
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
File: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft (raw, json)
Hash identifier: sMwxRfPZIjPz1NIC0lKK6rOqL4EXludolNlNtwO55Yk=
Subject key identifier: 10:C8:4B:B9:83:66:C3:DF:26:10:31:F5:9A:82:AF:72:19:EA:77:EC
Authority key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
Certificate issuer: /CN=c95998989fdb5a5f932147ad7162c63004e067a4
Certificate serial: 0196AEB2A3DB48DD0E1EBA4B5F001D154425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
Manifest number: 0A0F
Signing time: Thu 08 May 2025 07:01:04 +0000
Manifest this update: Thu 08 May 2025 07:01:04 +0000
Manifest next update: Fri 09 May 2025 07:01:04 +0000
Files and hashes: 1: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl (hash: WN6Bcse9rI1HhyO5OZB4cH2eYbMhgMkqHYixP3VlQMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:a3:db:48:dd:0e:1e:ba:4b:5f:00:1d:15:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c95998989fdb5a5f932147ad7162c63004e067a4
Validity
Not Before: May 8 07:01:04 2025 GMT
Not After : May 9 07:01:04 2025 GMT
Subject: CN=10c84bb98366c3df261031f59a82af7219ea77ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:87:38:6e:74:70:83:7d:55:17:a0:c3:51:
94:23:30:9a:ca:3f:8f:83:93:06:bd:2e:fd:27:76:
be:e7:19:78:af:fa:df:a5:5e:13:f4:93:5e:4e:bf:
d6:b6:9c:38:ed:0f:39:b1:0e:8c:1d:8f:08:00:62:
6a:04:e8:06:a9:e5:a7:83:8b:40:1e:8e:e4:4a:9e:
90:36:8b:9f:c4:4d:09:05:f2:40:fb:21:17:75:3d:
99:ed:1b:2c:f0:d6:ca:b2:15:63:8f:27:82:af:b8:
b9:01:96:fd:4f:45:2e:69:41:6e:fd:24:7a:09:c0:
fc:da:b4:a1:00:b9:66:70:63:b8:97:d5:c2:9d:b0:
a6:6b:b3:5b:f0:4a:86:95:99:16:71:d8:6d:72:a1:
e6:66:f9:92:20:5b:93:06:99:49:56:f3:db:3e:40:
63:87:e8:4c:f9:bb:0e:36:68:4b:c6:25:4a:3d:28:
7d:63:5c:14:a4:c9:0b:a6:7b:e2:25:ff:ed:32:e0:
c8:46:b0:2b:5f:56:a9:00:ae:df:69:4c:e7:c4:c2:
ff:8b:07:16:2a:78:a3:7e:da:8d:77:7c:da:80:47:
8f:c1:45:f7:43:b0:99:32:d4:6d:5e:1f:74:83:db:
5f:12:ed:19:e5:df:6e:dd:58:34:b6:c3:93:47:c2:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:4B:B9:83:66:C3:DF:26:10:31:F5:9A:82:AF:72:19:EA:77:EC
X509v3 Authority Key Identifier:
keyid:C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:27:35:93:c2:97:f1:c2:37:23:1f:9b:e3:8b:92:a1:fe:
ec:a1:d2:77:1a:a1:6a:45:b3:d8:32:e3:11:3c:a3:26:0b:e2:
e1:79:80:a8:03:9c:06:4b:c2:41:4a:3b:73:8d:66:47:a0:58:
fd:66:76:72:95:8f:c3:5a:50:7d:79:55:9b:28:21:83:66:8b:
68:ee:db:e4:da:6c:a2:2e:ee:82:dc:ac:a9:0b:98:f2:fa:51:
16:b2:47:27:00:72:0a:bf:fc:d6:06:17:3f:5e:da:1d:ca:44:
55:1c:86:a8:32:99:15:17:c5:60:92:63:f4:ed:8e:e8:60:16:
96:2e:59:ba:14:31:22:cd:7f:ab:18:79:39:34:be:3c:c3:07:
2a:9c:ec:bd:1f:75:22:59:41:48:26:a1:c6:cc:d9:7b:5b:6f:
17:69:f3:66:f5:70:f1:4c:32:86:1a:74:8c:d8:4f:1b:64:9f:
fc:e2:1e:5b:3d:65:e3:ae:7b:38:d5:3d:36:89:27:ac:be:fa:
de:2c:ff:85:5a:9b:76:6d:bf:15:fe:b5:d8:8d:c4:73:ea:fe:
28:a3:68:a3:f5:0b:c8:8c:6d:52:47:85:42:8a:7a:60:15:f5:
03:33:e7:84:0a:45:1a:85:98:86:6d:41:83:f9:a0:ae:e4:de:
1e:f4:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:04:31 2025 by rpki-client