Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
File: ycbGTWd6yWSqxmbrrLnRf6jIq80.mft (raw, json)
Hash identifier: g02leLxZuaOUn4+CedZMm4Rg2FstffcqZseIV9CRBxo=
Subject key identifier: 21:8A:95:0E:E6:98:E0:B6:21:53:6E:A6:A4:CF:C0:9E:87:95:C9:D8
Authority key identifier: C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
Certificate issuer: /CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Certificate serial: 019643D6FBFDB4C109131A7C3A9EA5FA97DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
Manifest number: 07FC
Signing time: Thu 17 Apr 2025 13:01:24 +0000
Manifest this update: Thu 17 Apr 2025 13:01:24 +0000
Manifest next update: Fri 18 Apr 2025 13:01:24 +0000
Files and hashes: 1: ycbGTWd6yWSqxmbrrLnRf6jIq80.crl (hash: GZ/Rluds9ZVr4HPZvzb7ATZMCxCLDXQ2VTKZzJiIMps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:fb:fd:b4:c1:09:13:1a:7c:3a:9e:a5:fa:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Validity
Not Before: Apr 17 13:01:24 2025 GMT
Not After : Apr 18 13:01:24 2025 GMT
Subject: CN=218a950ee698e0b621536ea6a4cfc09e8795c9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:85:7d:c5:10:c5:89:ea:88:2c:8f:1b:fe:
5f:fe:49:b7:f1:dc:b7:00:3e:64:dd:c3:68:86:dc:
41:af:1b:ef:90:e6:4c:8f:a6:c2:98:1a:c4:f3:86:
a5:8d:2a:d1:8d:a5:51:85:48:d0:fb:6f:91:f3:9b:
de:75:88:c4:9f:ff:7f:f0:30:bf:50:f7:49:ff:b5:
7a:13:aa:41:30:a4:7b:5b:7d:56:97:f0:ec:ec:ff:
00:d5:c4:fd:35:e3:5e:27:bd:01:3e:23:30:b3:35:
e8:25:a1:af:30:b2:21:21:f7:04:72:54:f6:26:86:
ef:19:a8:d6:0f:61:6b:d2:07:c4:10:01:86:97:90:
96:e3:4b:38:6a:22:ed:8f:af:b2:04:09:90:18:98:
2e:14:e1:fb:dc:59:52:34:dd:95:fc:d1:51:cb:9b:
39:5d:83:f0:de:56:d4:f9:d2:fc:d2:8d:94:c6:2c:
9c:38:69:e8:b2:63:b5:9d:d4:65:24:72:79:a5:96:
0c:f0:ed:55:40:8b:56:8d:c9:d4:f0:9f:54:26:58:
62:b9:14:c2:f5:98:b9:8d:be:e6:d0:4e:e4:ef:52:
b8:66:d0:b7:ff:35:52:45:c2:09:1c:7b:40:34:d0:
ad:03:a5:43:3e:3e:49:89:25:bc:9d:79:0e:4e:3c:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:95:0E:E6:98:E0:B6:21:53:6E:A6:A4:CF:C0:9E:87:95:C9:D8
X509v3 Authority Key Identifier:
keyid:C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3c:be:4a:08:ec:aa:cc:b1:c0:c4:db:de:21:89:bf:31:09:
c9:d8:bf:0d:f4:15:de:9f:ca:b4:b7:f4:39:fd:c5:a5:71:cf:
2f:da:7b:94:fd:9d:07:77:94:9f:89:4a:13:55:8d:0c:73:ba:
6b:cd:4d:f9:df:38:af:6b:0e:0c:f1:6a:03:41:d2:62:b9:a2:
b4:dc:87:12:24:c6:fc:a5:c9:d9:96:38:c0:21:d5:a4:68:d4:
b9:60:b2:09:ed:07:45:6c:1e:6b:b0:1e:86:1f:74:c5:35:da:
3d:46:d7:c6:f3:18:7e:83:cb:54:a2:80:24:88:53:ab:de:c4:
4b:59:32:42:d8:5e:6e:c5:c4:fb:b3:cb:21:1e:20:e3:ac:93:
d3:21:bd:fa:e4:89:f2:bb:c4:0a:af:e9:a7:80:36:13:48:44:
f0:97:57:d4:0f:3d:5a:40:5e:29:91:da:d5:85:70:e4:12:6f:
29:ac:7f:6c:d9:12:54:2a:94:ea:12:f9:51:04:d8:44:b4:2f:
02:91:20:f5:45:1c:5f:a8:21:80:03:d5:16:7a:c4:dc:b0:14:
2d:37:8f:98:14:5f:3b:77:b2:4e:45:65:bd:67:4f:ac:8d:91:
12:98:aa:bf:70:e1:c7:d7:b1:8e:f8:dc:9e:94:4b:12:40:76:
33:ab:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:46 2025 by rpki-client