Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: NEpr3ZzzkvsuPCrYcpztLt2rQyXMHRfrhnDgUUbsBu8=
Subject key identifier: D9:1D:86:7B:37:19:FC:7D:7C:43:02:2C:3D:3C:D9:35:51:BE:31:8D
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019643D61E8363007B38BF2D2CDD7B5F439E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 14F1
Signing time: Thu 17 Apr 2025 13:00:28 +0000
Manifest this update: Thu 17 Apr 2025 13:00:28 +0000
Manifest next update: Fri 18 Apr 2025 13:00:28 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: SOGYxFadCIOvP5/gfjgZYSrucbvwif2ebWaRO3MZDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:1e:83:63:00:7b:38:bf:2d:2c:dd:7b:5f:43:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Apr 17 13:00:28 2025 GMT
Not After : Apr 18 13:00:28 2025 GMT
Subject: CN=d91d867b3719fc7d7c43022c3d3cd93551be318d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:06:57:59:fb:fc:76:a1:5c:1a:ea:a5:35:
dc:7a:18:33:97:5e:51:22:97:f1:da:e7:7b:97:02:
c6:8c:e9:8d:2b:11:78:0b:eb:97:0d:91:2d:af:60:
09:3a:ac:a9:52:67:7b:0d:15:54:71:a9:9a:4a:2d:
23:c1:34:bd:2e:cb:a3:e0:49:27:43:12:4f:3c:64:
5f:c5:87:6e:b2:f5:05:9f:27:f1:14:1f:e0:74:b8:
61:1b:29:08:8f:78:22:3b:9e:d3:d4:ad:df:3a:46:
41:91:d4:41:be:4b:5e:87:8e:d2:69:1e:0c:84:04:
e6:9d:5a:fb:eb:32:1c:11:a6:56:5e:2c:14:ee:b5:
21:7a:9e:47:0c:35:6a:48:66:1f:11:63:1d:70:da:
f3:21:5d:a2:fc:8c:53:12:70:27:68:1a:c6:35:99:
80:72:df:35:e4:16:11:3c:0c:31:78:1a:bb:65:ee:
b9:87:04:8f:33:4d:a2:d9:c4:6d:78:ef:75:bc:b7:
59:1e:fb:1b:53:98:15:af:ca:c4:be:54:03:7f:39:
a3:54:d5:75:ca:66:5b:5f:ca:6a:7a:38:ca:4f:d8:
00:3a:f7:34:e7:69:9b:bc:c7:97:df:9d:d4:5c:61:
f4:b2:74:27:39:a7:01:7a:86:4e:49:d4:86:e6:83:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:86:7B:37:19:FC:7D:7C:43:02:2C:3D:3C:D9:35:51:BE:31:8D
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4a:68:5a:aa:38:e6:5a:d5:d2:d3:b8:e1:f1:ec:a6:d8:3c:
fa:ed:4e:3d:bf:0a:1f:88:83:39:7d:0d:73:f2:23:b1:c6:6f:
54:38:08:37:ba:61:3a:e0:96:31:f8:97:8d:9e:e9:7a:7d:8c:
82:ff:8e:c3:4e:72:a3:95:48:f8:1f:2b:5d:2d:62:4d:61:44:
de:98:72:8c:83:60:fe:b5:18:12:68:68:9b:c9:58:54:b6:74:
54:c2:4d:58:85:1b:75:95:df:03:15:ca:29:8d:15:49:c2:d2:
1f:da:bc:94:5d:40:8f:68:b0:5d:b7:d3:5a:76:d6:74:2d:32:
1a:52:1b:37:6a:81:30:16:7c:47:8d:99:9b:65:e8:ac:d8:0c:
3e:e6:48:9e:c1:4d:3d:1a:6b:7b:4f:5c:a1:7c:b7:67:70:a1:
a1:42:4c:35:be:ae:11:ec:62:89:ac:9c:ae:22:cb:04:d1:64:
15:40:38:0f:34:8c:58:db:41:2d:9d:db:b4:89:12:05:76:36:
06:ba:2f:4a:25:a2:ae:66:a1:09:ff:00:7b:57:d1:c5:64:93:
5c:8a:d2:0c:19:18:64:1c:2e:61:cc:20:42:ec:0f:81:66:b1:
21:6b:57:4e:e9:a1:5d:4a:4d:93:78:c5:e5:39:76:e2:16:ae:
ef:6e:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:46 2025 by rpki-client