Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: xUA4ZMcIkGf36bgfvYPC+fu0UAFs/4iC7CbIEhZOcCI=
Subject key identifier: 31:F4:4B:5F:E0:75:C2:2A:0C:DF:0F:8B:93:AD:C3:3B:0C:FE:99:17
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019753101BA6790EA5F75D5894E499D53A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 05:00:53 +0000
Manifest this update: Mon 09 Jun 2025 05:00:53 +0000
Manifest next update: Tue 10 Jun 2025 05:00:53 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: oikZEPOXdKfIS9PmEO+noI/tI7YgvqfbEhppM8DSOwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:1b:a6:79:0e:a5:f7:5d:58:94:e4:99:d5:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Jun 9 05:00:53 2025 GMT
Not After : Jun 10 05:00:53 2025 GMT
Subject: CN=31f44b5fe075c22a0cdf0f8b93adc33b0cfe9917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:3a:38:bc:7d:04:59:55:5a:b3:a9:4c:dd:
6e:54:df:bb:63:cc:23:1c:74:ca:c7:9c:31:6d:9f:
d3:0a:eb:fe:e5:2a:df:6b:37:52:09:90:40:f3:10:
b0:36:eb:46:c8:be:79:98:a9:dd:cd:3a:e1:dc:13:
06:72:d8:4e:d4:f5:cc:c3:7b:9a:7a:7f:a9:e8:0d:
a4:b3:a4:0b:f5:b3:25:ab:ea:55:f1:42:b0:0d:9f:
cd:5e:41:ab:ed:0e:aa:6c:7c:cf:ff:05:41:cf:d7:
b2:03:37:2d:43:3e:ad:6e:ae:2a:ac:ee:9e:cb:66:
8f:4e:47:7d:9e:b3:4d:19:8d:f3:66:15:90:cd:9f:
ed:e0:c9:85:2a:73:47:e4:7d:09:30:ac:d8:d9:6c:
4b:0c:0f:08:52:29:30:93:f9:9d:73:26:2b:8c:44:
a2:87:a0:b2:d1:c6:84:c7:99:8c:7d:74:5c:90:89:
ca:0e:28:a8:e7:33:9c:0d:fc:dd:a6:b6:43:b7:3d:
44:c6:4a:03:53:ad:42:18:58:19:ce:fe:01:23:b5:
c7:52:1f:84:18:f4:ce:ae:78:8c:72:c4:d2:09:fb:
02:a1:06:3d:2e:44:ef:28:69:68:3b:7b:1f:c5:b6:
c2:d0:5b:ac:0a:48:43:7a:50:e3:af:c8:df:74:47:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:4B:5F:E0:75:C2:2A:0C:DF:0F:8B:93:AD:C3:3B:0C:FE:99:17
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:98:db:7b:34:13:00:32:2c:43:90:18:73:c2:a0:f5:71:3f:
cc:01:ad:c9:69:ea:3b:a8:bd:42:3e:30:7d:13:1f:1f:45:a0:
33:6a:8d:f1:51:df:e5:71:4c:8f:f7:f4:13:69:1d:0c:d6:9d:
ae:0b:83:38:62:c9:42:10:98:17:d8:df:d5:24:70:c3:69:b6:
36:e2:0f:4f:c6:62:26:f3:52:e3:d3:1a:64:5d:c7:e7:56:b3:
ca:2f:35:03:82:0e:32:0b:d9:10:87:30:b7:e4:16:6a:1f:b8:
e5:f9:a5:a1:e7:c0:36:ce:91:45:40:69:1e:24:8b:16:11:76:
cd:68:72:b8:a4:b4:70:49:54:9d:db:c8:ee:c4:96:22:fd:28:
f7:cb:80:5c:3f:d1:1b:6b:15:3a:ed:4c:90:55:e5:a9:df:a9:
51:a7:62:a3:9f:32:8c:8c:f9:bf:ef:59:88:60:2c:9a:ef:bf:
8d:60:31:80:da:8a:77:22:8a:af:0a:12:d8:9c:a7:68:dd:4e:
96:1b:75:f0:21:8c:f2:ee:4a:8c:1c:05:4e:3e:1e:1b:d5:56:
be:ee:f0:a3:56:0a:c6:88:ca:6b:0c:73:f2:b8:e3:da:a6:75:
0a:72:20:b2:be:50:e4:89:ec:62:db:c9:18:98:f8:85:ad:b2:
4e:40:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:53:04 2025 by rpki-client