Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier: KmiUnDBEUC3a1pquZbgR4UbBWIkI42ddkNCkk3yq90Y=
Subject key identifier: 48:6F:B0:5E:5E:4A:40:4B:C3:43:0B:48:80:D7:B0:55:D6:3E:B0:4B
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial: 019652A48FD3971F0984B7592DDF516E7EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number: 0586
Signing time: Sun 20 Apr 2025 10:00:38 +0000
Manifest this update: Sun 20 Apr 2025 10:00:38 +0000
Manifest next update: Mon 21 Apr 2025 10:00:38 +0000
Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: Hq8Ld+MCetC7OdM1qsOy6GZZMjLms6NY1SQSG+/hTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:8f:d3:97:1f:09:84:b7:59:2d:df:51:6e:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
Validity
Not Before: Apr 20 10:00:38 2025 GMT
Not After : Apr 21 10:00:38 2025 GMT
Subject: CN=486fb05e5e4a404bc3430b4880d7b055d63eb04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:4e:bd:c4:64:8f:1c:6b:af:b3:c3:36:5f:
63:a6:e2:20:5d:5b:1c:1e:89:eb:7a:ba:c1:79:81:
59:f2:56:0b:a4:83:a8:b4:9f:7e:f8:3e:aa:d8:69:
2a:5e:d2:76:b7:b6:2f:4d:a1:60:73:b7:74:93:1e:
83:f1:1d:c7:b7:47:3c:4a:ac:54:60:27:d5:f9:7e:
47:52:89:f2:a1:79:3a:2f:31:38:b3:35:a1:db:c3:
5c:41:09:36:ef:a9:4e:c6:c3:d0:e5:33:87:b7:4f:
56:61:18:07:32:62:c9:ea:9d:98:63:ce:65:b9:c9:
d9:b7:71:8b:29:b4:56:e6:d7:7f:de:98:89:6c:83:
15:58:db:fe:3a:b5:38:a3:50:2e:5d:f3:a7:1c:84:
83:f7:5d:37:a4:c9:97:22:62:e4:da:cc:f0:e8:15:
15:09:5b:eb:bf:27:ef:f9:3f:ea:95:a7:73:11:7e:
8e:7a:ef:23:7a:92:4e:40:29:80:eb:aa:06:1f:46:
ff:af:35:74:bc:84:a2:2c:00:df:a8:5b:40:79:e9:
3c:e3:ae:62:cf:f3:86:94:f2:ba:57:77:07:6e:c8:
e4:60:ae:13:83:7f:f7:fb:18:10:e1:c4:71:31:98:
99:0c:81:7c:f7:8f:a3:1c:8f:50:67:d6:54:2f:cd:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6F:B0:5E:5E:4A:40:4B:C3:43:0B:48:80:D7:B0:55:D6:3E:B0:4B
X509v3 Authority Key Identifier:
keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:21:6e:77:8c:f5:85:ae:e3:a0:9a:de:d2:77:31:35:5c:bf:
39:e4:57:04:ec:ad:40:ca:b1:8b:0e:bc:1c:89:5c:eb:11:9c:
c6:ac:39:81:59:98:b7:e1:b2:a9:e0:7f:93:fc:e2:a8:1c:59:
df:f1:98:b7:87:e1:2b:66:0c:88:3a:7f:82:97:ed:1c:c1:bb:
fc:7c:9d:d5:3b:b5:c1:aa:02:64:83:ac:63:ff:87:b1:34:f2:
08:2f:d0:f5:fc:c4:7e:51:05:b9:60:88:41:62:67:71:28:e3:
54:dc:67:1b:90:7e:73:62:03:76:15:2c:ad:46:01:8e:fd:cb:
40:1a:74:34:a7:0b:d3:ce:d0:92:2b:92:37:ee:5c:07:fd:1c:
20:a6:87:64:dc:62:72:e9:c9:a2:c2:0d:a9:30:89:30:aa:c3:
99:37:26:0b:5b:6d:13:fd:c7:c3:0f:4e:93:9d:a6:d0:8e:21:
90:c4:26:b6:23:c2:a7:83:a0:5e:cb:40:dd:b6:2a:6f:e5:aa:
dc:97:ed:f5:5f:d2:d8:e0:ba:58:ab:92:71:68:ce:30:23:a1:
c4:29:79:8f:17:ed:6a:71:9d:50:9f:d1:a7:f6:ae:f2:15:35:
b1:89:0c:6d:5b:a0:6e:44:d0:d5:cc:10:fe:31:31:e1:10:a2:
06:ca:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:18 2025 by rpki-client