Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: zvATeUVpKxX9Ch1y7NNOAK0xPJU1TiLAln3uN1BMTL4=
Subject key identifier: A4:36:F5:FD:1C:64:00:61:63:A6:02:8B:87:56:78:C3:BB:82:43:54
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019613C6309C48F1950F8FD0D7D5368061D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 01F7
Signing time: Tue 08 Apr 2025 05:01:17 +0000
Manifest this update: Tue 08 Apr 2025 05:01:17 +0000
Manifest next update: Wed 09 Apr 2025 05:01:17 +0000
Files and hashes: 1: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: tRV8WwxLB/tp9qBMjWY7sI1BIc35v0pI1fmqGNnKMG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:c6:30:9c:48:f1:95:0f:8f:d0:d7:d5:36:80:61:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Apr 8 05:01:17 2025 GMT
Not After : Apr 9 05:01:17 2025 GMT
Subject: CN=a436f5fd1c64006163a6028b875678c3bb824354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:55:6e:3a:f3:0c:ee:4d:7b:ee:d8:48:94:
35:d1:4d:e4:f2:88:ef:57:2b:56:de:ad:22:c5:54:
3f:65:7c:dd:ff:67:de:35:e3:2d:24:cc:a2:c5:ac:
43:ce:0d:ae:2f:c3:35:2a:7d:f1:ca:1b:e7:ba:3a:
0a:1a:50:b4:49:cc:95:74:a8:59:94:d0:ed:93:d8:
d1:90:d8:7c:fb:55:95:b7:57:54:ef:e2:77:79:d7:
53:b1:66:63:52:7c:a9:4d:fa:0f:30:99:67:df:00:
98:03:63:e5:b6:d7:9b:e8:65:14:52:98:c0:65:66:
ef:0a:4c:f7:ac:c9:ae:76:50:ec:6c:fd:17:bf:aa:
11:e9:c0:c6:0f:1f:52:55:18:3c:c7:70:02:b6:a1:
d7:3b:69:0f:c7:df:0d:f9:a7:7e:c3:a1:18:f9:5e:
20:26:f8:3d:58:24:5b:aa:bf:1b:e7:c9:1d:16:14:
87:c4:04:bf:c3:c0:db:c8:c8:ce:dc:d7:1e:2c:ae:
02:a6:0b:23:89:1f:20:f0:2e:35:c5:ca:b0:01:7e:
6d:5e:ff:5e:f6:17:2a:eb:92:f7:7d:3e:14:c7:76:
b7:68:12:52:b2:44:04:0c:c0:8f:08:33:47:d3:8c:
fc:af:d7:96:7a:d1:8d:fd:59:ba:ba:56:cd:ed:b1:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:36:F5:FD:1C:64:00:61:63:A6:02:8B:87:56:78:C3:BB:82:43:54
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:78:5c:30:13:15:26:0d:0b:66:40:5e:cb:5b:24:1a:34:
17:13:10:1e:0e:0e:fd:04:d6:14:d0:6d:99:9d:ef:bb:28:3c:
85:ba:3b:5d:8b:2b:fc:26:0e:cc:42:33:ec:28:91:2e:9f:14:
91:d0:e4:8d:45:c0:ba:cc:fd:bc:41:64:81:62:94:2f:42:ea:
3e:a5:06:cc:a7:90:3f:a3:e4:62:e8:6b:32:02:e2:56:9e:f8:
16:0f:fb:70:8e:2c:3f:7a:cf:aa:94:47:60:bd:10:91:83:1d:
a9:4f:10:e6:24:92:5f:ea:bd:de:c6:cd:9c:00:06:a3:93:bc:
5c:b9:0e:c3:49:01:55:72:8c:01:05:58:9b:5a:da:f7:6d:ee:
36:44:c4:d3:43:9e:ec:52:4e:77:54:de:85:24:d6:d9:02:a6:
17:47:d1:cf:60:95:b7:a1:c0:f2:33:e8:c9:4f:e4:c8:21:c7:
6b:09:cd:2f:11:e6:38:3e:4d:ec:e3:a1:97:7b:08:2d:08:4c:
2e:2c:a3:34:99:8e:74:0e:77:90:a4:c0:69:d9:53:0c:70:c5:
64:a8:4f:63:40:3c:2c:82:a3:1e:db:1d:a0:2d:b0:1f:24:4a:
47:33:80:3b:d0:cd:88:40:b5:9e:8d:ad:32:5b:f7:ef:9d:97:
09:8d:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:45:16 2025 by rpki-client