Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier: cNnhtyRKQBFvsGrs8dWvCifYYzcwJiy3su0jeT+vLb4=
Subject key identifier: 34:6A:9E:0F:19:08:44:E1:14:71:B7:7C:98:5F:FB:2A:07:38:23:A8
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial: 01965500E5D5820FF5995A35BDFCAB81218F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number: 0207
Signing time: Sun 20 Apr 2025 21:00:44 +0000
Manifest this update: Sun 20 Apr 2025 21:00:44 +0000
Manifest next update: Mon 21 Apr 2025 21:00:44 +0000
Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: N5g7w/NIG3YWvh8PHDiDSDNh97YhZ21QZcEAX8HA1qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:e5:d5:82:0f:f5:99:5a:35:bd:fc:ab:81:21:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Validity
Not Before: Apr 20 21:00:44 2025 GMT
Not After : Apr 21 21:00:44 2025 GMT
Subject: CN=346a9e0f190844e11471b77c985ffb2a073823a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:3a:03:44:8b:9b:2f:61:f4:00:0f:15:ff:
24:f2:f1:df:30:f4:44:9e:64:90:2b:33:03:6c:2f:
e1:30:4f:62:8d:3f:9a:21:e8:07:02:2b:7a:23:f4:
22:66:da:35:54:7b:0b:d8:d1:46:4f:7e:16:69:4d:
57:18:af:8b:3e:b7:8c:f3:f2:0c:77:52:db:a0:4f:
60:86:b4:17:4c:f6:4f:b8:38:e6:6d:00:d6:2e:9b:
02:c4:cd:0d:0b:86:04:10:8b:eb:ac:b5:a7:51:c9:
e3:b9:e3:ab:3e:31:ec:46:fd:a4:cc:ba:f7:dd:86:
19:d9:1d:55:66:74:db:85:d0:a4:b4:2d:d6:74:7c:
fe:b3:a8:10:c1:e1:cc:c6:44:25:1e:ba:48:d3:07:
d3:35:a2:3d:9c:3b:37:e0:6e:ec:85:0b:6d:a7:b2:
f0:b3:8e:67:3f:5a:e4:b2:b3:8e:bc:7d:bf:a5:82:
19:8f:f8:ab:a4:14:72:ad:56:a7:59:d7:21:41:2e:
c3:03:ea:e4:47:d9:82:5a:d1:a5:0a:ca:d7:78:c0:
8c:ee:2c:4a:1e:eb:3d:1e:f5:50:49:6c:1b:58:66:
d6:81:c1:71:a8:42:29:d8:ea:b6:77:5e:bc:d5:83:
32:16:bf:dd:ec:c7:ae:18:ec:ce:c8:c3:64:ea:9b:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:9E:0F:19:08:44:E1:14:71:B7:7C:98:5F:FB:2A:07:38:23:A8
X509v3 Authority Key Identifier:
keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d5:74:c4:b5:e2:d1:64:51:12:4c:71:47:5e:b2:3c:f4:5d:
fd:ca:66:7b:da:dc:b2:3e:14:e4:67:fc:87:39:e7:a3:14:29:
43:17:99:ad:eb:ae:17:cd:b9:82:09:95:5b:3d:e1:12:68:aa:
05:24:2e:e6:15:d8:bb:0d:83:3e:1a:51:86:32:3b:bb:ef:27:
25:98:3e:31:60:40:3e:5b:c8:fa:a2:a6:f0:e5:b5:40:bd:24:
46:eb:b3:77:29:90:e1:18:0c:a7:39:8d:ae:b5:37:77:c0:17:
c4:af:d3:38:ac:a8:c5:d2:0a:d9:77:17:5c:f6:8b:5a:2d:90:
3e:34:22:7a:de:c1:ce:f5:64:e8:63:e0:d4:ef:cc:13:6c:94:
ea:31:6b:1b:49:e9:a1:ae:a9:13:60:b8:f7:93:b2:4f:d8:d8:
cf:36:ec:a1:81:3e:d5:d6:24:d3:d4:0e:67:e4:c1:12:47:15:
53:1b:3a:4a:cc:7e:46:30:18:96:be:4f:6a:e1:b4:54:c9:50:
d4:b0:85:df:c1:83:c8:87:ae:87:9e:2d:30:ea:6f:5e:f4:c6:
41:ed:a3:bc:fc:dc:69:71:87:79:5c:64:aa:63:ac:48:5f:fc:
7d:68:54:0d:1c:1d:db:54:5c:76:8d:ff:ed:38:02:d9:b3:73:
1d:12:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:33 2025 by rpki-client