Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: u6qorJo5rsH1JFqo021CgRRVW77uGbZd/C8e5zfszxY=
Subject key identifier: 72:14:F8:05:87:B6:01:A2:80:CE:D3:AF:F2:9C:29:9F:73:71:39:80
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 01974D0E245536B2424907B1FF27DF4D27C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 0EFD
Signing time: Sun 08 Jun 2025 01:01:01 +0000
Manifest this update: Sun 08 Jun 2025 01:01:01 +0000
Manifest next update: Mon 09 Jun 2025 01:01:01 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: FpR9O1Hl4Bs6Ry60tRvycaav7jzGbcPlSjbk8bNoTvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:24:55:36:b2:42:49:07:b1:ff:27:df:4d:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Jun 8 01:01:01 2025 GMT
Not After : Jun 9 01:01:01 2025 GMT
Subject: CN=7214f80587b601a280ced3aff29c299f73713980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:8e:72:d9:5a:80:7f:96:c2:d6:40:ea:ef:
cb:51:4f:61:b4:dc:c6:df:1b:1a:bf:05:8c:25:62:
b8:ae:d5:d1:2a:21:98:da:a1:2a:f1:8f:79:7a:3c:
d8:8c:4f:6a:1f:db:11:c9:f3:d2:ca:22:30:88:62:
1e:5b:71:28:e0:f8:ff:ec:b6:8a:e0:95:3a:f4:b9:
10:06:80:e2:4e:46:aa:df:9b:34:01:74:43:30:60:
47:2a:ad:e3:24:2a:8f:a4:d7:35:9a:92:0f:82:2c:
41:11:21:23:8d:a5:1c:70:fb:27:f2:0d:1c:50:69:
8a:52:16:80:52:14:9f:32:bc:04:73:e8:ef:24:a4:
05:1f:18:c1:76:7d:55:e8:79:2d:de:0d:da:0b:64:
bf:6c:31:82:c2:ed:c2:08:43:aa:df:92:ce:98:8e:
84:a9:a8:c3:f5:73:20:46:68:a1:b1:41:f0:42:68:
75:94:f3:25:f8:41:6e:da:9b:35:ef:9a:63:03:0b:
8f:c9:b1:2b:33:fd:59:31:33:44:bc:80:c9:71:72:
5c:7e:41:72:b7:4e:0e:1c:cb:d1:23:67:d2:ea:9d:
45:d4:4e:50:c8:84:84:06:b8:aa:62:64:b1:ea:c2:
0b:bb:0e:2e:ab:e1:3e:43:ee:69:4d:5f:4e:7d:18:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:14:F8:05:87:B6:01:A2:80:CE:D3:AF:F2:9C:29:9F:73:71:39:80
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:66:ce:98:d4:95:37:06:f7:40:1a:48:cb:b8:af:9a:48:60:
b8:79:f1:64:10:00:bf:dc:9e:60:12:c2:a1:09:39:48:e0:ca:
8f:3b:30:37:2f:95:c7:d2:55:a2:71:8d:74:43:6d:f6:4a:4f:
1a:da:d8:87:7b:eb:4c:6d:ff:a7:96:a0:d4:7e:9f:19:c4:77:
98:c4:9b:b1:07:e1:e1:26:6c:21:1b:d2:cd:68:0e:05:2f:4b:
f8:ce:1b:d7:33:7b:ca:46:7f:ed:a9:89:69:4d:52:f9:cc:91:
24:97:ad:a7:69:4f:0b:9d:8d:db:a3:34:be:b3:18:91:66:ba:
d6:2c:8a:06:d9:8b:20:2b:95:c1:3f:4c:4b:5d:45:64:4d:c2:
f3:7f:13:c7:a6:06:2c:4f:bc:08:80:f9:d1:aa:09:af:05:d9:
c3:fe:20:43:15:46:97:0d:f1:8d:80:8b:c4:da:0c:3c:7c:50:
18:e8:ce:76:cc:25:dd:93:c1:2e:12:2c:55:b7:5a:20:6a:4b:
9a:31:a5:d8:0a:69:ea:fa:d0:07:73:af:b0:dd:d0:39:a0:91:
1e:64:a3:2e:8c:e0:44:a7:2f:7c:1b:8d:3b:a3:2a:b0:14:68:
17:62:d4:38:db:74:85:ed:3b:ea:e3:37:68:52:3f:25:cc:10:
c8:a0:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:06:05 2025 by rpki-client