Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: Hyf0q3ef65yOPIanMkNG+Kl4RlLRTE2oOLvf0hQjps0=
Subject key identifier: 99:BD:91:96:C0:1B:43:FE:9F:6C:1D:A7:FB:01:F7:B9:CB:C5:EE:B9
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 01963840C1FA921B9866F7EA4811C1E553E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 0FDC
Signing time: Tue 15 Apr 2025 07:01:30 +0000
Manifest this update: Tue 15 Apr 2025 07:01:30 +0000
Manifest next update: Wed 16 Apr 2025 07:01:30 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: bR/+8RE8D95lXqFsoWJwgHK1C00mNGX8GL4PXIyFTcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:40:c1:fa:92:1b:98:66:f7:ea:48:11:c1:e5:53:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Apr 15 07:01:30 2025 GMT
Not After : Apr 16 07:01:30 2025 GMT
Subject: CN=99bd9196c01b43fe9f6c1da7fb01f7b9cbc5eeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:41:72:34:3c:cd:4e:77:db:2a:7a:fe:b6:
98:f4:cf:d7:d4:2a:3e:7d:32:06:73:2b:11:13:91:
71:76:b3:08:e5:99:bb:c9:8b:f2:dc:d2:23:f7:52:
0a:1f:ef:ec:44:8d:9e:bd:69:09:ea:3a:38:aa:0e:
65:b0:f8:c3:bc:7a:89:4a:e4:34:ab:2a:4e:16:41:
4e:3c:d1:33:4e:30:59:92:14:42:3d:a5:c9:d4:7b:
0b:ac:ec:7c:43:1e:77:02:e9:42:97:be:62:38:1f:
46:94:13:81:4b:66:75:b0:3f:0c:e7:77:26:46:c3:
68:70:02:91:74:38:e9:48:de:28:f0:27:bd:d3:5a:
b3:f9:97:ae:d3:a5:e3:48:fe:a0:fc:ae:54:ec:c3:
50:bc:e9:c4:3d:2a:9b:7f:62:00:1d:10:c7:a0:01:
89:a8:a9:9a:ec:a7:6f:c2:cc:48:f0:0a:ca:51:db:
77:0a:7f:3f:3f:e1:a7:9a:6f:fb:3a:01:93:b5:43:
ab:e3:5a:c4:21:b0:cb:95:ad:d8:ed:2b:9b:8e:9c:
0e:25:2c:42:7f:7a:a1:01:a7:10:52:12:9c:d1:96:
30:ce:29:13:3b:45:41:26:6c:9f:5b:60:b6:74:2d:
9d:cd:16:49:0b:15:4d:c5:64:ac:f7:74:d9:89:a0:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:91:96:C0:1B:43:FE:9F:6C:1D:A7:FB:01:F7:B9:CB:C5:EE:B9
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:30:f7:25:1a:53:bc:7c:c7:38:68:49:c3:34:e8:24:cd:77:
9b:33:8a:22:0f:84:b1:ff:16:a0:64:f9:45:3e:4a:f1:be:c4:
51:cc:b0:50:92:a6:5f:da:7f:8e:9c:00:f5:99:f1:9f:24:3c:
b8:00:05:1d:b0:ce:2c:9c:53:71:fb:8c:05:cb:f5:10:f4:7f:
f3:04:73:5c:ac:31:e2:1b:72:4f:65:9f:ab:52:99:a2:bc:b0:
b3:b3:07:b3:58:59:24:76:54:1b:86:88:ba:e7:fb:97:31:8b:
14:28:2c:38:20:b8:16:5a:a0:48:63:27:3d:fb:b3:12:ee:9e:
c2:eb:c8:e1:c4:ca:de:a4:a3:80:0a:51:fc:eb:7d:da:60:68:
81:4e:4b:2b:86:e8:ae:df:8a:60:1d:12:ea:32:fc:40:c6:db:
5e:59:34:08:bd:bb:1a:ef:11:f3:4e:56:c5:9e:8e:9d:c5:a2:
fa:84:b6:b5:de:f4:4d:f6:fc:f8:d2:e2:2a:09:c5:20:0e:e2:
68:13:bc:3b:e0:a8:fa:74:57:4a:c4:fa:cf:35:96:f1:c7:ba:
f9:ab:7f:b3:e4:95:5a:56:b7:51:bc:cb:b1:98:ab:f8:ca:c3:
81:5b:ae:0b:6b:93:65:72:dd:86:a5:8c:9d:1e:7a:d5:37:19:
c5:88:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:51:44 2025 by rpki-client