Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier: wh4mPE/9Hx6DizZkug8AilihwQOKeG6ZEjFas/h0/Ag=
Subject key identifier: 3E:2B:03:EA:3B:14:D8:A1:5D:65:1A:CF:68:E1:F4:20:34:76:A9:6B
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial: 01975046499DCE23C8792497211DD7DC960D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number: 026D
Signing time: Sun 08 Jun 2025 16:01:12 +0000
Manifest this update: Sun 08 Jun 2025 16:01:12 +0000
Manifest next update: Mon 09 Jun 2025 16:01:12 +0000
Files and hashes: 1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: glrfi/2zTU9LhlsRCrAU5o81wN/vx9jfBBH5avXfmWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:49:9d:ce:23:c8:79:24:97:21:1d:d7:dc:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Validity
Not Before: Jun 8 16:01:12 2025 GMT
Not After : Jun 9 16:01:12 2025 GMT
Subject: CN=3e2b03ea3b14d8a15d651acf68e1f4203476a96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:b1:2d:b2:02:d1:1e:c9:36:2f:cf:4e:64:
8f:81:1b:b2:5c:d5:c4:7f:e8:4b:23:a8:d5:fa:46:
e5:f1:a3:66:ae:52:0b:ee:0d:3a:9f:1c:08:6e:0f:
4c:35:27:b4:70:5f:0c:93:0c:9f:d8:4b:fe:b6:a2:
0d:fb:bf:8e:e3:e7:df:67:2b:61:14:16:e1:fc:8c:
56:0f:a6:65:2a:4e:40:4d:52:96:ec:12:b5:e8:e1:
4f:38:87:a7:e6:67:7f:6a:56:27:70:9e:d8:08:37:
53:37:76:01:70:ac:ac:c6:d9:1f:a6:a4:a5:fc:ee:
b9:e2:d8:cb:c0:d9:f2:56:f1:08:33:ea:ca:a5:6b:
92:26:41:82:0a:ae:ac:61:1d:0a:b5:a4:d5:ad:60:
4e:cb:19:8a:88:31:d3:81:b5:b1:ca:a3:b6:4a:c0:
cf:27:22:ce:39:4e:78:e7:82:24:c8:b7:1b:47:66:
01:08:b1:8b:c6:b1:1b:f2:86:4b:f1:bb:40:ab:21:
fc:b7:76:99:b2:d6:47:79:7d:bd:ff:c5:ff:2b:67:
51:3b:5a:37:a6:a1:0f:ac:ac:1c:5a:71:f6:d0:b2:
72:4f:2e:b0:6e:61:15:e2:f6:0e:9b:89:5b:43:89:
5a:76:1b:37:3e:ba:d0:60:0e:bd:9b:df:6f:2c:b9:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2B:03:EA:3B:14:D8:A1:5D:65:1A:CF:68:E1:F4:20:34:76:A9:6B
X509v3 Authority Key Identifier:
keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:b4:30:5a:d9:01:45:64:a3:d7:af:65:9e:42:8f:d1:e9:
e9:4a:1d:ac:98:bb:3b:06:50:65:91:80:cc:96:11:9f:f8:5f:
47:47:99:a9:e0:8c:08:8c:af:7c:c4:bf:2e:f9:76:6b:5b:73:
ab:bc:46:4a:68:21:2f:a8:19:d2:a9:cf:88:d9:84:55:64:74:
64:e1:31:a8:a8:40:c9:8d:ff:81:ef:37:6e:2e:87:26:e1:bd:
44:1e:ef:9b:57:8e:8c:94:c1:f0:43:b5:19:ac:8f:20:17:67:
7a:1e:f4:c2:ad:16:32:a8:26:8d:21:66:98:3a:3b:b7:6c:90:
dc:dd:e0:8a:b2:3d:7a:22:f8:22:cc:15:ce:ff:ba:3e:48:74:
60:09:ad:9e:c6:ab:6d:8c:66:ed:a8:7f:25:96:2b:0b:7d:dc:
a1:1d:e4:36:47:ae:25:ae:fa:fb:07:b5:39:d5:1c:72:8e:6e:
46:32:96:d0:5b:ff:94:ec:fb:e2:d5:96:04:b7:96:ff:6f:34:
2c:23:07:02:53:bc:10:1d:58:b3:2c:e2:18:20:5b:5a:b3:27:
22:d0:02:b9:4b:52:ed:4a:43:44:56:55:f4:63:15:85:7a:23:
0f:71:f7:2e:9b:0c:a3:ae:1e:77:36:cf:0e:d7:70:f4:2f:0b:
49:95:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:40 2025 by rpki-client