Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
File: ycbGTWd6yWSqxmbrrLnRf6jIq80.mft (raw, json)
Hash identifier: A4w2otCW1ATkHVZOLIRqLdFDFjOn16DDLA7lMOQNSF4=
Subject key identifier: E3:36:79:81:D4:AE:CA:82:E9:09:CE:D4:54:E3:1F:F3:9E:31:37:D1
Authority key identifier: C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
Certificate issuer: /CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Certificate serial: 0197469E428B7CCB4298FA2407EA09439586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
Manifest number: 0882
Signing time: Fri 06 Jun 2025 19:01:06 +0000
Manifest this update: Fri 06 Jun 2025 19:01:06 +0000
Manifest next update: Sat 07 Jun 2025 19:01:06 +0000
Files and hashes: 1: ycbGTWd6yWSqxmbrrLnRf6jIq80.crl (hash: XfGSwj0/O44/ojWnEPsLOJ81ohKS6f0frm/GuDIpebk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:42:8b:7c:cb:42:98:fa:24:07:ea:09:43:95:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Validity
Not Before: Jun 6 19:01:06 2025 GMT
Not After : Jun 7 19:01:06 2025 GMT
Subject: CN=e3367981d4aeca82e909ced454e31ff39e3137d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:6b:38:fc:4e:6c:bb:02:79:e3:2d:89:9a:
8f:06:ad:dd:ba:54:78:9e:7b:aa:29:43:0b:fb:34:
84:c9:61:7b:5f:f0:f2:6a:dd:3d:8b:c3:3d:61:35:
d7:c3:51:44:e7:d6:d0:a6:24:46:53:98:1d:25:e8:
b7:47:e2:cd:c9:f3:30:8a:fb:e9:c1:78:a6:93:c6:
6a:7c:3a:8b:80:29:2a:e5:e3:3e:10:02:7f:4d:6d:
38:c3:42:a6:b9:cb:f7:8f:c6:2c:d2:ba:58:7d:d6:
ba:7f:c7:78:7c:5d:c6:1d:00:05:c9:3d:b8:9f:7f:
c4:fe:f9:ca:c3:03:f4:be:ee:8c:56:c5:39:4d:46:
44:2a:07:f0:c1:f6:c2:69:a9:dd:47:36:d1:b7:a4:
fb:31:c3:7f:f7:94:6b:90:f5:ed:59:8a:56:36:4c:
f0:69:12:66:3c:62:3e:c9:ca:f8:e4:77:b1:ce:ae:
ad:89:47:08:66:f6:77:fc:95:55:c1:26:3f:5e:5b:
f7:aa:4f:7a:8f:b7:c9:bc:7f:8f:82:18:6d:a9:0e:
07:be:1e:50:1e:a2:46:04:4d:23:0f:8e:11:b4:95:
c1:f1:7b:eb:e0:71:92:f3:98:be:a9:d4:de:95:0c:
64:59:6d:82:10:f6:7a:c0:4b:f9:82:fc:4e:1f:68:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:79:81:D4:AE:CA:82:E9:09:CE:D4:54:E3:1F:F3:9E:31:37:D1
X509v3 Authority Key Identifier:
keyid:C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:f3:94:aa:01:bd:de:6b:98:1f:17:8e:9c:ec:1c:7b:ab:
0f:d0:77:69:6f:d7:0d:c3:57:91:4b:c6:31:6c:d6:e3:4d:36:
d7:57:c8:41:a3:c7:20:4a:6d:11:24:5f:76:de:bc:46:5f:c6:
1c:7e:1d:88:7e:44:b8:be:48:fa:8b:65:41:05:b6:0f:91:45:
06:c2:fe:be:02:8f:c2:c4:83:c3:85:08:b1:68:6f:1f:0d:ec:
93:e5:2c:0f:01:66:8b:a8:cc:57:d9:63:d7:49:7c:c3:e0:c3:
1a:9f:5b:bf:fb:d3:d8:2d:e7:5b:01:c9:bd:00:85:2a:70:42:
d2:5a:0c:2c:66:be:4d:8a:f2:87:63:e7:6f:86:f3:13:59:fc:
bb:df:60:12:af:49:dc:3b:67:03:dc:d0:2f:c5:35:09:0c:dc:
bc:82:90:05:95:4d:b4:16:d9:74:40:26:66:dc:53:e3:be:5c:
dd:72:78:19:14:76:71:33:21:7a:bd:c3:6e:62:60:e5:42:36:
e5:99:b1:5d:2d:d2:5b:e3:25:eb:c1:d4:f8:f8:6a:e0:79:7c:
69:10:a7:b0:ff:3c:dd:57:23:ee:1f:3a:ee:2f:8f:39:c6:d9:
e8:45:33:92:20:79:80:d5:ee:21:57:08:16:19:a6:5b:c1:3e:
47:2d:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:51 2025 by rpki-client