Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
File: YcGgEMsk-ZbneJixJHJbVbY0OOA.mft (raw, json)
Hash identifier: EQI/HCbYYxRD7NR6eBPIBb6DDphHQsU4jtD1KZMW4IE=
Subject key identifier: 40:1F:BD:6C:32:3D:11:2F:54:57:6A:64:86:98:8F:D5:6C:4B:D3:BD
Authority key identifier: 61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
Certificate issuer: /CN=61c1a010cb24f996e77898b124725b55b63438e0
Certificate serial: 019847775B07E1E61C309C26DF7B06526043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 16:01:00 +0000
Manifest this update: Sat 26 Jul 2025 16:01:00 +0000
Manifest next update: Sun 27 Jul 2025 16:01:00 +0000
Files and hashes: 1: YcGgEMsk-ZbneJixJHJbVbY0OOA.crl (hash: iYluxPeppbi5sbmSTn/8fmr+PvBWlcS8Fwu8HWGeyRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:5b:07:e1:e6:1c:30:9c:26:df:7b:06:52:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c1a010cb24f996e77898b124725b55b63438e0
Validity
Not Before: Jul 26 16:01:00 2025 GMT
Not After : Jul 27 16:01:00 2025 GMT
Subject: CN=401fbd6c323d112f54576a6486988fd56c4bd3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:81:72:39:f8:88:6c:e4:88:c7:66:56:bb:
4b:49:f0:6e:28:67:f9:8e:e9:b4:ec:1b:2b:e4:17:
eb:d6:1f:5b:73:70:58:bc:e2:ff:d1:7f:ad:25:62:
e1:d8:0a:6f:e2:c3:21:b7:b7:2c:70:8d:c6:5b:ac:
71:fc:f3:88:d8:c8:1e:5f:b3:56:38:e7:f4:44:60:
c2:ed:b8:29:8f:90:8e:4c:f3:e6:c3:65:29:bb:29:
aa:fb:a4:42:a5:ab:db:44:13:da:36:0b:36:13:f8:
a3:66:04:51:70:4f:f6:26:f6:2a:68:03:5f:e9:31:
a1:36:1f:ab:8f:c9:1b:de:b0:8c:41:14:f2:5d:f7:
7a:96:b2:93:a6:87:50:85:54:1e:f8:4d:92:4c:b9:
db:02:7c:b5:7a:d4:f5:d1:5e:a7:0f:f4:40:96:41:
8a:b4:d5:eb:a8:e8:7e:a8:62:70:72:b3:f0:11:92:
02:3c:1e:b5:37:d0:d2:6b:03:10:5c:ad:ed:ca:3b:
2a:55:cd:24:a5:f4:24:cf:40:9e:1a:94:01:34:95:
9d:5d:e8:2a:da:f4:df:23:86:96:2b:5c:12:cb:fc:
2d:40:97:82:2b:77:9c:d7:c2:78:6c:05:1b:19:ee:
8e:29:68:62:bc:88:f6:5c:44:dc:05:e5:40:70:35:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:BD:6C:32:3D:11:2F:54:57:6A:64:86:98:8F:D5:6C:4B:D3:BD
X509v3 Authority Key Identifier:
keyid:61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:23:6c:ec:28:bc:1b:b6:3f:98:f6:d3:d5:9e:bf:97:78:58:
39:d2:6f:4a:5d:20:e4:24:88:06:37:3a:de:8f:d2:0e:61:b2:
07:b5:9b:60:54:a1:3a:8b:bb:69:df:80:11:bb:9c:a1:64:90:
e0:91:a6:20:4c:90:65:6d:b5:32:87:5d:06:c6:ec:85:85:c5:
74:8f:c7:f9:6a:7d:30:0a:86:3a:bd:0d:0a:c9:34:a8:b8:4b:
f6:77:d7:5d:0f:a8:a9:ac:2c:81:29:09:7f:43:0b:3b:3e:d2:
19:b3:19:cc:93:f5:e6:e8:e6:67:a0:ff:1a:81:c5:94:c3:ef:
bb:ea:a8:2c:39:cd:49:20:04:66:71:ee:8a:49:45:a3:b0:e9:
ef:55:cb:a5:79:18:fd:c2:3f:5e:97:e4:8d:eb:24:37:a2:9b:
b3:5d:7f:3d:cc:0b:49:84:f6:89:a6:1c:6e:9f:4d:fd:1b:96:
65:9c:83:fc:06:7c:37:82:56:d7:fc:41:52:c1:e5:0f:e3:ca:
7b:56:db:3c:15:99:11:66:e0:40:4b:54:20:60:b8:22:86:eb:
99:3b:b8:90:dc:8c:b1:47:f6:ba:b5:e5:91:0b:f0:7d:61:d3:
21:0e:3b:e3:3e:84:2e:3d:60:12:64:46:6f:ab:41:0e:e5:6f:
c2:43:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:19 2025 by rpki-client