
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
File: Y31k1HJWO36HP1t5-RydP__D2_k.mft (raw, json)
Hash identifier: Zo4rSgN67B3qMej07zkY8DLJORJ+e36oEbr9VHU+EwM=
Subject key identifier: C1:4D:61:2B:E4:68:31:21:55:8E:32:E2:70:C7:13:CF:3F:A7:50:61
Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
Certificate issuer: /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Certificate serial: 019748F9F6F99352F90CEAC5D76D6BF6BAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
Manifest number: 0E37
Signing time: Sat 07 Jun 2025 06:00:30 +0000
Manifest this update: Sat 07 Jun 2025 06:00:30 +0000
Manifest next update: Sun 08 Jun 2025 06:00:30 +0000
Files and hashes: 1: Y31k1HJWO36HP1t5-RydP__D2_k.crl (hash: /IW1P12borCRpHXibQzViSIFjNITBoYiaNPdifQ6wak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f6:f9:93:52:f9:0c:ea:c5:d7:6d:6b:f6:ba:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Validity
Not Before: Jun 7 06:00:30 2025 GMT
Not After : Jun 8 06:00:30 2025 GMT
Subject: CN=c14d612be4683121558e32e270c713cf3fa75061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:13:16:25:82:e8:6e:20:17:fc:7c:1a:41:
b9:8b:81:b2:66:54:2a:7e:2e:94:3c:ee:11:20:5b:
93:50:eb:d5:2c:8a:11:01:77:81:5e:70:cf:a5:50:
63:17:b3:42:b4:66:30:4a:2e:b2:f1:75:8b:b1:30:
fc:4c:37:94:7f:d7:ed:45:31:57:f5:cc:e4:55:42:
b4:a9:8a:6a:b0:95:c9:6b:65:43:71:a6:3c:48:c5:
b1:8e:63:a8:40:d3:8d:0f:cc:60:c6:e3:a5:81:62:
6d:8b:b3:73:2b:aa:e8:b1:9c:17:69:bb:6d:6f:f0:
8d:c8:6e:5c:c1:31:7f:7f:68:02:79:b0:9b:cf:9a:
e2:7f:11:94:b9:3c:88:03:d1:de:59:dd:d4:87:f8:
fc:93:61:7c:d7:f7:fa:f4:ab:ab:ba:57:32:c2:f0:
81:66:4d:64:97:c7:ae:43:7f:af:21:30:1d:0c:e6:
e6:d5:6e:9a:1e:04:be:7f:a6:01:b3:c2:89:bc:b0:
db:66:be:c6:34:14:80:fc:a8:ad:26:c4:f7:de:f0:
2c:23:3c:59:2e:1f:e3:7b:73:13:74:7d:66:49:58:
ea:04:d4:3b:37:80:fb:9f:07:38:07:a7:5f:10:7b:
d0:fd:c3:7d:7b:84:1b:1b:01:ea:2a:52:5c:23:85:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:61:2B:E4:68:31:21:55:8E:32:E2:70:C7:13:CF:3F:A7:50:61
X509v3 Authority Key Identifier:
keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:97:89:d5:66:e7:63:4a:06:25:1e:84:cc:56:2d:a3:09:48:
ab:6d:34:c9:62:4e:10:be:f3:f2:10:13:25:77:dd:a4:b7:69:
69:6d:36:d1:39:3f:8c:1d:4a:c2:6b:1f:78:b6:37:70:0c:8c:
c1:7c:0a:16:27:a7:ff:c4:b4:8d:a0:1c:9b:f1:34:b5:6e:d8:
62:54:6f:fe:8a:7e:69:9b:69:bc:d3:87:ab:5f:24:bf:97:90:
ff:36:31:53:64:09:62:90:1d:8c:38:03:fd:3d:80:64:ba:66:
16:e6:f4:c7:3d:46:cc:90:ab:9b:54:ec:e4:b5:1a:2d:7f:5e:
89:11:64:ef:d6:63:f0:6c:4e:53:42:bc:60:e0:21:34:7a:11:
91:7c:83:c8:d2:97:4e:db:da:21:b0:81:04:4b:ee:0e:42:ab:
e5:a8:38:d7:2e:75:1d:33:38:a4:0a:5a:04:b1:fa:ec:b9:eb:
07:df:db:76:08:52:89:4b:39:bb:4b:7d:7d:a1:29:76:96:0b:
dd:24:ba:e6:68:71:3b:54:fe:1d:6c:70:24:cb:e3:77:67:a6:
0e:25:43:05:92:50:67:9c:94:14:b9:ef:60:13:81:6f:eb:8b:
14:05:67:f1:9e:55:5d:d3:b0:69:18:d5:b8:a1:67:f2:e6:9a:
71:4b:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:19 2025 by rpki-client