Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: Bqqt6Rfbf20xnRXS5dmTnBLYotUgr5m38vW6EtYdBnk=
Subject key identifier: BF:12:60:0D:6D:DC:F7:5C:8E:A3:83:E6:03:7F:CD:EC:87:F2:2D:84
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 01963E0B85F4E6186B5098107DFCE5103C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 07F9
Signing time: Wed 16 Apr 2025 10:01:04 +0000
Manifest this update: Wed 16 Apr 2025 10:01:04 +0000
Manifest next update: Thu 17 Apr 2025 10:01:04 +0000
Files and hashes: 1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: lC8DG3e7a8RrFx53LJJXibq9Jg2D/o8LU+yX/q5c25c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:85:f4:e6:18:6b:50:98:10:7d:fc:e5:10:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Apr 16 10:01:04 2025 GMT
Not After : Apr 17 10:01:04 2025 GMT
Subject: CN=bf12600d6ddcf75c8ea383e6037fcdec87f22d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:2a:d5:7b:59:98:56:a5:b7:25:0c:8e:70:
b6:c8:3a:43:d2:c0:f3:05:13:96:62:a2:33:c5:4a:
5a:42:14:8f:04:8a:6b:64:1a:a3:59:27:bc:bd:0e:
1b:c8:d1:d5:e0:ac:da:80:c0:42:d8:ab:e6:11:0a:
d9:51:3f:8f:84:d0:37:a6:0d:e4:be:dd:b8:62:da:
a8:7f:2e:0a:e8:7d:ef:e6:cd:b5:80:04:b5:de:f6:
3f:ba:e0:6c:fc:10:2a:2a:1b:d3:9d:1d:db:6b:d2:
5a:bf:e5:9a:22:10:33:fb:a5:76:5b:b1:22:38:7f:
6b:1f:44:46:34:22:c7:c1:64:0e:d1:4d:c1:7d:23:
df:f1:f2:84:1c:04:84:71:05:35:35:49:53:89:fe:
c5:56:79:d6:b6:2d:c9:c1:28:aa:8f:5f:5c:38:90:
c7:06:b5:5f:bd:00:43:ca:6c:4a:d5:5e:87:d6:8c:
e4:e3:04:c0:bc:b0:8e:22:3a:a4:7e:db:4b:13:86:
36:4b:89:37:00:3e:3f:08:48:66:49:0e:64:c9:72:
5f:7c:86:a9:7a:32:bb:07:c1:84:db:b9:a0:35:45:
b3:f8:c6:99:9a:53:03:ac:bb:af:f6:1e:0e:d1:61:
d6:94:0b:76:5e:4f:5a:73:2a:b8:99:3f:6f:7c:84:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:60:0D:6D:DC:F7:5C:8E:A3:83:E6:03:7F:CD:EC:87:F2:2D:84
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:cb:f7:94:7c:87:5e:77:0d:46:72:78:a3:f3:b9:6b:e3:
12:d7:b0:78:3a:21:d6:f3:fb:3c:4b:dc:a3:e0:87:5e:f4:be:
ca:b9:c5:28:93:80:41:55:5f:4b:a8:61:fa:87:7e:f0:25:f9:
cb:0a:68:00:76:8a:85:af:83:a1:41:ef:55:0c:80:16:b0:0e:
6c:f2:81:4d:9c:a5:07:12:f6:a8:5a:a8:44:63:a2:b0:c1:1a:
72:a4:7c:a1:ee:c0:6d:88:8a:85:c2:59:ad:76:42:7f:9c:b4:
2f:86:07:05:05:5d:e1:84:3a:5f:54:13:5b:70:a4:bd:6e:67:
92:e3:23:f7:9a:5d:9e:de:7d:bb:fe:75:6c:c7:ca:f1:8c:bb:
09:c0:cb:64:28:27:0f:71:9f:4d:14:bc:b4:5e:f7:e2:a7:50:
3f:ca:5a:fe:4f:e9:54:5e:cd:d8:6d:4d:f8:90:79:8d:13:db:
66:42:98:ed:ae:76:24:e9:4d:24:fa:92:d5:a8:17:33:f8:c4:
d6:18:de:c8:ca:35:0a:3d:74:eb:3d:c1:df:4c:88:6f:20:b6:
08:39:48:3c:4a:bf:2b:c8:36:16:35:25:ea:44:ec:2c:56:cc:
04:01:69:06:ed:9d:33:ff:c8:33:34:42:59:73:bb:85:80:a0:
86:cc:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:21:04 2025 by rpki-client