
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: Gj2sXJrBoRNGdI1WrEY5TG28EmnDD/w7c1Kst7MZXHQ=
Subject key identifier: A5:F9:13:F4:8C:2A:41:AD:28:E2:C3:1E:97:E9:08:5A:6B:EA:33:E8
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 01974742FF3777C71C4A3A68243683D2C839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0C6F
Signing time: Fri 06 Jun 2025 22:01:02 +0000
Manifest this update: Fri 06 Jun 2025 22:01:02 +0000
Manifest next update: Sat 07 Jun 2025 22:01:02 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: qxuDwrIW/b1B2xygG5QBIEenmWnrD0dQL5rNfNhhQYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ff:37:77:c7:1c:4a:3a:68:24:36:83:d2:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Jun 6 22:01:02 2025 GMT
Not After : Jun 7 22:01:02 2025 GMT
Subject: CN=a5f913f48c2a41ad28e2c31e97e9085a6bea33e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:6b:3f:7c:38:0d:9d:14:01:b2:28:da:83:
99:00:10:df:8f:1c:6a:88:46:c0:08:71:f3:a7:96:
48:f0:f3:14:5c:7e:c1:9a:d7:a0:74:f7:c4:f8:ea:
cb:f0:ca:a5:dd:98:76:78:1f:3c:bc:84:a3:32:0a:
8b:e0:06:f2:b9:18:4b:f8:13:d5:58:f1:b4:b0:df:
ed:16:81:91:f6:29:b6:14:f0:05:54:e6:e2:e8:8c:
bc:96:61:5c:17:0a:e8:04:0f:81:0b:04:7d:f9:90:
18:c7:dd:da:ea:2e:ea:77:49:f7:d5:cc:8c:74:1f:
89:a8:81:21:5b:d6:2a:38:d5:ee:18:68:4b:26:d1:
b5:20:ef:36:5d:12:cc:31:ae:e9:b6:16:4d:e1:bd:
75:74:fe:96:3e:a3:7a:c1:b6:1d:16:66:16:c1:58:
e8:0b:72:0a:06:bb:f7:ca:de:7f:3e:06:45:c7:de:
4b:ee:3c:0c:ab:3f:dd:e4:94:ed:b4:12:21:89:bc:
fe:b2:c0:1e:c7:5a:48:58:07:05:f4:41:1b:be:e4:
18:0a:a4:16:26:5d:56:8f:34:c3:06:80:cb:ae:d1:
08:e4:f6:e4:7c:55:db:a5:02:8b:e8:4d:c5:77:02:
12:90:d3:55:b9:27:73:9a:34:ae:9f:da:1f:39:af:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:13:F4:8C:2A:41:AD:28:E2:C3:1E:97:E9:08:5A:6B:EA:33:E8
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1b:54:6b:65:68:93:42:f2:13:52:60:4f:e6:f1:1e:0a:60:
3b:ef:f9:a7:a5:13:a2:e5:da:e1:ff:20:9b:1b:f5:d5:3f:18:
34:b2:ed:90:f6:61:75:16:02:2d:5a:5b:f5:6e:70:bd:27:cf:
45:41:a1:b8:c3:2f:23:c6:68:c7:63:d7:56:d7:b0:f0:65:3d:
83:e1:6b:f8:35:04:aa:06:53:6d:20:c7:da:f5:cf:db:21:28:
d0:19:74:0e:df:ea:85:a0:82:dc:05:81:63:1c:55:67:3c:7e:
e3:a1:f3:28:4a:b7:e5:43:ca:d2:98:89:db:ff:6b:ab:6c:91:
d9:de:31:02:3a:63:40:ba:de:61:f0:4c:e7:93:92:26:4c:37:
02:36:6f:a8:b2:15:70:02:41:76:14:88:cd:25:88:42:1b:4a:
ba:b3:f4:6c:61:6f:05:88:40:2e:02:9b:48:a6:7c:c1:21:20:
41:2f:ec:10:ec:23:30:e6:2c:db:71:b6:da:25:60:20:5d:4d:
62:cc:50:cd:db:58:8f:30:55:39:bd:80:60:d1:67:f7:7b:6f:
b8:d7:54:6c:e4:2c:d0:ae:43:a7:5b:73:05:8e:19:0d:32:ff:
28:ff:32:14:d6:84:e4:98:27:bd:1b:5b:4f:35:46:b6:8c:63:
70:b7:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:00 2025 by rpki-client