Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
File: YxB3zMSCuRtFmfUslKiJABOSSf8.mft (raw, json)
Hash identifier: eurjGzy+sYFV/roHgl/m8yw6vopE4KfU4G1CPqx/vCA=
Subject key identifier: C5:B6:34:34:BA:F4:BC:D6:59:F9:9B:49:EC:51:A8:08:63:D9:B5:81
Authority key identifier: 63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
Certificate issuer: /CN=631077ccc482b91b4599f52c94a88900139249ff
Certificate serial: 0197CACCB93B7D4BA5C97946C7638276E821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
Manifest number: 38
Signing time: Wed 02 Jul 2025 11:01:43 +0000
Manifest this update: Wed 02 Jul 2025 11:01:43 +0000
Manifest next update: Thu 03 Jul 2025 11:01:43 +0000
Files and hashes: 1: YxB3zMSCuRtFmfUslKiJABOSSf8.crl (hash: LSsG99ZZ37dF2K9/h2Nr1r9kKkNEUVmePP8J5cMlUV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:b9:3b:7d:4b:a5:c9:79:46:c7:63:82:76:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631077ccc482b91b4599f52c94a88900139249ff
Validity
Not Before: Jul 2 11:01:43 2025 GMT
Not After : Jul 3 11:01:43 2025 GMT
Subject: CN=c5b63434baf4bcd659f99b49ec51a80863d9b581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:9c:a2:d9:9e:b9:a7:8f:8b:db:b8:b8:70:
8d:b3:8d:83:46:fe:5f:f5:07:85:18:28:6c:a2:d1:
55:e9:88:63:22:f6:3c:d2:b7:1e:d6:57:cd:a3:6d:
a3:50:0d:ed:b7:98:06:c3:d3:36:57:ad:04:5a:f7:
b1:ab:47:94:1b:9c:93:64:f3:b2:14:3d:fa:8e:00:
0a:83:df:a5:6d:8d:74:53:81:8b:84:8b:f2:24:11:
4c:c2:d8:92:a1:e7:61:be:ac:95:66:ff:c6:89:9d:
71:bb:ea:eb:08:40:e6:04:cf:08:1c:e7:95:a9:96:
8e:e3:bb:57:35:a1:6f:1d:24:31:c4:92:86:69:7e:
4a:0b:12:b8:ed:ec:6a:95:7a:ed:87:98:d1:10:69:
af:0f:7f:69:2e:94:d7:af:da:fc:d9:ba:70:b8:88:
22:1e:8c:a8:61:78:70:0d:79:d7:51:a8:03:1d:f7:
75:4b:5e:39:b7:4e:9d:36:14:1c:a1:50:df:fd:75:
2c:a9:53:ad:e5:77:40:4c:fb:90:55:6c:e8:a6:74:
a9:c4:37:31:60:51:b2:e0:f4:b3:e5:0a:84:77:f1:
75:52:1b:8d:7e:f8:1a:09:45:8e:0f:a3:0c:60:b7:
67:4a:36:fc:5e:df:ab:27:96:03:4c:38:f1:c9:d6:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:34:34:BA:F4:BC:D6:59:F9:9B:49:EC:51:A8:08:63:D9:B5:81
X509v3 Authority Key Identifier:
keyid:63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d7:f4:3c:ad:b7:1c:cd:9c:77:f0:7a:4e:22:bd:05:d0:a0:
30:ec:3a:54:cc:2b:79:97:24:63:bf:3b:1d:b8:c4:a3:e9:c8:
a9:30:27:a8:77:4e:15:78:e0:bd:c6:ee:f3:4c:1f:d3:d4:74:
08:f8:c3:40:a3:ad:75:45:5a:ef:be:b3:df:56:8a:ae:cf:4f:
88:ff:60:47:9f:9d:ed:d0:81:8d:f2:16:6b:5c:87:47:8d:88:
4d:31:03:8e:bd:9d:e6:46:52:f2:db:33:85:27:3d:0d:dc:6a:
56:91:4b:68:16:86:32:04:1d:ce:26:0d:5a:03:6a:fb:fa:bf:
e2:23:4c:fc:b8:a0:a8:c9:6b:23:ca:0c:a4:be:d6:5c:5b:b1:
1b:ca:01:df:89:82:81:43:0f:c0:cd:69:f0:88:fa:af:d3:ac:
c1:d5:0d:28:c7:81:26:ed:07:82:f8:c0:82:51:71:0c:71:12:
6f:8a:c4:5b:fb:f4:93:5f:b7:fe:95:2c:47:23:ec:69:91:7b:
e0:4a:66:15:37:16:d7:e1:87:46:19:bb:9a:78:c7:25:b2:a5:
db:78:55:03:c6:83:57:e6:65:d7:ce:bb:c0:90:ba:86:2e:81:
c8:db:68:40:ed:dd:43:44:a5:94:27:2d:de:1c:38:9a:84:e7:
76:bd:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:04:06 2025 by rpki-client