Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
File: yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json)
Hash identifier: /xyWIvFgusLUmthCevz0eh7kgTq0CeoZzJlHkiMgvVI=
Subject key identifier: 06:89:A8:C3:23:A3:87:07:97:5E:5A:98:41:3E:A7:28:E3:C8:9A:79
Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
Certificate issuer: /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Certificate serial: 019749D598CEBDB5F189ABA1A63421767D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
Manifest number: 0298
Signing time: Sat 07 Jun 2025 10:00:24 +0000
Manifest this update: Sat 07 Jun 2025 10:00:24 +0000
Manifest next update: Sun 08 Jun 2025 10:00:24 +0000
Files and hashes: 1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: EMYqXViKFYhuPdigmUXOX2bb123STWDcOsSG0v23wMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:98:ce:bd:b5:f1:89:ab:a1:a6:34:21:76:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Validity
Not Before: Jun 7 10:00:24 2025 GMT
Not After : Jun 8 10:00:24 2025 GMT
Subject: CN=0689a8c323a38707975e5a98413ea728e3c89a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:e3:cc:e6:44:8c:a4:35:80:91:84:07:98:
6b:1c:bd:93:02:1a:ee:83:f4:77:87:0b:4f:08:bf:
a1:e8:cd:23:a0:dd:cf:4b:6a:3b:8d:96:92:f7:b9:
42:f5:2a:e7:e9:a7:80:37:7d:fa:11:47:eb:b8:ed:
ef:cb:0f:68:e5:47:ce:95:07:33:16:4a:05:6f:c9:
0a:2d:70:d3:2c:a4:d5:a4:63:bc:16:c8:03:1f:e6:
bd:d5:2b:e7:74:2d:aa:21:46:73:79:94:9b:e1:8f:
a1:3e:83:4c:6e:37:35:23:db:1a:39:3c:2c:f4:1f:
e8:55:8e:e8:08:50:9d:4a:3d:2d:fd:39:99:7d:d3:
a6:b2:85:cc:49:90:62:40:e3:5e:32:fc:28:9f:ca:
ec:ae:e1:55:4e:df:99:82:68:ba:a4:dc:56:cc:6c:
2d:d5:77:76:07:c5:16:df:87:b3:9e:03:b1:05:a6:
49:91:7e:36:b4:95:42:60:a8:d0:be:73:f6:26:f7:
26:a6:6c:5e:63:f4:9c:bd:f5:86:45:ad:52:b0:00:
1a:62:fc:40:73:fb:fc:64:38:74:80:3e:80:42:9f:
0f:49:58:61:06:8b:8d:1b:ce:93:70:96:84:e9:86:
e8:a3:2f:66:34:7f:65:04:6f:1a:2c:50:bb:8b:ef:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:A8:C3:23:A3:87:07:97:5E:5A:98:41:3E:A7:28:E3:C8:9A:79
X509v3 Authority Key Identifier:
keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d2:fc:79:25:35:4f:4c:2d:44:9e:e3:f2:4a:4d:8d:ae:88:
d3:51:48:14:46:9e:1c:ab:13:40:7b:a7:42:b4:e1:b1:f5:4d:
40:a2:b2:b8:94:fa:76:a1:ff:a1:f0:bf:19:7c:ca:5b:d1:62:
96:1f:29:96:b0:7d:40:d9:8f:6e:a4:98:57:10:3b:61:f2:68:
ed:ad:d0:e3:4b:a2:4b:bb:d3:81:00:50:6f:b1:56:ad:6f:b4:
6e:56:78:45:56:b5:bf:08:6d:4c:7f:66:1c:4a:3d:ff:e6:cd:
69:b3:bb:ce:34:7b:2f:9d:39:18:74:a0:47:6e:48:83:30:26:
85:a4:37:25:64:ac:f6:d4:f0:47:66:d8:bf:9c:89:b4:23:3f:
b1:39:f6:bf:75:8d:95:2b:12:74:0b:24:f9:78:7b:05:ae:36:
65:05:24:11:4e:32:38:99:45:67:1c:e9:20:48:41:42:46:a5:
9c:e4:1d:97:32:36:de:eb:4d:da:17:46:67:88:6b:fd:44:c0:
cf:8d:3d:c5:44:c9:72:84:32:da:c6:3c:52:ad:32:7c:a9:bb:
7c:07:43:66:2d:05:ff:1e:e4:99:96:4f:85:b9:cc:f5:1c:97:
3e:d0:e6:91:91:bb:49:78:44:b7:50:02:90:d6:c2:5e:b1:5b:
3f:95:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:43 2025 by rpki-client