Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier: Iwxal+WGHsHSFipo3cf4HE+zXB1pAEw0OLi9HWx3JQA=
Subject key identifier: 03:B4:54:F6:66:11:CB:55:7F:77:9B:B8:C6:2E:12:CA:75:AF:EA:E9
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial: 01974779E4391222F0CFDC734F459E71E034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number: 0EDC
Signing time: Fri 06 Jun 2025 23:01:00 +0000
Manifest this update: Fri 06 Jun 2025 23:01:00 +0000
Manifest next update: Sat 07 Jun 2025 23:01:00 +0000
Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: EYm/5g7+ojx4rN1ffLjz1qJuKgQBAm07c0pl5e+1slg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e4:39:12:22:f0:cf:dc:73:4f:45:9e:71:e0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Validity
Not Before: Jun 6 23:01:00 2025 GMT
Not After : Jun 7 23:01:00 2025 GMT
Subject: CN=03b454f66611cb557f779bb8c62e12ca75afeae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:4a:1d:69:30:43:04:8f:64:2a:4e:5b:4b:
81:2c:7e:0a:40:06:b0:2a:5e:de:6e:54:90:2a:29:
52:10:74:df:de:67:ab:d4:f1:dc:f1:41:30:ea:a2:
91:a6:fe:93:45:62:6c:60:ae:a6:09:18:25:ff:dc:
be:5f:f6:b7:9d:66:43:be:15:f8:cd:20:37:87:fb:
25:a1:ca:d1:03:49:61:fa:22:e3:4c:f4:0c:1f:da:
a3:ef:0e:ce:d9:5a:f1:f5:c5:e4:da:eb:8a:4c:97:
7c:31:4f:dd:c8:62:a6:c7:74:43:e1:98:e7:52:bc:
e7:7d:5d:84:7b:63:24:28:16:6f:44:be:4b:16:f7:
2e:16:a1:92:e2:91:cf:07:dd:86:3e:0c:44:fe:37:
d5:3c:a4:ef:e1:ab:d4:f1:45:93:8e:89:dc:af:44:
5f:a8:4b:b3:da:33:47:21:1b:b1:30:f2:61:3c:7d:
a2:2e:3c:42:1c:12:34:51:8c:91:f5:4a:3b:43:45:
ab:02:cb:d4:90:d3:5f:d9:68:5b:73:5f:dd:6a:13:
0a:71:d1:d3:1f:86:4f:3a:04:1f:d7:56:36:fb:f1:
09:cd:e9:b0:e1:77:ee:d7:a3:c9:07:71:71:4d:20:
62:c1:de:19:a5:16:5a:06:ac:32:ed:b2:df:c5:25:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:54:F6:66:11:CB:55:7F:77:9B:B8:C6:2E:12:CA:75:AF:EA:E9
X509v3 Authority Key Identifier:
keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3a:a6:71:71:88:a0:3b:91:35:1d:d1:71:09:b4:2f:ed:76:
88:91:c3:8c:bc:1e:a5:91:b4:73:5b:8b:f9:d3:ef:0e:0c:f7:
4d:bd:86:3e:03:1d:db:d1:77:b4:59:bb:5a:ff:fd:dc:8a:b7:
ed:44:b8:25:4e:a4:2b:38:02:09:42:1b:fe:9b:20:d2:bf:a0:
73:01:41:6b:86:fd:53:57:55:d6:77:a8:fb:7d:d8:96:7c:de:
b3:1f:1b:42:ed:2f:03:e3:fd:f0:a5:51:31:aa:37:c4:09:fb:
8b:b7:50:fa:1e:f9:cd:ee:9a:db:ce:1d:69:26:61:10:e3:f8:
a3:d9:94:71:aa:38:d4:bc:4c:7f:16:dc:3b:c4:d5:4d:6d:18:
4c:c1:c8:c8:4b:1f:57:95:a4:70:5b:6a:cb:43:53:6e:32:f2:
87:27:ba:64:0a:e3:f8:eb:b7:2e:4e:4a:e6:6b:27:a6:0e:f9:
50:b6:1c:ba:ac:83:e7:9c:c8:af:fd:9b:2e:49:91:87:bd:68:
0f:5f:b4:c9:62:f6:c9:2b:dc:39:d5:bb:38:3d:f9:ea:b6:eb:
5d:db:d6:37:a8:c0:81:78:55:b5:fb:9f:b4:8d:2e:81:bf:9c:
07:87:cc:67:d0:80:72:5e:58:b6:43:4c:81:f9:15:e4:00:f2:
4a:26:20:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:33:46 2025 by rpki-client