Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: bU1s3QffwmIwBsOcZ0FejDGVTujWnaYB2IfnZzhAC44=
Subject key identifier: CE:33:72:02:26:11:E9:99:FC:D9:A4:94:F4:0F:09:0F:90:E6:15:F5
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 0197488C322AE47152EC4BC06F7A6606F156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:00:36 +0000
Manifest this update: Sat 07 Jun 2025 04:00:36 +0000
Manifest next update: Sun 08 Jun 2025 04:00:36 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: 4pmeZ3jeBNdGrQ3UhCYx0sS9XxkQKI8NRmaYvlQ4F00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:32:2a:e4:71:52:ec:4b:c0:6f:7a:66:06:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: Jun 7 04:00:36 2025 GMT
Not After : Jun 8 04:00:36 2025 GMT
Subject: CN=ce3372022611e999fcd9a494f40f090f90e615f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:e6:ba:dc:3c:0e:93:d7:db:8d:b7:7a:53:
40:09:57:4b:bc:e3:fb:e9:5c:e5:52:d2:58:89:24:
a5:3a:8f:2e:8b:21:a7:3c:bf:80:dc:45:c8:cf:a5:
13:c9:6f:c7:57:7e:4c:0d:bf:57:d7:7a:c7:d9:b0:
5a:22:35:16:e8:f6:db:78:e4:e6:7f:e6:f7:b9:ce:
59:ec:2a:c5:92:51:b4:57:77:44:9f:1c:4b:47:bf:
d1:2c:4e:6b:f9:58:be:36:89:36:44:ae:66:f6:26:
c3:6d:15:46:d8:6e:7c:a9:40:b3:83:e7:26:10:82:
6a:f4:96:d6:f3:5b:4f:ae:50:52:64:3f:2b:ba:40:
05:f3:e5:06:14:78:2f:1b:8d:1b:27:65:d7:a3:a2:
3a:22:dc:21:66:9a:d2:ff:ca:ee:ee:a5:92:5b:a3:
4f:b0:96:46:34:c6:85:38:50:b9:9c:12:cd:aa:1b:
25:4c:cc:51:4b:34:12:2b:05:c9:c0:1a:d4:45:0d:
90:c7:a6:6f:ff:cb:01:8f:ca:69:88:f9:33:3d:e4:
fc:d9:ee:70:ce:17:11:b2:26:41:c8:59:7d:7b:44:
f9:98:cd:e7:f6:f6:a1:cb:7b:ff:18:3a:d7:27:5c:
b0:47:c3:30:95:b2:0f:fa:11:6e:4c:2c:83:c9:de:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:72:02:26:11:E9:99:FC:D9:A4:94:F4:0F:09:0F:90:E6:15:F5
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:74:ab:ce:f1:92:05:ae:fd:66:4e:18:27:d1:f8:81:40:d9:
94:03:86:df:aa:0c:e6:31:82:f3:0b:9c:fc:46:f2:31:6b:f7:
d2:17:d8:e1:2d:6d:0a:4a:7c:c1:07:d9:fa:18:a0:02:d5:48:
c1:9e:59:6d:c9:94:36:0b:59:f4:dd:5d:15:90:15:5f:a0:cb:
48:87:bb:c5:dd:3b:bf:3d:cc:03:06:3d:29:75:7a:6e:12:d0:
d2:8a:77:d7:91:89:36:09:f8:57:59:b2:0d:1d:98:9e:f7:5f:
07:35:d4:4a:8d:ce:9a:af:42:6e:1b:64:63:70:6f:b3:ef:fb:
73:dc:85:bb:d7:2d:39:fa:55:ee:be:5c:1b:bd:e2:03:b6:4b:
a1:d7:03:ba:9b:4e:c2:be:ad:05:04:57:c0:23:68:a6:ae:00:
f9:46:2b:1d:8b:64:a6:ae:8b:2f:57:c2:10:45:8b:ba:f7:5d:
75:5f:90:8d:0f:1f:b7:5c:22:a9:cc:58:26:38:32:43:14:70:
1f:41:53:ac:f0:de:e7:c2:11:9e:a1:a3:72:f2:20:fb:26:c8:
1e:d8:fd:a6:99:ca:c9:47:69:2c:53:87:90:02:48:7f:20:dc:
83:2a:14:bb:3e:1b:25:cd:41:59:60:01:93:4a:eb:4e:c8:e4:
a9:78:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:04:31 2025 by rpki-client