Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: SMCLxTeCSDSqrqDt0kLaXQTCxh+QLHMSkRkJp/ps3e8=
Subject key identifier: 26:19:03:42:91:CC:9F:E5:32:59:AF:43:4B:94:7A:29:E1:EC:84:72
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 01963C1D4572B329B64A7EC70FE69E04C5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 1060
Signing time: Wed 16 Apr 2025 01:01:13 +0000
Manifest this update: Wed 16 Apr 2025 01:01:13 +0000
Manifest next update: Thu 17 Apr 2025 01:01:13 +0000
Files and hashes: 1: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: 2zTrObX85NQ+ZDGbUo4kt6NPuaqxH9S1KxoKST7d5gI=)
2: ya12EPtNrcF0udvEcU2cfD6dvXE.roa (hash: JqrMXae8q96ruf/DmoCDw76yVSkMluiHBgpoAg21vqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:45:72:b3:29:b6:4a:7e:c7:0f:e6:9e:04:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Apr 16 01:01:13 2025 GMT
Not After : Apr 17 01:01:13 2025 GMT
Subject: CN=2619034291cc9fe53259af434b947a29e1ec8472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:96:55:7f:ba:35:38:f2:20:b2:f5:c3:29:
cd:95:49:02:38:34:da:3d:3c:3b:09:ad:ec:44:f4:
53:bb:77:4b:42:db:54:f9:d2:57:fd:0a:c9:50:e5:
fe:d1:8e:a0:97:29:e8:df:6e:17:a5:3f:57:dd:04:
90:5b:fd:11:81:b9:d0:d0:0d:5f:a8:22:d1:37:60:
23:0e:6c:ff:9e:bf:b1:14:7c:a7:18:56:d8:aa:c2:
ba:f4:be:ac:a6:90:b4:57:af:5b:3e:b3:88:ad:b9:
0b:99:85:4a:b4:63:55:be:c6:be:50:90:05:0b:52:
db:4f:28:4f:2b:16:9e:3b:23:a0:a4:58:80:ba:ba:
1b:93:b4:70:e2:79:4b:e4:7e:50:4f:60:d6:33:31:
8d:cd:ed:9c:84:74:eb:30:68:33:dc:92:11:c9:4e:
0e:1a:a9:b5:2d:15:26:c6:ca:04:1d:46:dc:b9:55:
bb:dc:3b:ec:90:cf:86:7d:41:1b:bd:e3:7c:31:c0:
9a:a7:b8:a1:dc:1c:75:a8:8b:6e:23:30:fc:4e:56:
d9:bb:7b:68:35:e3:a7:6d:9a:f7:c1:7c:73:48:e7:
68:0f:69:1d:43:6c:ef:ed:d2:fe:ae:64:2c:84:bb:
00:dd:aa:14:aa:d1:bb:a3:40:04:0b:65:97:56:c6:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:19:03:42:91:CC:9F:E5:32:59:AF:43:4B:94:7A:29:E1:EC:84:72
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fa:0d:a0:ef:91:ec:4d:77:ca:15:42:c1:61:68:2c:f2:0e:
0c:b5:aa:3c:84:34:5b:d2:35:d4:b2:d7:04:8d:c7:66:51:3f:
6b:fb:06:43:14:aa:9a:d3:d2:99:db:53:fb:0d:9d:88:62:e4:
e3:a6:f0:84:ee:96:4d:9d:90:2d:83:16:e0:af:00:e0:b9:d2:
1a:cb:6d:05:c8:bd:c4:82:22:27:24:1c:32:ea:58:cb:dd:99:
f2:f1:fd:48:ec:9c:03:d1:3b:9f:db:a2:f9:d2:4c:bc:e3:bc:
83:68:85:8b:e3:85:c8:b0:9b:8c:af:46:7d:c1:8f:d6:a5:d2:
80:46:30:03:64:91:4e:39:53:c5:03:3a:68:04:92:6d:ee:50:
79:e7:72:5b:0f:79:bf:84:2a:e1:60:9e:91:2e:e5:e8:90:99:
3b:fa:80:76:9e:47:52:c5:af:36:f2:59:73:1d:d9:63:db:74:
67:d9:79:73:e6:35:13:76:fe:17:6f:54:c2:ab:a5:0a:27:fd:
de:3a:60:2f:df:79:5c:c4:1a:6c:c1:21:37:32:95:1c:35:1e:
d4:d4:bc:98:1f:0f:76:1b:99:e6:3b:6a:0e:6d:9e:c4:13:fd:
a6:d9:16:56:ee:f1:e7:cf:5d:5a:31:ed:36:d3:a4:a8:20:c1:
02:74:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:29:35 2025 by rpki-client