
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: Xc7bG1uq3Q6ozSFqetlRKZpImtedWi/mN4Sgf1Cc51M=
Subject key identifier: E2:99:68:26:06:EC:0E:8F:53:F6:0A:F0:D1:13:CD:2C:9F:BD:74:99
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 01974D446C565568A2C5D879344B1F9C0E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0B60
Signing time: Sun 08 Jun 2025 02:00:19 +0000
Manifest this update: Sun 08 Jun 2025 02:00:19 +0000
Manifest next update: Mon 09 Jun 2025 02:00:19 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: wC9oEd0gLYhcfSxmbrKayFTEpn7+vpJ+WMpns02mhPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:6c:56:55:68:a2:c5:d8:79:34:4b:1f:9c:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Jun 8 02:00:19 2025 GMT
Not After : Jun 9 02:00:19 2025 GMT
Subject: CN=e299682606ec0e8f53f60af0d113cd2c9fbd7499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:7d:46:64:c5:f2:7c:ad:55:19:bc:ab:5b:
f2:b9:80:28:9b:91:e6:cb:bf:eb:1f:18:88:de:6e:
af:7f:93:7b:95:e6:b3:1c:02:be:46:ef:ef:5c:59:
e4:cb:67:19:61:d7:9c:02:f2:50:37:87:98:d6:e4:
e1:96:89:ce:be:98:7e:40:3e:a8:ce:bb:fa:bf:4c:
ae:98:01:0c:b7:75:40:aa:0f:98:c1:6c:51:02:82:
70:d3:08:f0:15:3d:e3:bd:26:9b:a3:cc:98:80:72:
91:80:6a:25:bb:d5:13:f3:13:89:4a:b7:0f:f2:2e:
f2:e8:a0:0d:bb:49:36:95:60:e1:e3:1b:55:1a:0f:
b0:e5:4a:59:57:a3:d1:b2:46:6a:c0:8b:d0:79:e2:
6a:57:cd:e6:bf:2d:4e:32:b5:5a:80:b5:18:17:de:
a2:f2:4b:b8:c5:92:e2:67:ae:fe:16:18:11:08:ae:
fa:16:5b:96:59:05:60:49:73:58:17:d5:5a:02:95:
36:6e:ea:30:7a:3d:aa:4b:bd:fe:fe:19:c1:2f:9d:
10:c8:79:ea:ad:ed:05:3d:89:56:cb:ed:6a:48:aa:
b8:ac:2e:4e:bf:f9:bf:72:df:b0:8f:e6:f7:c6:80:
84:e3:78:f1:6a:aa:11:16:15:0a:f3:97:22:b3:ff:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:68:26:06:EC:0E:8F:53:F6:0A:F0:D1:13:CD:2C:9F:BD:74:99
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d9:cc:1b:d7:6c:29:1e:6e:40:c0:2d:85:d0:ea:e6:92:89:
ab:e7:65:7f:df:24:5f:9d:56:65:5c:ff:7e:e7:4d:93:ab:d5:
37:2b:a7:27:e2:5d:e2:f9:02:13:8c:71:8b:75:59:37:bc:77:
f2:37:c5:c5:d3:56:ea:24:d1:84:a9:3b:b8:a5:e8:82:20:c6:
f4:c8:18:3a:a7:fa:de:4b:dc:dd:f2:98:fd:f5:07:b4:ff:4b:
13:aa:1e:f6:d8:be:47:70:67:b5:19:2b:00:cf:ec:74:9e:6a:
4b:a0:03:dd:d1:48:38:13:1d:0d:4d:87:53:16:0b:22:ba:de:
8f:a4:44:8a:a1:7d:d9:41:29:7e:8d:c5:bd:45:66:7c:61:91:
3f:cc:e8:25:d6:31:57:44:af:8b:39:78:ae:9d:11:a5:9c:6a:
f5:d0:54:e9:90:66:0e:17:26:49:83:50:56:b9:03:46:d9:ca:
a1:9b:df:03:b5:a4:47:c5:f4:5b:40:8a:aa:20:79:6b:17:79:
6c:13:34:d9:eb:c0:a5:ed:fa:76:e9:4a:7c:47:5f:d2:93:7a:
30:e2:4c:ad:29:92:86:bc:47:50:e7:c0:55:8e:c6:2f:87:20:
b6:e8:5d:d2:bf:8e:d6:eb:5f:0a:9b:29:8d:5a:79:e5:eb:4e:
30:07:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:18 2025 by rpki-client