Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
File: ys4LZXV7SJmVtfwzShRV5KNfBks.mft (raw, json)
Hash identifier: xy6Fj/LhAWP80OBt9swE7GFn5dzVO59CRj9hpHFMZ7Q=
Subject key identifier: 0C:35:E5:69:9F:05:54:01:D8:EC:E6:85:76:5E:A9:3E:2F:8D:A6:6D
Authority key identifier: CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
Certificate issuer: /CN=cace0b65757b489995b5fc334a1455e4a35f064b
Certificate serial: 019828233F62B762CD694652F86E45FA5645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
Manifest number: 57
Signing time: Sun 20 Jul 2025 14:00:55 +0000
Manifest this update: Sun 20 Jul 2025 14:00:55 +0000
Manifest next update: Mon 21 Jul 2025 14:00:55 +0000
Files and hashes: 1: ys4LZXV7SJmVtfwzShRV5KNfBks.crl (hash: +qgQiMePdPdmXww9dcVQPfvT/l7DZss2eiYWOBdZhLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:3f:62:b7:62:cd:69:46:52:f8:6e:45:fa:56:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cace0b65757b489995b5fc334a1455e4a35f064b
Validity
Not Before: Jul 20 14:00:55 2025 GMT
Not After : Jul 21 14:00:55 2025 GMT
Subject: CN=0c35e5699f055401d8ece685765ea93e2f8da66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:85:35:67:b3:e3:42:0b:6d:02:6e:ed:97:
12:22:42:ef:91:c2:4c:9a:1d:3b:9d:83:c6:ab:74:
d7:0e:7c:72:ba:4d:70:13:6e:6a:da:dd:db:82:e3:
03:fd:80:ff:3e:08:e9:94:59:8c:45:5f:da:d9:fd:
50:3e:de:e4:d0:af:d4:27:7c:9b:d0:d2:ed:59:35:
e5:bf:ac:ad:f7:73:32:80:b4:ce:52:52:84:20:d6:
2d:f1:65:5d:f8:6e:5d:c8:5b:e6:43:6b:7f:72:70:
ad:d1:28:a4:ff:be:c7:d3:87:3f:52:c2:cb:ec:9d:
01:c2:e3:88:16:ab:87:e5:0c:87:4c:65:3c:41:bf:
b9:28:9c:f9:05:da:cf:c0:17:a7:08:1e:d7:f6:f2:
89:91:98:4f:67:75:c6:10:3d:9f:29:73:12:bc:3d:
cc:af:05:23:46:39:9c:ed:fe:20:fa:52:0b:6c:c5:
60:8a:96:9e:a7:c6:44:cb:34:f0:21:79:90:4e:64:
ae:02:38:14:01:47:af:93:25:33:0d:5b:60:e5:6a:
e5:45:62:75:ac:d8:38:9b:aa:b1:06:55:f5:ea:9f:
36:e8:62:ec:3b:a7:c5:7c:ac:dc:28:7a:30:d6:5d:
97:93:5a:ed:75:81:8e:a4:d5:6b:a8:92:ee:dc:7e:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:E5:69:9F:05:54:01:D8:EC:E6:85:76:5E:A9:3E:2F:8D:A6:6D
X509v3 Authority Key Identifier:
keyid:CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a1:7e:92:92:22:d0:a9:0f:ec:14:95:57:1a:00:3a:e2:24:
8d:51:3b:7c:91:4e:f1:a0:54:5d:14:a3:a0:68:bd:79:82:0e:
43:4f:d9:92:1f:0f:45:4b:40:06:5a:74:60:bd:a8:1f:cb:9a:
6e:97:dc:dd:b3:94:d1:43:0c:1a:95:a4:c5:82:3d:b9:51:72:
e3:4d:50:3d:5d:09:eb:32:42:3d:96:01:46:3d:4f:4e:90:7b:
7e:7e:31:83:e4:31:85:58:d2:bd:37:56:19:44:11:b7:3e:5b:
1c:37:19:45:b5:db:22:8f:9d:ff:53:d7:fe:c8:fc:67:47:ab:
a6:41:27:2f:d1:33:f3:dc:3e:8a:ed:9e:0a:0a:df:61:3f:62:
b6:7b:58:7b:b7:17:b3:9b:7a:f4:f8:92:82:6e:8c:5d:ca:06:
f5:c4:1f:44:1e:ba:85:30:81:c5:5a:a7:d3:98:41:21:65:f7:
f2:76:85:74:f2:62:7f:3d:0e:5b:1c:41:bf:bb:9c:43:39:ac:
33:c1:81:1a:81:d2:2c:a4:8d:d8:a1:72:bb:c7:1c:09:14:82:
65:1e:09:10:75:7f:2b:57:18:9e:28:c3:25:a1:a8:29:34:2f:
52:ab:59:1a:99:ea:7c:f4:8d:eb:50:46:6e:32:b9:2d:e0:45:
a6:c2:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:20 2025 by rpki-client