Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: Wmp0xI9yB0wMVlkTPdILaoE41px3hG21QK5pPvpl+rY=
Subject key identifier: 4F:39:4E:3A:6F:ED:DF:58:B7:D3:C9:5F:AF:4F:FD:B1:5B:FD:0B:96
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 01984965C231DAC97CA1122385C82A3BC31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 10B3
Signing time: Sun 27 Jul 2025 01:01:02 +0000
Manifest this update: Sun 27 Jul 2025 01:01:02 +0000
Manifest next update: Mon 28 Jul 2025 01:01:02 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: Amq6VIJKg7FvrS9L6nvTv9VPLX3yyLBPKu5RgKdxLfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c2:31:da:c9:7c:a1:12:23:85:c8:2a:3b:c3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Jul 27 01:01:02 2025 GMT
Not After : Jul 28 01:01:02 2025 GMT
Subject: CN=4f394e3a6feddf58b7d3c95faf4ffdb15bfd0b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:00:bd:02:4c:09:0f:93:15:a9:80:60:68:
e3:95:39:4e:1f:5c:2d:ca:17:25:ee:0b:d2:61:91:
44:79:d6:b7:ba:b3:b8:b4:a1:9b:ba:a0:5c:bc:40:
ba:30:d6:0d:5f:fc:00:7f:75:86:3b:03:84:a2:fe:
e3:43:88:e0:25:64:cc:69:f4:58:58:7e:0d:a4:0d:
80:52:b3:2f:e3:e8:49:0e:c1:a7:91:48:be:66:97:
c3:06:db:4a:40:56:ce:1c:4a:23:02:7c:5c:9a:08:
ef:c9:86:3b:9c:48:17:a8:aa:18:45:c9:1a:6c:4b:
51:5b:d1:82:a6:35:11:3e:42:84:31:bc:68:16:96:
a2:c4:9a:c3:3d:e0:82:54:03:df:79:3c:a7:8a:33:
90:cf:82:df:a2:6c:c3:2e:ce:6d:2b:3a:d3:91:f1:
33:29:7c:ea:46:b7:4a:d5:82:24:16:29:49:b6:27:
82:86:7c:10:5c:01:ae:e6:69:7c:1f:4f:53:94:d0:
4c:7b:88:26:aa:e5:b3:bd:15:2a:c8:98:76:52:16:
1b:91:09:79:1d:77:85:a3:d4:46:d6:2b:ea:22:8c:
ac:7b:a4:8b:f5:2f:c2:ec:57:4d:fc:84:0a:4d:21:
9f:ed:ae:ae:2e:7a:f2:20:f1:42:90:40:e1:98:25:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:4E:3A:6F:ED:DF:58:B7:D3:C9:5F:AF:4F:FD:B1:5B:FD:0B:96
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:14:f4:73:f4:c8:4f:0c:05:47:fe:af:75:c0:27:ea:9b:30:
fe:e2:ab:25:98:09:76:44:a1:59:2e:67:67:2a:6d:0c:f8:76:
59:a0:ef:9d:3e:75:c1:b0:12:02:b3:47:50:39:8f:bb:12:d9:
11:91:19:53:4b:fd:07:18:be:a8:71:30:8f:34:b4:52:d3:d1:
41:eb:20:93:d0:c3:fb:35:28:4f:ac:9a:ac:42:5d:ce:76:97:
e0:1d:10:59:36:f4:de:d4:c2:8f:14:14:1c:2d:0f:f0:21:97:
22:46:88:3f:68:df:52:e2:41:52:85:87:61:07:c7:51:3f:c1:
f3:9d:08:7a:c5:55:ac:61:f3:3f:a1:d9:0d:00:9b:f6:69:03:
7e:49:51:00:b3:6b:c5:28:92:a0:17:62:03:10:f0:11:7e:ae:
39:1b:b4:a4:94:60:4a:8a:6e:3f:c2:e4:df:eb:83:2b:6d:6f:
d7:d9:3c:4f:c0:99:57:e3:c2:c6:17:70:58:a9:4c:13:d4:95:
f7:6a:a4:99:07:16:a9:c3:55:60:e8:6a:f7:9c:1b:0f:2c:ae:
14:2a:e3:d1:35:d9:4f:23:b1:35:e4:a7:f5:1f:dc:27:10:84:
1f:f7:d6:a2:42:6d:75:a9:52:86:25:21:0c:64:5c:65:8f:4c:
c9:87:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:17 2025 by rpki-client