Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: AzN5MwPrx2HVhM4XhtLXOynxYX2zMafXQAt7xDJNuYw=
Subject key identifier: EF:26:87:64:67:B2:3A:9D:AF:C3:E0:53:63:05:2D:98:3D:76:EA:89
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 01964C6BF2E44D754529D310A12777B86C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 05:01:04 +0000
Manifest this update: Sat 19 Apr 2025 05:01:04 +0000
Manifest next update: Sun 20 Apr 2025 05:01:04 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: FijYTeTX1g5d7jfU7RLg9AppQYPAIBq/xF1b5OCGkFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:f2:e4:4d:75:45:29:d3:10:a1:27:77:b8:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Apr 19 05:01:04 2025 GMT
Not After : Apr 20 05:01:04 2025 GMT
Subject: CN=ef26876467b23a9dafc3e05363052d983d76ea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:db:52:00:b7:27:dd:d1:ae:41:08:e1:59:
ec:19:ae:ad:cd:58:05:50:14:a3:12:42:2d:f1:c9:
a7:11:09:9f:e7:a5:61:8d:c7:f6:d9:be:1e:69:5e:
36:ea:80:d6:df:ac:44:5c:bd:c9:29:4d:34:96:1a:
7d:ca:49:9e:a1:3e:88:2a:23:12:aa:87:04:34:40:
1f:27:2c:96:5d:93:8e:12:7b:97:e9:26:bd:ab:e6:
d2:7c:98:c7:02:8f:53:63:1a:41:6f:99:c9:34:66:
e2:e8:43:34:32:d3:fd:f1:44:81:c0:16:59:e8:ba:
fa:e8:ea:d0:28:95:12:7e:16:e4:bb:36:b8:aa:07:
cf:7f:4d:0d:80:ab:d2:66:47:a4:44:1c:84:93:fd:
db:60:30:96:44:1b:b4:f3:ad:70:08:89:81:4f:38:
c3:d5:ed:b4:fc:70:97:88:30:44:26:0a:ed:06:6d:
30:43:94:31:95:9f:48:12:42:fb:a0:4f:a0:78:98:
47:4a:24:60:bd:4a:1a:15:9e:ad:98:9c:d6:8c:7b:
e8:82:86:ba:25:44:81:20:bc:94:22:7a:d3:a9:5e:
69:77:6c:d8:be:50:28:56:00:9b:bc:7f:9b:c1:21:
9a:4c:ea:6c:e0:e8:14:8f:cc:f6:b2:52:dd:69:94:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:87:64:67:B2:3A:9D:AF:C3:E0:53:63:05:2D:98:3D:76:EA:89
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:68:8d:9f:0b:6d:17:89:8d:70:94:b1:86:6e:0d:79:84:
01:b9:bb:ed:54:56:bc:a6:d3:ab:f9:d8:ab:1b:dd:12:7b:6b:
1c:96:01:09:f0:d6:ea:e0:03:39:49:92:72:2b:b4:08:0a:4f:
1b:e2:a6:ac:71:7c:42:ce:a9:ee:fd:a0:e3:bc:f9:17:99:ee:
3c:4a:5d:e4:bb:c9:50:b2:d3:cc:c7:34:ca:a5:74:ab:2b:87:
38:7d:24:7d:38:41:52:85:02:05:d4:96:3c:2c:a7:74:1a:2d:
92:44:2b:b0:0e:d2:b3:5c:82:ce:06:b5:ae:39:57:24:f4:cd:
77:91:37:02:e2:74:2d:67:f3:3c:b2:bd:a1:30:63:7f:78:5a:
5d:23:28:dc:60:7e:06:1e:cd:18:d9:ba:26:28:55:ed:f3:b9:
3c:dd:f7:58:da:74:33:08:f2:91:92:51:6e:fb:43:72:07:13:
c5:ff:36:3d:f0:4a:36:f3:16:57:d9:c3:52:ef:98:32:a7:3a:
59:b5:38:94:7c:c3:e1:9b:ab:1b:f1:24:6a:de:de:75:6f:2f:
05:c6:3a:6d:dc:f0:41:9d:49:55:d5:3c:89:31:94:28:05:72:
25:c3:9b:69:34:5f:9f:8c:5c:20:c9:28:77:2a:fe:c5:d1:3b:
73:76:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:51 2025 by rpki-client