Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: pwuGMWUkCnORHmhAvwKOXYBwOAj/4ntIZa4QFsgsejk=
Subject key identifier: FA:6F:07:58:A0:5F:0B:CD:4B:72:5D:B7:8C:5D:98:26:33:FC:D6:55
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 01964C6BFBA0E5DC5DE561D09B165020C569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 0FFD
Signing time: Sat 19 Apr 2025 05:01:07 +0000
Manifest this update: Sat 19 Apr 2025 05:01:07 +0000
Manifest next update: Sun 20 Apr 2025 05:01:07 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: Sh9UsP6Kt2GzdGzoSN2Jg4vJYdyH7hvHa2AX5MCqJPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:fb:a0:e5:dc:5d:e5:61:d0:9b:16:50:20:c5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: Apr 19 05:01:07 2025 GMT
Not After : Apr 20 05:01:07 2025 GMT
Subject: CN=fa6f0758a05f0bcd4b725db78c5d982633fcd655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:93:78:d3:2f:8e:3b:d4:59:86:da:b0:96:
69:2b:df:fa:44:4c:ce:e9:81:4a:c8:38:f0:13:7b:
a8:04:03:e5:5e:bd:c4:63:7a:14:99:68:e3:77:a7:
1b:54:9a:59:c3:c9:13:85:b9:31:2c:b6:e9:ea:ab:
49:85:c2:7f:2e:c4:1d:3a:3c:76:0a:fd:a0:a9:ac:
3f:88:af:bf:d2:fe:17:4c:f7:19:f8:27:f1:77:42:
e4:16:90:68:a4:0a:cf:d8:1b:1c:da:a0:3d:56:9a:
fd:92:e6:18:8a:bc:18:c3:99:a3:a9:59:29:2e:b0:
43:cb:c1:4d:b5:b9:80:63:e4:5f:8f:1c:ac:99:5e:
60:e8:b3:fa:3e:88:8a:12:ce:83:1f:e6:80:cf:73:
cf:00:08:fc:b1:ad:cf:b9:9c:f6:39:11:12:08:ef:
25:00:cd:1d:70:fb:5b:00:e0:b2:c5:9d:eb:59:a7:
85:7d:e9:4a:6f:09:9c:5a:c1:1e:f0:a3:94:3c:af:
b3:32:a2:e8:bb:75:fe:0f:35:3a:63:05:fa:0b:81:
0b:77:04:57:78:fb:4e:2e:74:0b:9e:8c:3c:ff:95:
56:3a:fc:d4:b6:bc:78:47:9d:ed:cd:ee:8b:df:ef:
d3:3b:05:bd:89:b7:68:48:24:11:75:45:77:ca:eb:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:07:58:A0:5F:0B:CD:4B:72:5D:B7:8C:5D:98:26:33:FC:D6:55
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f3:d7:0c:33:fc:fb:e3:d9:de:c1:1d:11:c4:3f:70:62:27:
fd:26:23:9d:5b:bb:35:19:ca:f3:93:84:17:89:08:4d:be:7e:
3c:56:88:9a:a4:0d:e0:e2:18:f0:16:85:d3:eb:09:0a:03:ab:
df:1e:dd:0b:fc:74:b3:00:b3:ba:95:ec:a1:40:f4:53:d0:e1:
33:89:af:af:1c:4b:0b:df:cb:03:e0:3b:0b:0c:21:39:3f:de:
ad:65:ff:49:3d:6d:69:84:35:a0:8a:b6:f0:35:df:c4:58:6a:
d1:31:1c:de:82:22:05:b2:fb:80:84:8c:0d:18:ea:c8:e9:2e:
a3:81:66:6d:13:fb:98:7a:a5:a6:39:43:ad:bf:33:39:68:b3:
6c:6a:9e:ea:d4:96:fd:24:fa:4b:b8:7e:62:2d:28:bc:46:cb:
89:c6:5e:61:ff:73:64:25:46:d3:64:ac:7d:39:58:f0:2e:d8:
7a:30:78:84:7b:77:ee:bb:62:12:e1:99:fe:4d:cd:c1:ef:02:
26:ae:11:01:c5:ce:df:40:7e:4b:13:0a:eb:32:9a:49:34:e5:
49:c8:3f:45:ce:38:86:e8:48:8d:06:98:e5:10:0d:e5:26:de:
f2:4e:d0:10:67:dd:17:b5:d3:2e:de:be:02:e4:0b:c3:93:d8:
58:50:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:37 2025 by rpki-client