
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
File: Yefv0ZrydUeUJswZJcW8Ls7ums4.mft (raw, json)
Hash identifier: /bUs1ImyQeawTLJKs4nB9FUDPnlYTxO5PqJNnw+TLtg=
Subject key identifier: B3:56:11:86:7B:0F:B9:44:87:9E:13:00:FE:1A:A8:B0:C5:3C:00:E8
Authority key identifier: 61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE
Certificate issuer: /CN=61e7efd19af275479426cc1925c5bc2eceee9ace
Certificate serial: 01974DB250184B8327610D3E690C491F243B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
Manifest number: 1490
Signing time: Sun 08 Jun 2025 04:00:20 +0000
Manifest this update: Sun 08 Jun 2025 04:00:20 +0000
Manifest next update: Mon 09 Jun 2025 04:00:20 +0000
Files and hashes: 1: Yefv0ZrydUeUJswZJcW8Ls7ums4.crl (hash: +DTARZlawDeesdGhmfcn817t7D4nkWCAjEPjtymCt+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:50:18:4b:83:27:61:0d:3e:69:0c:49:1f:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7efd19af275479426cc1925c5bc2eceee9ace
Validity
Not Before: Jun 8 04:00:20 2025 GMT
Not After : Jun 9 04:00:20 2025 GMT
Subject: CN=b35611867b0fb944879e1300fe1aa8b0c53c00e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:8e:5d:52:d7:53:71:1b:ef:93:6a:e1:d0:
37:27:04:a5:6e:bb:25:fb:55:1c:3f:a6:10:6b:56:
d5:0b:fb:1c:98:93:80:5e:84:06:68:e4:4b:55:c2:
49:5a:97:d0:06:b5:5a:36:96:00:0b:a1:96:a0:9a:
36:0c:6d:e4:d2:df:ac:6b:1c:86:15:db:8b:46:57:
c0:3d:f1:aa:2a:37:b7:ff:fe:50:f8:78:34:22:7c:
7b:05:d5:d7:9a:18:43:ba:b8:04:df:2f:84:44:b1:
fa:92:ae:a7:ca:10:29:71:9a:78:1c:66:f7:eb:7f:
ad:59:f2:27:ed:f2:d2:9d:4d:5a:0e:11:b7:60:df:
cc:0a:74:0d:cd:48:8f:ad:03:17:e6:24:ef:f8:0e:
d5:58:7e:78:d0:09:fe:ec:e6:94:30:2e:b5:e3:18:
91:1c:4a:9b:d3:01:85:65:18:f8:0b:05:dc:e9:fc:
b8:fe:56:5f:8e:80:fe:67:ae:14:46:3c:95:19:67:
7d:67:3d:39:26:04:03:2f:e3:bd:f1:6f:40:3f:3d:
11:c0:1b:b5:dc:68:df:f8:dd:8f:9d:62:d8:0a:f6:
d6:23:d9:14:82:4a:46:79:ff:19:e8:a5:83:d3:b6:
1b:ef:6f:fc:a5:a2:09:e7:a7:55:29:a2:d7:e4:2b:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:56:11:86:7B:0F:B9:44:87:9E:13:00:FE:1A:A8:B0:C5:3C:00:E8
X509v3 Authority Key Identifier:
keyid:61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:45:3b:84:e9:4a:88:7c:9d:98:26:92:ad:b5:e4:72:fd:44:
83:31:26:ef:d7:f3:1e:23:f3:7e:8a:8e:0e:6e:07:5a:cb:cd:
0b:44:b6:1b:73:5c:2a:13:5f:0f:25:a5:3d:69:1d:43:1e:6f:
b2:76:6a:21:15:1f:72:06:ad:43:e8:fa:5b:ee:27:41:d0:17:
2d:fe:6b:d9:56:4a:b9:f6:d1:cd:d8:76:28:cf:60:60:66:15:
b6:fe:0b:5b:fa:af:59:26:83:f4:fa:92:bc:73:4a:dc:41:b8:
a2:d8:eb:63:da:20:b9:69:68:cb:93:bb:de:17:3e:e9:78:b7:
a9:7b:46:24:12:b2:77:78:0b:d3:5d:d6:12:24:2e:c0:39:ec:
f5:02:45:5b:30:fe:a7:08:c6:27:e8:80:c8:df:f8:0f:84:9a:
4f:6e:97:59:9e:de:bb:a6:ba:98:28:b6:e0:8a:6b:46:4b:34:
21:74:b3:a8:69:74:bd:80:9b:1c:bb:2d:54:90:fc:08:d0:99:
1a:7d:04:d1:74:98:c3:53:02:c7:33:89:5e:ff:14:0e:b8:af:
fa:a9:73:03:14:c8:0a:a0:b3:ac:cf:84:10:80:ca:26:12:45:
05:7b:f7:a8:12:94:33:e5:d8:38:f0:52:ee:aa:73:c7:d6:36:
ff:d8:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:43 2025 by rpki-client