Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: U/z4wnchPzxQH0pcKjYGNkhQDR7glzksloYhkaMwhR4=
Subject key identifier: 37:E1:51:54:36:7F:6F:57:D0:41:C7:1F:CA:9D:F5:7A:EA:16:FD:6D
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 01964142AFBFF4BC60FA3BACBCCD10374F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 09F8
Signing time: Thu 17 Apr 2025 01:00:11 +0000
Manifest this update: Thu 17 Apr 2025 01:00:11 +0000
Manifest next update: Fri 18 Apr 2025 01:00:11 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: S2mV8k9im0VtTMclcxcJtohgES+UeRXFDkRXfDRBTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:42:af:bf:f4:bc:60:fa:3b:ac:bc:cd:10:37:4f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Apr 17 01:00:11 2025 GMT
Not After : Apr 18 01:00:11 2025 GMT
Subject: CN=37e15154367f6f57d041c71fca9df57aea16fd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:45:d4:c7:c3:c9:32:05:23:87:d1:f0:05:
df:39:49:d6:f7:c0:dd:fd:88:b1:a3:c2:1c:00:ec:
66:84:8c:40:c0:52:ee:e9:34:a7:bc:d4:37:04:eb:
12:46:33:d8:89:01:b3:f9:58:8d:f3:9a:f4:6c:36:
b4:3d:04:34:91:4c:fc:48:5d:bd:ef:da:a8:e6:c9:
6b:75:f6:3b:52:b4:59:7c:3f:2f:61:9d:ff:98:cd:
f3:10:e8:d5:36:a4:99:8d:65:c0:b2:5d:da:1f:86:
6f:e5:7d:4b:81:f5:15:d1:b0:65:08:b4:b9:c5:0f:
43:c8:52:fa:22:d8:e2:72:ad:76:d2:80:04:35:97:
9e:3f:29:5f:c5:6f:08:11:cd:58:eb:f5:28:f8:5a:
57:6d:4d:08:ac:93:ec:c6:f6:a9:c6:67:ae:f5:de:
fe:84:0c:e3:52:66:cf:23:ec:c3:a5:3a:a0:c6:43:
02:fa:1d:d1:a6:ff:11:c0:49:f8:77:6d:f1:19:83:
43:e7:e6:65:54:b0:a8:65:3e:32:b0:39:84:c7:df:
8d:7d:d9:1e:79:22:2f:43:c5:88:d7:c6:1c:b2:13:
2f:6c:3e:e3:5d:4e:23:d3:73:93:05:09:30:09:0b:
7e:4d:d4:bb:2c:d8:29:60:01:e4:fa:35:0d:d9:27:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:51:54:36:7F:6F:57:D0:41:C7:1F:CA:9D:F5:7A:EA:16:FD:6D
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:e4:06:4c:10:95:eb:c4:d5:38:a1:75:1f:61:fe:7b:b1:
4b:2d:39:50:54:f4:a0:83:53:b5:6f:d2:c1:64:0a:16:91:e3:
db:e8:ca:8f:7d:f8:ee:44:7e:34:b6:52:9d:15:5f:24:d6:c2:
5e:32:c3:44:4c:a0:b2:2f:af:99:d9:59:d9:73:73:01:cf:39:
b1:52:ae:7a:73:b8:51:8d:3e:47:5a:43:9a:9a:cc:85:6b:80:
59:c7:92:40:0f:39:71:82:5d:9d:96:c7:69:b3:79:d4:53:42:
ce:c3:1a:45:a5:c9:11:02:69:ff:71:87:ad:1e:1b:15:cd:4a:
a0:ba:06:26:d9:a3:04:79:fc:44:ec:d0:6b:ee:d6:c0:af:69:
43:e8:64:63:e6:d2:84:57:70:c6:c1:70:77:ec:a8:fd:59:61:
42:d4:46:5f:bc:fe:32:1b:da:1f:e4:0b:20:13:81:c8:6d:fd:
c5:59:5c:40:34:4e:e3:a9:30:4d:ab:51:74:86:47:19:66:3b:
26:ff:50:de:1e:6a:84:6d:bf:66:0d:35:8a:85:5f:b0:d5:4e:
8c:4f:70:cd:63:0a:ac:86:ba:c6:88:aa:6c:e4:c4:5b:0f:c6:
40:69:61:47:f4:fa:f0:4e:7d:c0:30:47:d0:d4:d1:1e:df:64:
fe:1c:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:41:48 2025 by rpki-client