Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: VJId+xwaELThjZJC1t4nKc6DiR5NXH1fET1B8pUJwNw=
Subject key identifier: 96:F8:90:DA:28:00:47:E5:C0:F2:59:A6:1A:D0:C0:1F:26:1A:B4:CC
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 01975045B9CD1451C8494DF5EF54CF72524C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 16:00:36 +0000
Manifest this update: Sun 08 Jun 2025 16:00:36 +0000
Manifest next update: Mon 09 Jun 2025 16:00:36 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: Hps8VsIadewo2QdVb3/QVw/5ZYgIrspDbPGL2dpSrmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:b9:cd:14:51:c8:49:4d:f5:ef:54:cf:72:52:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Jun 8 16:00:36 2025 GMT
Not After : Jun 9 16:00:36 2025 GMT
Subject: CN=96f890da280047e5c0f259a61ad0c01f261ab4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:26:69:4c:6c:63:54:86:99:03:7e:27:8d:
1b:a0:cf:86:ee:cd:71:c7:3c:7e:1c:8b:2d:37:73:
8f:10:c3:e5:c6:24:3e:fd:e6:cc:16:80:ea:98:ec:
50:dd:39:e0:14:3d:1d:04:d7:3b:da:e0:25:55:a6:
d2:1b:9d:24:7f:4d:31:57:f0:b1:e0:8b:c2:d7:92:
03:e3:05:32:ba:64:63:88:72:83:2e:b8:31:e9:96:
e2:fd:cf:2a:d8:13:0f:28:fa:5e:cc:85:56:86:c1:
ca:99:fb:f4:c2:11:94:14:e7:4a:37:ce:67:e9:eb:
2d:39:63:a1:b0:b6:86:bf:82:de:62:60:a8:f3:71:
ca:78:8b:25:4f:b6:c1:44:fb:b9:ab:dc:0d:66:39:
ec:96:f9:4d:d4:3c:76:93:1f:36:fa:52:b5:e6:36:
8b:d8:96:dd:ca:4c:33:01:e4:c6:77:b4:da:fc:88:
0e:82:30:2b:87:50:0d:25:e8:bd:e0:59:2e:82:f5:
ee:08:41:ba:dd:80:b4:57:7d:f1:12:a8:0a:be:19:
90:9a:9e:e9:f3:1f:7b:79:eb:65:bb:d5:e9:65:56:
15:18:bc:11:e9:ba:42:f6:20:93:7a:e9:ef:bc:3c:
bc:4b:67:45:1d:9d:e9:ac:5c:13:17:64:61:8a:31:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:90:DA:28:00:47:E5:C0:F2:59:A6:1A:D0:C0:1F:26:1A:B4:CC
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2e:41:ee:11:76:38:8b:e5:1d:df:36:fb:e6:41:ad:02:33:
45:1b:d5:28:a3:39:27:9e:5a:fa:25:ab:e5:b6:dd:39:02:ea:
7e:01:29:42:30:22:92:23:ac:4f:78:4f:2e:24:6a:46:e7:36:
67:74:8a:f8:94:44:ab:e7:ad:79:7f:e9:da:cf:93:06:b7:9c:
d8:28:95:47:ab:28:b6:fc:41:58:c9:44:aa:25:1f:39:52:39:
b5:43:38:46:a6:08:ec:ae:58:9e:c6:40:77:d3:6f:1f:2d:e3:
92:99:35:cf:de:3c:f9:21:1d:1a:61:0f:bd:e4:a4:a8:e4:5c:
63:8e:ed:a3:77:b1:c2:86:e8:79:a8:96:58:80:10:63:db:28:
12:be:eb:30:28:72:8f:dc:01:bf:2d:24:15:a5:bc:ed:0f:6e:
2f:7b:f8:d6:ef:88:10:cd:ca:ab:d8:bf:45:ff:80:43:08:89:
75:76:5c:c0:5f:80:3e:22:6f:ac:e8:61:c0:ca:78:b3:28:58:
1e:a9:25:11:6f:ce:8e:e8:9e:81:70:4d:ab:86:7d:e7:6d:62:
4b:5b:da:b3:5f:4c:c8:ce:43:73:e1:73:3d:04:c6:e4:a2:c3:
e2:3f:2b:21:76:5f:10:36:cf:b9:d9:48:6b:d0:d2:99:41:1c:
9c:b1:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:24 2025 by rpki-client