Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File: YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier: BEudyxwVcM9KF2qXMu9zq3jgZ+3yk05eOexqnqSN/eA=
Subject key identifier: 79:99:81:A9:28:D6:2A:F1:05:FC:14:75:FD:B0:F8:0E:C8:FC:55:3A
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer: /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial: 0196496A1E8D285A31F270A28E1D86647BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number: 08E2
Signing time: Fri 18 Apr 2025 15:00:13 +0000
Manifest this update: Fri 18 Apr 2025 15:00:13 +0000
Manifest next update: Sat 19 Apr 2025 15:00:13 +0000
Files and hashes: 1: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: K9oYqzbHlHgqqJPRRQP0n9Tf8Adx5qRMBq6PYv+qPps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:1e:8d:28:5a:31:f2:70:a2:8e:1d:86:64:7b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
Validity
Not Before: Apr 18 15:00:13 2025 GMT
Not After : Apr 19 15:00:13 2025 GMT
Subject: CN=799981a928d62af105fc1475fdb0f80ec8fc553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:c5:90:90:e5:bb:dc:b7:fd:81:68:cf:ca:
73:f2:bd:0d:77:d9:63:7d:30:c7:9a:b8:c1:ed:61:
da:28:d5:a1:93:63:8d:fc:46:dd:4d:d4:b9:11:c2:
a7:61:23:97:ca:48:7b:1e:c9:a2:12:27:cd:9c:89:
16:19:08:7a:03:a5:98:07:3d:52:b2:6e:a0:15:89:
0f:a7:1a:88:97:a6:dc:96:72:88:0b:24:de:b9:bf:
ff:70:6a:88:24:a3:95:8d:33:00:8e:13:04:82:e2:
bb:dd:ff:6f:73:5a:3e:c0:21:00:33:6c:14:8e:a9:
9b:19:20:b3:84:26:eb:cf:e9:08:1e:f8:ad:4d:92:
43:d9:93:c7:4a:58:20:4a:a2:c4:34:27:c9:6e:38:
88:61:36:d4:a0:b9:b9:be:08:90:bf:b6:e2:0b:e2:
db:8c:f2:9b:38:1d:10:8d:26:d1:67:35:14:fa:33:
6e:ba:6d:d5:5a:71:2c:e6:ae:35:5d:46:81:40:2c:
59:54:c6:65:d7:f1:c6:84:cd:55:05:3d:25:80:c6:
2a:64:14:12:76:ab:5a:54:5c:7f:db:44:2a:d6:2c:
3e:32:ac:57:7f:cc:a4:f1:91:cd:2e:b4:fa:7a:95:
f8:f9:4a:f3:6d:59:94:a5:f5:b6:e8:e3:14:08:98:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:81:A9:28:D6:2A:F1:05:FC:14:75:FD:B0:F8:0E:C8:FC:55:3A
X509v3 Authority Key Identifier:
keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b7:f1:70:c5:6f:9e:10:0b:91:fc:62:56:ec:f8:b3:ac:aa:
e4:59:07:9d:4a:ba:25:d2:fc:7e:95:d4:65:84:31:9c:ec:a6:
cf:9a:7e:95:3f:58:83:ed:da:0f:52:50:c7:2e:ee:b1:e7:32:
86:2a:84:5b:c0:13:30:66:04:89:0e:65:28:a9:3e:57:8a:54:
61:71:d1:93:e4:26:d5:b7:51:64:3d:a2:99:4e:19:85:d8:e1:
8c:05:df:a7:24:bf:eb:fa:49:3e:68:da:00:0f:8e:f3:54:8f:
52:83:95:62:88:fd:f4:6e:e4:c1:34:22:4c:5c:1f:6a:fd:c4:
1a:5c:bc:c8:e4:51:c4:cb:10:05:8d:74:00:c7:bd:f0:e7:d3:
71:1a:cc:c2:c4:ef:cb:f5:45:70:ad:fb:c8:a9:45:58:f3:ee:
f2:4b:a1:6f:75:18:92:8a:a1:78:94:e5:04:8f:1c:5d:76:30:
71:8b:31:f8:7d:22:be:52:09:ba:d2:46:ad:13:e9:ef:1c:53:
9a:fa:be:2d:4a:7e:46:80:ab:4e:fd:4e:eb:96:1a:18:50:7e:
6d:de:53:1e:41:78:4c:0d:7f:05:13:52:a9:14:f4:71:99:7e:
5c:61:46:1f:19:e7:1f:24:c9:e5:f7:9c:4c:2b:9a:28:fc:2b:
35:21:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:27:58 2025 by rpki-client