
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: S/BSy7qz8kWJYWlk4ViZ4pkj9KFvVEK7MOXqOx/lgFc=
Subject key identifier: 5A:6A:36:E1:E6:6E:83:CD:08:FB:FF:4F:50:45:C4:F1:0C:0E:7F:E0
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 0196A276B7BBF253579A89E654D6F9058112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 22:00:11 +0000
Manifest this update: Mon 05 May 2025 22:00:11 +0000
Manifest next update: Tue 06 May 2025 22:00:11 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: eYQTmxJZe8bhzmeFZYI2e8n7Ro7+7/C33Ol/NBKI9D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:b7:bb:f2:53:57:9a:89:e6:54:d6:f9:05:81:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: May 5 22:00:11 2025 GMT
Not After : May 6 22:00:11 2025 GMT
Subject: CN=5a6a36e1e66e83cd08fbff4f5045c4f10c0e7fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:27:26:6f:a5:17:d6:75:66:f6:64:b7:ac:
0f:19:ef:45:2b:3c:93:68:89:46:26:c6:2f:6f:79:
6a:07:00:aa:99:65:d9:3a:cc:90:7d:19:c9:e5:fc:
33:90:8b:7c:cc:12:0a:e5:0d:1e:2e:5a:46:c7:5f:
81:63:a9:9d:f3:d8:a7:57:fa:ce:07:30:a7:63:78:
56:b2:51:f9:a4:ee:7f:19:a8:e2:f2:05:91:48:fe:
03:42:a2:ce:49:8e:fd:ef:dd:17:5c:06:4f:ce:38:
6b:e2:ad:ac:85:e4:ba:af:99:a0:ea:a9:2f:b6:19:
62:ac:06:60:ce:53:9c:f5:d6:bd:87:4a:26:ad:16:
ae:d7:57:68:5d:8e:5b:b6:0e:f9:a9:6d:6f:77:cb:
0f:31:85:78:b5:d7:82:1d:0b:a6:e1:41:89:ff:3e:
57:60:e0:86:8f:e5:3d:7b:4b:8c:0a:3d:fd:33:bb:
63:c5:be:9f:6e:71:f1:3a:00:56:45:52:b7:95:6f:
67:c1:b8:34:e8:f5:29:7e:1c:63:8f:f0:65:dc:8b:
61:0a:a8:74:b4:5d:0b:6e:c9:fb:e1:27:44:5d:1e:
21:b3:b6:79:e6:07:05:17:0a:62:75:be:24:c0:ea:
75:41:70:90:4a:df:2b:9d:1d:da:06:09:cd:89:ae:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:36:E1:E6:6E:83:CD:08:FB:FF:4F:50:45:C4:F1:0C:0E:7F:E0
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:00:fe:14:ac:ef:e1:68:19:5b:b9:b1:1f:a9:07:71:ce:
a7:fa:a6:72:4c:98:a6:99:e5:d9:41:08:10:f4:23:66:bc:5e:
e9:88:f9:ff:88:7e:18:fc:6e:92:16:ea:9a:11:f9:c7:15:c4:
6d:47:f4:a5:d2:4e:65:3b:b9:f1:66:79:c6:9a:59:d4:b5:ca:
bb:0d:70:5b:6a:5f:8e:ca:93:fa:d4:14:fd:0c:50:50:48:bd:
ea:cd:d3:4d:af:f3:d3:16:7d:e3:e1:33:94:e0:b6:67:85:99:
45:ab:6c:3b:a7:48:ac:b2:ae:fd:cc:fd:0c:e5:c7:68:da:f4:
79:0c:15:23:82:f0:c3:a4:93:ef:ef:b7:26:4c:52:75:bf:84:
03:3a:a4:45:51:dc:08:b5:4d:ae:49:82:5f:65:25:8e:dd:f7:
26:15:68:12:a0:73:8a:a9:15:ce:8b:be:02:8d:ae:3e:60:d1:
61:c8:f5:be:95:6a:36:1e:85:28:7f:90:60:eb:f7:c3:2b:ba:
b7:53:26:ee:bc:ad:7f:eb:0f:37:24:e2:a8:83:34:34:27:d0:
07:fd:2c:97:4d:64:38:0e:57:95:21:de:0e:a7:a0:c9:e2:e0:
a1:9e:99:10:27:81:ea:8d:a6:13:af:cb:33:12:1b:f7:99:32:
f0:bd:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:11:40 2025 by rpki-client