Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: IFom1R8NF/ANWEbn4XnpESQiZkqHeA9Q1usDB97OlLY=
Subject key identifier: BE:E7:FF:89:22:2B:6C:64:11:37:2D:CD:5C:0F:83:9D:01:BD:79:1F
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 01961A6CB353CAE1F548E5A517153578C843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0BC7
Signing time: Wed 09 Apr 2025 12:00:53 +0000
Manifest this update: Wed 09 Apr 2025 12:00:53 +0000
Manifest next update: Thu 10 Apr 2025 12:00:53 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: uPbei8F9rejR3ooMVKFfJMUMgp/HrwZs5uF3pIQvMhw=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:6c:b3:53:ca:e1:f5:48:e5:a5:17:15:35:78:c8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Apr 9 12:00:53 2025 GMT
Not After : Apr 10 12:00:53 2025 GMT
Subject: CN=bee7ff89222b6c6411372dcd5c0f839d01bd791f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:fc:eb:da:dc:2f:e1:19:bd:05:c1:12:7b:
0e:b9:0d:1c:84:91:3a:59:d0:61:cd:60:aa:f1:8b:
e8:89:35:ff:cc:4c:0e:41:1c:13:f3:ae:6e:62:1d:
5c:95:55:cd:03:58:1c:6a:a3:dc:88:0d:6d:c8:33:
35:0b:db:d3:01:1a:c2:4f:f6:39:eb:93:e3:d5:72:
0d:8f:43:a5:b8:21:b5:5f:27:ac:7a:1a:0e:b5:4a:
f4:fc:69:98:c0:e9:f8:66:40:68:6f:fa:13:23:64:
44:a3:e8:5a:f8:f0:2e:3c:e6:ba:94:0c:c9:aa:ae:
ea:cd:03:38:2e:18:22:68:b7:10:87:81:69:c5:7e:
99:1d:d2:b2:4d:9d:a1:72:fc:14:72:f5:0e:b8:87:
d4:e5:a4:3b:29:23:63:b7:64:e4:50:62:28:f5:03:
1c:3e:18:e9:d1:b0:12:2e:f2:f7:db:13:35:16:89:
96:69:63:b1:09:86:65:02:0b:d6:8a:9f:f9:97:b2:
69:1e:fa:6a:c9:ad:5f:c9:c8:f6:ba:da:b3:61:b6:
82:ba:41:e3:ed:c1:b1:b8:3a:79:cd:84:51:f4:b4:
fa:c8:84:19:fa:4d:b8:59:da:28:39:85:6b:ec:3a:
14:6f:a7:0b:9a:87:77:4b:2e:4a:27:1b:3f:07:e4:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:FF:89:22:2B:6C:64:11:37:2D:CD:5C:0F:83:9D:01:BD:79:1F
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:56:91:58:87:9a:c4:72:75:89:91:ed:9a:d4:8e:ab:27:c8:
79:84:2e:2a:6d:9d:f1:25:f6:18:72:49:cd:f5:99:c3:65:ce:
90:5f:6c:7c:a1:8d:a6:2f:38:23:a5:c6:ac:8a:78:5d:74:e9:
11:d8:d9:dd:85:ad:52:62:4c:ab:be:75:c2:7e:62:3e:b7:98:
40:62:a3:78:78:a3:99:1c:ae:01:d3:00:bb:7b:bd:c5:2b:e8:
a9:1f:99:e8:d6:ef:38:e4:2d:f2:af:da:4d:a2:86:f9:da:96:
ea:cc:b1:fd:89:4f:d1:96:ef:e4:7b:e5:70:7b:79:ad:e2:a9:
00:4a:23:a4:09:64:b6:20:79:ec:05:84:0a:c5:ec:fd:3f:c0:
c3:ca:af:a0:54:6b:d9:e6:e0:0b:87:f7:ec:53:09:9b:27:6d:
85:60:79:a0:38:96:db:74:1c:c6:a5:83:52:fa:56:c1:41:c9:
bf:4a:21:6b:ce:2c:ab:5a:69:f0:c4:44:37:07:ea:5d:ea:33:
2d:3d:83:a7:94:93:3d:09:2e:13:fc:33:99:b9:19:f9:b0:f8:
ac:37:71:8e:68:04:b4:89:2d:84:0d:6f:39:ed:b9:93:c6:2d:
5a:23:bd:52:4a:18:8e:7b:6b:da:3d:c2:b0:55:32:5c:bf:0d:
9a:a8:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:11 2025 by rpki-client