:09:63:60:96:52:3a:88:6f:45:b8:09:7d:30:d2:
a9:d5:ea:9d:e8:bb:6f:83:4b:dc:d7:bd:4f:aa:a7:73:97:99:
37:f9:02:5f:47:b6:21:7f:5c:b8:c8:63:a8:fd:09:c7:3b:c2:
ac:50:42:3b:0f:d3:5e:9e:d6:46:ca:92:53:4a:e1:99:a4:4b:
6e:b2:fe:1c:bc:a8:7e:59:d0:f3:f2:57:14:e0:8e:b8:fa:7c:
6a:f1:82:ba:37:bb:55:8e:34:d2:2c:e7:fe:79:cd:9d:1d:23:
2d:55:42:99:9b:29:f5:42:95:f0:ad:2a:b3:0d:3e:67:fe:fc:
c6:9e:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:06 2025 by rpki-client