Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
File: ySynGDiuM8zsxfEKtU7D_HG_u4I.mft (raw, json)
Hash identifier: 8jJ9pAFmfEH7dK6kqVB+F4LlTiiAnowCt91TIlFF5g8=
Subject key identifier: AA:D4:14:11:59:DB:36:CA:DC:78:A0:73:69:6F:0F:5E:C0:22:19:76
Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
Certificate issuer: /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Certificate serial: 01963F54C55420D828E8EABAD456E43C5C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
Manifest number: 06CA
Signing time: Wed 16 Apr 2025 16:00:42 +0000
Manifest this update: Wed 16 Apr 2025 16:00:42 +0000
Manifest next update: Thu 17 Apr 2025 16:00:42 +0000
Files and hashes: 1: ySynGDiuM8zsxfEKtU7D_HG_u4I.crl (hash: DfklHv3bMwXHdgnStfnvwpiO2afw3BPGZIRB0oTs5Vs=)
2: zvBXOGhz3yT7vvMi09ydKdR3St4.roa (hash: 74R93MmSYu/Sf7aVGk3wE3AF+gpETbgTfHomBAiI6ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:c5:54:20:d8:28:e8:ea:ba:d4:56:e4:3c:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Validity
Not Before: Apr 16 16:00:42 2025 GMT
Not After : Apr 17 16:00:42 2025 GMT
Subject: CN=aad4141159db36cadc78a073696f0f5ec0221976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:24:7e:0f:17:17:a9:5f:08:eb:b0:e7:5a:
aa:6c:f5:9c:49:ef:1e:4f:14:81:12:9b:9c:a4:32:
e6:6a:68:c8:05:a7:f1:af:b2:cd:b3:55:1d:aa:45:
60:df:17:3e:42:26:fa:05:41:5a:8e:67:78:b5:5c:
f3:ac:30:f3:bf:68:b9:a4:df:3d:da:71:4f:1e:2e:
87:65:75:af:20:a3:d4:48:ea:3f:59:40:21:f8:da:
db:e1:fb:7a:4f:d8:be:e7:d9:68:11:c3:8a:aa:82:
c9:a9:07:a7:9b:ed:07:55:23:e4:5b:3b:56:78:fb:
c3:9f:9f:b0:05:4d:fe:bd:36:87:9a:af:60:42:70:
2a:da:70:8e:93:c2:df:3e:9f:6c:75:fa:fc:54:12:
4c:d9:37:03:e7:23:ed:d5:3e:ab:01:84:39:a4:ac:
a6:62:4a:0f:e1:b7:5b:05:e5:59:cb:cb:48:71:55:
57:5c:82:af:78:cc:47:71:fa:5c:b2:25:f7:5f:f4:
35:f2:bf:9f:95:19:d2:dc:c3:07:f3:3a:48:ae:df:
fd:9d:31:49:ec:67:40:ff:a1:03:84:3d:f2:d5:25:
ed:91:d8:5f:a2:17:b2:fd:6b:6d:e7:20:d6:96:23:
0d:74:0e:c4:b9:c4:71:f9:aa:ab:0d:da:cf:1f:64:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:14:11:59:DB:36:CA:DC:78:A0:73:69:6F:0F:5E:C0:22:19:76
X509v3 Authority Key Identifier:
keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fa:ce:38:77:9f:81:85:79:54:2a:fe:6d:b6:f4:88:26:7c:
7d:4a:5c:42:11:eb:24:7c:88:e9:ed:51:d7:be:0a:9f:39:0a:
52:b1:b3:61:7d:4b:d7:af:b5:c4:2f:aa:d2:e9:44:09:c8:10:
67:31:a7:82:4b:56:62:0a:1a:d6:3b:79:6c:b1:68:69:68:5a:
9d:15:65:de:fc:6b:b4:00:88:c9:ae:99:9e:db:04:7c:ca:d7:
27:0a:9e:55:23:7e:e0:13:86:5f:16:ac:6d:9a:5a:71:fe:3f:
50:b6:c5:55:49:2d:d5:f8:f6:b8:cd:a1:91:09:a9:40:bc:75:
d9:90:42:20:7f:df:c6:fc:40:99:21:f3:bd:9f:69:cb:15:ff:
9a:c4:ca:7a:e0:83:03:21:4f:5b:8a:f9:85:51:11:b1:81:47:
41:7b:e1:0f:60:02:40:ed:11:5c:a3:15:16:d6:8f:b6:bd:34:
de:ec:be:49:5d:50:0f:a1:e7:5f:5a:bb:28:ee:fa:ce:bc:13:
8d:1e:e4:a9:b0:67:29:eb:68:db:58:a9:37:a5:5e:22:45:0e:
55:24:81:ae:15:02:8a:ed:fb:d1:f3:94:02:20:e1:66:a6:28:
aa:bc:9d:1c:36:d7:52:d0:1a:c3:62:a3:11:7c:3e:65:a1:1b:
85:07:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:43:47 2025 by rpki-client