Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: p68bE4tezZWzjVKYs0PW6sTLUlUxm3rAQXP9LOEejYM=
Subject key identifier: A1:D1:3B:34:35:02:82:2F:C4:AA:7F:8B:4A:A2:CE:36:0F:B0:D0:98
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019758DAC7BA90B96B0F8A2178E589C22550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1581
Signing time: Tue 10 Jun 2025 08:00:22 +0000
Manifest this update: Tue 10 Jun 2025 08:00:22 +0000
Manifest next update: Wed 11 Jun 2025 08:00:22 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: CmjiQPKxwltOpkqbN3BNZScwpsK7pqIvRokYewQLMIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:c7:ba:90:b9:6b:0f:8a:21:78:e5:89:c2:25:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Jun 10 08:00:22 2025 GMT
Not After : Jun 11 08:00:22 2025 GMT
Subject: CN=a1d13b343502822fc4aa7f8b4aa2ce360fb0d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:99:18:e1:09:be:36:ee:ee:97:2e:52:0a:
48:ff:2d:56:d4:75:d0:cc:bc:76:8f:eb:f3:80:e0:
c3:a6:fc:da:db:ff:06:f7:02:1c:2a:d3:f9:b1:83:
40:9a:23:cf:41:c2:21:ee:76:34:68:ec:69:08:61:
5d:5c:80:07:dd:ff:41:80:45:95:42:0b:b7:81:e9:
a3:96:96:b1:42:8c:71:cc:4b:f4:e0:03:00:c2:11:
b6:50:e0:f1:ed:5a:d1:ba:f9:bf:36:89:1c:e9:22:
cb:b4:6a:94:86:1f:43:da:a6:ff:d1:8c:69:95:61:
55:5e:63:69:af:b9:b7:09:52:49:4e:1a:16:11:be:
61:eb:df:4d:ca:06:39:f5:23:cb:af:9d:c3:c0:01:
6d:90:da:6d:ec:c3:4b:9b:53:7b:b2:1a:b3:99:3f:
d2:6d:a3:b4:19:c6:12:a2:63:3a:39:cd:21:61:2f:
c9:fb:19:e2:9a:0d:32:75:64:15:fc:23:39:50:1b:
44:4a:81:65:f5:35:5c:a0:7a:73:92:9c:81:6d:1f:
e9:09:76:e8:be:9c:cc:a5:1a:9b:f0:f0:f4:aa:2b:
1e:81:11:e9:63:cf:1b:31:de:dd:04:c2:08:cc:9a:
5e:8a:3d:fc:74:ec:f5:c8:5a:c1:f9:5e:3f:2f:fd:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:3B:34:35:02:82:2F:C4:AA:7F:8B:4A:A2:CE:36:0F:B0:D0:98
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:48:4c:09:cb:bc:9a:70:a5:30:27:28:66:e8:35:ef:49:78:
3e:b1:64:80:f2:85:15:5e:24:4f:99:3b:f5:2d:d7:e3:ff:ac:
f4:5c:9d:fc:8b:da:10:49:14:7c:3b:c6:ad:27:f5:1c:bd:0d:
2a:8f:13:b9:af:d4:d2:f8:24:de:51:83:16:28:b7:bb:32:e9:
57:d9:1b:e9:5c:72:89:50:1f:97:31:16:9f:81:0a:81:90:64:
4e:55:90:69:b1:2d:20:fe:72:13:36:60:8a:f5:f2:db:6e:18:
72:d1:82:32:24:24:6f:a3:5c:43:2d:2c:dd:07:2d:70:5b:e0:
2d:eb:9c:68:d7:36:e4:62:e0:35:21:98:59:24:78:a1:04:78:
9b:05:7d:0b:2f:c5:34:ac:32:99:6a:76:10:a8:92:2c:a7:cb:
89:b1:82:52:3f:be:b5:8b:6a:25:09:68:51:dc:51:b0:fc:67:
5f:7c:ca:72:9e:c5:0a:92:2a:22:ff:cb:37:63:38:79:be:c6:
c7:ea:91:88:77:3e:b6:cf:48:f7:1e:ca:e6:02:3b:38:8a:7f:
8e:e1:6f:98:6f:0f:83:08:07:96:1a:fc:40:60:27:42:ad:53:
57:1f:ae:e0:f2:4f:79:16:f8:6f:36:93:b8:96:73:7f:54:e0:
f2:7e:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:45:02 2025 by rpki-client