Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
File: y3yVUPThoer5UHL7G5q7JpVNJj0.mft (raw, json)
Hash identifier: cQMT7hvaegec2CGfjYb5gmQLKXt1N7q+zjnZ/8d4sZo=
Subject key identifier: 11:A4:71:98:7B:9D:5F:DF:B8:E0:16:02:8E:E3:64:B7:D7:EF:E5:BC
Authority key identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
Certificate issuer: /CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Certificate serial: 01974D447F51576601B51BA116D58F39E335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
Manifest number: 0C26
Signing time: Sun 08 Jun 2025 02:00:24 +0000
Manifest this update: Sun 08 Jun 2025 02:00:24 +0000
Manifest next update: Mon 09 Jun 2025 02:00:24 +0000
Files and hashes: 1: y3yVUPThoer5UHL7G5q7JpVNJj0.crl (hash: zAUc0Mx0Q975B+NGNGe6m/Iqln6UPyqbFCWV5yH1fmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:7f:51:57:66:01:b5:1b:a1:16:d5:8f:39:e3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Validity
Not Before: Jun 8 02:00:24 2025 GMT
Not After : Jun 9 02:00:24 2025 GMT
Subject: CN=11a471987b9d5fdfb8e016028ee364b7d7efe5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:cb:ab:e5:7c:77:dd:c5:f3:21:df:a3:1d:
f9:f7:c2:4e:7c:28:03:3e:16:4b:43:2e:ac:d0:3b:
29:a0:2e:46:67:08:ff:c2:27:25:7c:8e:4c:d4:92:
47:56:59:12:df:8b:88:00:d2:75:52:f9:d0:d1:60:
32:ee:c5:3a:8d:d3:46:6d:e9:fa:d0:5e:02:43:13:
13:09:d4:54:03:54:3a:4d:88:f0:7e:e7:f0:41:4b:
1a:57:f2:2e:22:f3:78:c2:43:1d:3b:d5:18:8f:f6:
e3:a3:ae:f7:80:cb:f3:d0:91:43:c1:82:df:b2:ed:
3c:06:e6:d2:9d:b4:04:53:e9:41:bf:23:6d:2a:b5:
b3:89:eb:2f:58:be:35:9a:f8:5f:5b:0c:d0:ee:03:
b9:dd:d0:be:74:93:7a:14:67:40:ce:b6:c6:40:a7:
ae:a9:7a:10:9b:21:d8:a3:70:35:23:d3:17:dd:02:
17:8e:35:84:29:07:2b:e4:44:4b:ce:dd:8e:8d:47:
f6:f4:2c:af:d2:52:b2:a2:45:6f:2d:d2:bc:53:a6:
bf:0e:2b:3f:ea:21:a4:c0:fe:ce:86:fb:2f:5d:98:
7c:ad:41:e6:cd:99:63:1d:30:d6:15:73:98:ff:ee:
88:0e:e8:27:f5:e5:9a:31:0e:48:32:90:d6:9a:ab:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:71:98:7B:9D:5F:DF:B8:E0:16:02:8E:E3:64:B7:D7:EF:E5:BC
X509v3 Authority Key Identifier:
keyid:CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8b:6f:9e:79:81:fc:d4:8d:d7:f4:c5:95:00:00:72:c6:c3:
f4:b9:27:58:d1:a6:fe:87:96:33:58:4e:f4:23:9e:21:a8:f2:
ba:fd:31:fa:ef:8f:73:cd:d7:1b:bc:0a:81:22:36:d7:d1:3c:
8d:13:9f:e3:2a:d9:ae:7f:4b:16:fe:ae:0f:ab:7c:c9:d0:da:
fc:be:cb:dc:80:8d:4f:ca:92:f4:63:41:c6:2d:84:36:3c:36:
e8:f1:28:a2:45:74:d6:47:38:a3:47:7b:2a:b8:b5:13:08:73:
11:4a:dc:34:97:82:ee:4c:4a:bc:81:e8:fb:45:c4:68:7a:80:
9b:e8:d4:c2:7b:b6:3b:15:85:3b:55:4a:ec:04:4a:e7:53:9d:
86:b3:33:83:31:fb:01:00:4b:9b:5e:ea:30:b5:ce:21:e3:c4:
e2:d0:95:5f:05:c6:39:c3:66:81:51:f1:3a:48:97:be:e3:8b:
84:55:67:8b:b5:f9:f4:17:ee:d6:3b:62:41:f4:95:d8:ac:9c:
c7:12:e0:04:63:a7:75:a1:36:3f:25:df:5e:42:66:50:14:74:
e1:ca:8d:38:34:56:a1:f9:ae:17:06:57:91:ad:a9:5e:b9:9a:
cb:5d:7c:d5:0c:cb:9d:18:63:38:f4:d7:71:6a:63:2b:fc:f7:
4c:b0:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:37 2025 by rpki-client