Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: lY+ocDKY/CX5UKfxOUAGBZe2zdO1juk6LEVH20RiYIE=
Subject key identifier: D2:BF:FF:E6:8F:A6:B5:AA:53:D1:2C:E2:35:6A:56:15:5E:0A:C3:78
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 01964FDAC75BAC4D787E2429BFADDBE2645B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 040D
Signing time: Sat 19 Apr 2025 21:01:00 +0000
Manifest this update: Sat 19 Apr 2025 21:01:00 +0000
Manifest next update: Sun 20 Apr 2025 21:01:00 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: qJACpqWz9DSJoilesLiQ5L0nuyHl+KuO1H+EIDUvQsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:c7:5b:ac:4d:78:7e:24:29:bf:ad:db:e2:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Apr 19 21:01:00 2025 GMT
Not After : Apr 20 21:01:00 2025 GMT
Subject: CN=d2bfffe68fa6b5aa53d12ce2356a56155e0ac378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:0c:e0:7b:34:15:52:d6:2e:58:c1:bb:dd:
9c:d4:2a:0d:1f:01:57:f4:c1:0d:8d:fb:96:44:cf:
98:dc:60:72:0c:3c:71:ee:d9:35:4a:0e:a3:99:b2:
de:39:c4:b2:20:c2:f7:a2:c8:c2:f0:12:c7:57:34:
46:ee:7a:b4:04:2d:bd:b4:b6:a4:a9:1c:25:fc:f2:
bb:34:fd:bd:56:4a:91:f2:45:7c:78:bb:9d:9e:78:
82:2f:00:dd:5f:55:03:fd:c3:70:34:ab:b3:d4:08:
16:55:c7:3e:bc:bf:28:fe:8f:f2:ac:06:20:55:92:
e0:56:11:ea:5d:ea:af:b8:d6:cf:86:dd:ae:2d:27:
96:46:21:d4:8f:a5:9a:ff:24:6e:bd:d3:85:f1:b2:
37:8c:6b:ff:72:9b:e2:62:bc:43:d3:f6:9d:ef:c0:
92:85:11:bd:05:cb:fd:a1:03:b4:92:ec:10:76:1e:
62:8d:3b:91:e5:6f:36:3a:fa:88:6b:e6:b6:e8:74:
a9:5e:91:d3:fe:83:dc:40:00:22:0d:f1:d3:22:af:
91:1d:65:16:f4:41:a7:1b:db:82:42:e4:14:26:2e:
0d:f1:65:e7:3f:6b:f5:27:0b:08:10:fd:38:bb:83:
e0:fc:db:c8:94:22:8e:c5:65:a4:86:e6:6f:47:5d:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BF:FF:E6:8F:A6:B5:AA:53:D1:2C:E2:35:6A:56:15:5E:0A:C3:78
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:43:ea:99:2a:b8:c6:e0:d1:96:1c:95:6c:0f:56:50:59:
26:88:2b:88:15:4e:c9:31:e1:d9:39:2f:aa:11:a7:33:df:2d:
40:91:98:c3:c6:d9:0d:cb:49:4a:75:e2:47:ec:17:6b:c3:c9:
25:7a:02:65:76:a3:07:14:fb:fc:d6:88:f9:5d:61:c0:56:56:
05:8f:0d:da:3a:08:bf:2a:2b:b4:6a:9d:60:6f:0e:f7:45:57:
48:a8:dd:db:d3:c6:3f:89:f8:b2:af:d0:01:d1:17:62:b1:50:
43:c6:1b:b5:98:2f:26:08:a2:4a:e0:0a:61:16:e2:e5:fd:79:
b6:61:23:eb:32:d3:c3:b0:81:2a:4e:c2:51:90:4e:13:75:c3:
20:23:fb:3f:74:d2:a2:50:b9:db:fe:ff:da:a9:85:3c:25:41:
07:16:d1:91:09:50:3e:e7:5a:9f:f0:c6:ee:db:d9:93:c8:3e:
cc:ba:13:33:65:84:c7:de:42:39:b0:6a:3c:d7:d4:af:b6:99:
2f:d7:5f:cb:cd:28:90:14:7e:55:57:06:cb:a4:9f:2a:de:ac:
2b:7a:be:5a:e7:8e:bf:d1:1f:50:99:51:a0:3b:2b:db:f5:8f:
d2:a3:70:17:47:2b:ff:bf:0e:bd:2d:9b:67:17:09:9f:3a:0d:
df:a4:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:57 2025 by rpki-client