Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: asl+UTDgHqERqFzPXMa2+4VJ4uiJsLcOllYJau1pSQw=
Subject key identifier: FF:B8:C5:4D:7B:82:78:21:3F:40:97:D6:04:35:E3:1C:62:20:FA:B5
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 0197C9F04B95AC3235A3FAA7BD985DE4533B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 10AC
Signing time: Wed 02 Jul 2025 07:00:57 +0000
Manifest this update: Wed 02 Jul 2025 07:00:57 +0000
Manifest next update: Thu 03 Jul 2025 07:00:57 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: bNuSVNcDuruKb47goFokgEkOucCuZ5wlZRZg6jcEBRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:4b:95:ac:32:35:a3:fa:a7:bd:98:5d:e4:53:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Jul 2 07:00:57 2025 GMT
Not After : Jul 3 07:00:57 2025 GMT
Subject: CN=ffb8c54d7b8278213f4097d60435e31c6220fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:1d:aa:8b:a6:4a:c0:5a:16:e1:53:73:71:
f9:88:c5:b1:00:b4:47:7e:72:72:12:92:ed:0e:0e:
45:38:7b:93:4b:cb:e9:f1:3a:99:ee:e0:c3:e2:a4:
0e:34:ee:14:1f:3a:dd:42:69:46:71:ed:9d:62:fb:
b4:c1:93:33:83:1f:12:c4:4e:b2:81:13:9c:e3:67:
ef:7d:19:f5:b9:62:27:36:64:ef:af:b1:5d:ed:81:
dc:65:55:43:6b:8f:d5:34:4c:4a:55:57:ed:af:2d:
83:90:9b:81:cf:e0:c6:64:eb:37:40:1e:6f:8b:a6:
93:29:b6:b7:24:7d:3f:45:d8:f1:83:7f:33:25:35:
52:ff:47:55:65:8f:5f:21:9c:30:4b:cc:77:9e:b5:
a9:0b:35:93:4c:4e:40:0c:c2:6e:c8:4e:f2:67:08:
0b:31:ba:c5:f1:52:fc:39:76:e7:45:90:19:88:55:
01:6d:45:57:47:7c:cb:51:c8:b9:3c:1d:59:42:26:
3a:46:3d:25:7e:c2:93:db:83:ed:d1:9d:19:c8:af:
87:5d:b9:a3:ff:c0:5c:4c:ed:15:92:63:ce:e3:c8:
40:85:d9:69:e6:1a:86:57:a3:a1:80:60:d4:f8:1f:
dc:b2:db:c5:62:a2:23:b4:2d:be:e4:b6:8c:3b:5e:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:C5:4D:7B:82:78:21:3F:40:97:D6:04:35:E3:1C:62:20:FA:B5
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:49:99:18:62:4f:0b:09:6a:c1:95:50:33:ce:b4:91:76:24:
51:7c:72:4f:93:bb:49:77:ce:78:e5:3c:a0:94:90:89:49:ce:
52:ed:86:5c:15:45:f4:55:b7:01:6d:f6:27:f6:d6:4e:c7:43:
1c:e3:63:45:e6:61:d0:f0:0e:be:4f:74:ba:22:4e:c4:fc:94:
17:2d:5d:b5:63:03:51:74:a6:2d:91:6f:67:2d:d9:e7:fe:1e:
eb:b2:7c:bf:d6:cc:1c:e3:9b:67:bf:da:0e:89:80:f4:b9:ab:
c3:30:0e:c0:2d:fa:f9:dd:b9:5d:1b:c6:7e:8b:28:a8:a0:d9:
86:1c:89:26:15:4b:84:41:24:a7:10:5f:dd:63:40:53:d3:ca:
86:d8:4d:d0:10:5b:bb:f5:b4:92:4d:f3:34:9f:10:2a:0e:2e:
5a:8c:b5:42:6d:b1:5e:20:da:51:9a:75:63:43:07:64:00:72:
ad:7a:cc:c3:ba:4b:6f:72:e2:9c:bf:68:f3:74:87:ba:e8:e4:
28:04:51:3b:6d:19:17:b2:f7:f1:91:e2:5d:93:5a:ce:46:e6:
cf:f5:62:2e:1f:9d:65:a0:ad:32:7a:7d:c0:65:a6:cf:b8:0c:
c3:f2:ee:3d:43:e6:31:9f:29:29:45:07:0a:db:0d:60:0f:94:
ce:d2:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:24:26 2025 by rpki-client