Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: C/2xm4SalPG5QrlCNRoh3RRb3Rh1G6ScmqjVFqVXv5g=
Subject key identifier: DB:B8:B6:14:01:F4:78:4E:DC:7C:77:1C:A3:94:75:3C:15:C6:95:37
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 01974E57AFAD3D559B857B370D3E7A9C9CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0886
Signing time: Sun 08 Jun 2025 07:00:58 +0000
Manifest this update: Sun 08 Jun 2025 07:00:58 +0000
Manifest next update: Mon 09 Jun 2025 07:00:58 +0000
Files and hashes: 1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: ezhLNmupUi3tmSDD7kvpDivjMV9rMKGPg5FNNdFREFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:af:ad:3d:55:9b:85:7b:37:0d:3e:7a:9c:9c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Jun 8 07:00:58 2025 GMT
Not After : Jun 9 07:00:58 2025 GMT
Subject: CN=dbb8b61401f4784edc7c771ca394753c15c69537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:0e:82:a2:08:ed:f6:03:a8:7b:03:32:ae:
b9:57:f5:d6:82:a6:7e:81:a7:32:cb:77:f4:2b:97:
e6:32:9f:a5:06:c4:a3:20:7b:6f:b9:0f:a1:6e:7b:
e1:d3:52:fc:0e:42:38:55:39:91:28:d8:74:59:65:
17:97:a6:1a:e9:bd:c6:0f:68:98:9e:7f:44:32:7e:
65:f5:64:56:b4:30:dc:ae:ca:4d:be:1d:17:fb:e7:
66:a9:ad:e8:80:17:6c:14:a1:39:f8:b8:4c:17:f4:
95:b1:cd:f4:51:d5:18:80:ae:23:3b:a1:b9:0c:3b:
df:27:50:47:50:64:f4:08:01:2b:9a:1c:93:2e:71:
8d:02:02:f4:30:c5:92:c5:a2:e7:40:5c:9f:f8:d9:
99:62:7a:4c:8d:69:54:17:84:03:28:f8:38:03:e8:
00:64:c3:54:ad:7d:0f:cf:5f:a9:28:a8:47:bf:30:
f2:c0:06:70:3f:99:cc:0f:70:f7:48:1a:42:01:56:
e6:e8:67:3a:ef:49:1b:dc:1d:02:7b:39:fa:a0:af:
37:b0:28:33:b0:0f:5a:b0:89:54:7d:60:02:6e:11:
6f:6f:08:b2:4f:da:b5:2e:24:0e:06:6a:f7:69:be:
b9:3f:3b:0c:19:b0:a7:35:39:72:82:7d:e3:af:0a:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:B6:14:01:F4:78:4E:DC:7C:77:1C:A3:94:75:3C:15:C6:95:37
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:4b:77:3f:3c:8c:8c:1d:f4:43:47:ea:55:42:cd:c5:e7:
82:7c:85:c2:18:3b:77:09:36:88:0b:77:e5:1d:50:c1:55:cb:
ea:02:23:cc:4b:6f:cf:16:4c:00:9d:54:52:c8:65:3b:44:9c:
2d:f6:b0:98:7e:2a:e5:9f:ea:9d:52:39:e2:30:32:87:c8:70:
4e:7d:d5:6f:67:f8:83:96:ff:e6:c9:c9:84:a1:8f:fc:2b:61:
c5:39:be:7c:56:ca:fd:9d:3c:57:45:8d:f0:63:4b:7b:37:4d:
2a:74:10:00:46:0f:8f:1a:d3:8d:8d:fe:93:d0:a3:9f:01:49:
08:71:45:11:eb:01:e9:10:1a:72:cb:45:ee:c0:78:8c:e0:4a:
9c:84:f2:ca:2b:90:ea:af:15:19:fc:0f:d3:85:97:19:6f:ac:
79:e8:b2:62:fd:67:de:49:cb:da:f9:4a:f4:ca:90:23:fe:7c:
49:fc:40:15:1b:14:1c:0a:12:10:25:9c:13:c8:de:c8:26:50:
a0:e3:72:31:e1:65:73:3a:a4:23:83:53:50:02:33:ec:e1:59:
65:06:6f:ef:74:a2:d9:9c:41:d2:69:ed:47:04:86:aa:cd:99:
ca:f9:ba:b1:5d:50:16:8e:66:77:ab:85:92:0f:8a:7b:7b:d6:
78:34:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:50:18 2025 by rpki-client