Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: FUdZozfR1hawapnL9Yi1skhEAnNqllbl+aagP6hQWXA=
Subject key identifier: 83:7C:75:7C:6D:C8:A0:C7:3F:A2:39:A3:D4:E6:EC:BE:69:F0:C0:99
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 019648FC94D9E9336472B8C501C63064ECF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0BB0
Signing time: Fri 18 Apr 2025 13:00:34 +0000
Manifest this update: Fri 18 Apr 2025 13:00:34 +0000
Manifest next update: Sat 19 Apr 2025 13:00:34 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: zVe7PrmVEwpLCHSteKTEu9ZP00JGatdx4Y9gbH+KVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:94:d9:e9:33:64:72:b8:c5:01:c6:30:64:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: Apr 18 13:00:34 2025 GMT
Not After : Apr 19 13:00:34 2025 GMT
Subject: CN=837c757c6dc8a0c73fa239a3d4e6ecbe69f0c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:1f:88:3e:f0:6d:b7:03:49:30:9c:d8:5a:
64:f0:cf:54:3a:72:74:8a:c5:5f:88:3c:b0:c0:32:
6d:03:16:ff:84:88:37:c4:c4:20:1a:29:3c:58:df:
21:6a:81:04:f3:29:7a:2d:ef:db:c5:aa:85:a0:99:
b7:7b:dc:09:a3:e8:b1:f9:a3:94:da:7f:c5:1e:be:
93:43:79:ec:a2:35:2c:a2:ef:89:f8:06:49:1e:6a:
a8:6a:0d:58:54:1b:d1:b2:f0:97:74:cc:c5:f0:a6:
fc:8f:1b:73:0a:c2:40:7f:63:25:5c:b6:83:f9:79:
56:53:65:0a:a0:a1:03:3d:ca:c1:d5:7f:5f:b6:7e:
bf:fb:95:1d:c3:06:f3:7c:aa:bf:a1:20:b6:6a:90:
33:33:31:99:df:2b:49:83:80:31:7c:33:12:47:f8:
a8:d2:34:37:2a:8c:8e:79:4a:9f:57:69:ab:fb:a2:
a6:0b:fe:39:ad:82:da:cf:4a:69:d2:13:a4:65:fc:
a0:d9:92:f0:e9:d2:50:58:0b:e2:e9:68:4d:49:10:
d5:57:da:1e:fd:3c:74:ee:2f:0c:2a:25:e4:2b:70:
cd:50:5a:92:ff:18:41:92:b4:1b:57:89:37:28:40:
21:65:c5:e6:48:99:a0:8b:06:2b:e5:f9:bf:19:56:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:75:7C:6D:C8:A0:C7:3F:A2:39:A3:D4:E6:EC:BE:69:F0:C0:99
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:40:6f:e7:6e:8d:5e:1c:a5:40:b0:63:96:32:1a:da:74:8e:
9c:5a:de:e6:a9:61:3c:cd:68:a3:db:74:21:7a:95:5d:63:72:
51:fd:c5:0a:2f:c6:16:4a:46:22:ab:d4:99:63:e3:3b:5e:a0:
1b:d9:f0:cb:12:35:83:10:f1:34:ac:a3:34:7c:f3:aa:a7:4e:
5f:9a:54:21:5a:99:8e:fe:d7:11:31:5e:fb:26:14:9c:af:c1:
07:b5:ab:e7:f0:02:e6:8c:7d:14:36:b3:ba:c9:0c:1b:d0:bb:
b4:5f:08:11:ab:8a:19:48:fb:80:6f:83:8c:79:4b:1f:c3:bd:
81:a5:e4:cc:b0:8f:23:f8:e5:8e:e7:0d:f4:50:ab:16:cd:5a:
a1:7b:a4:c1:85:40:63:5c:73:56:a1:02:60:12:f3:5b:f9:74:
ab:e8:02:3e:09:e5:e1:c2:cb:dc:aa:a9:f6:ab:87:17:e8:6a:
f7:8a:95:f9:66:67:f2:cc:43:c9:04:84:88:55:47:44:14:89:
07:cc:9c:a6:cc:0a:75:19:be:ac:61:f2:82:e6:4b:c8:9e:32:
35:d5:b3:fb:9b:92:2e:01:d5:b0:c4:c7:c8:d9:17:85:ab:d8:
b8:ab:de:12:b4:7a:96:6b:ea:8a:d4:78:e8:49:08:2e:c5:8b:
c5:11:35:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:49 2025 by rpki-client