Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
File: YjqxggzkjFedpAxm2FJl8cLPy04.mft (raw, json)
Hash identifier: 7gZEVQW66yEXwjJBHHfJgDb4BhBWXq3tbOZdSAnp0p8=
Subject key identifier: 14:1D:42:52:53:04:07:46:5C:7B:62:4C:DE:70:14:6B:0F:53:70:77
Authority key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Certificate issuer: /CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Certificate serial: 01974967C4A5EDBC9290FBA438392FEF5D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
Manifest number: 0601
Signing time: Sat 07 Jun 2025 08:00:26 +0000
Manifest this update: Sat 07 Jun 2025 08:00:26 +0000
Manifest next update: Sun 08 Jun 2025 08:00:26 +0000
Files and hashes: 1: YjqxggzkjFedpAxm2FJl8cLPy04.crl (hash: 95W6npzguCW7E8ovO/+W3Rw8+nnIfWVD5oEM/EYDgzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c4:a5:ed:bc:92:90:fb:a4:38:39:2f:ef:5d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Validity
Not Before: Jun 7 08:00:26 2025 GMT
Not After : Jun 8 08:00:26 2025 GMT
Subject: CN=141d4252530407465c7b624cde70146b0f537077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:a9:6f:bb:16:b6:90:3e:d1:f9:99:88:f9:
dc:1f:4a:cb:37:0e:2d:6f:61:fe:d7:1e:ab:1d:f2:
98:23:b0:3f:71:28:08:03:04:e8:5a:ef:47:8d:e8:
61:70:d8:cb:a3:4b:44:a0:9c:69:a5:87:3a:1f:7e:
0e:90:a7:96:3a:6f:2c:51:56:ff:db:24:be:2c:9f:
de:a2:32:8b:4a:4a:94:47:48:29:0b:cd:a1:ba:8e:
75:d6:32:77:43:54:0a:2d:c6:ad:bb:6e:b0:8a:0c:
46:ea:ec:85:63:30:a5:f9:c0:7e:97:b9:cc:47:99:
8d:94:c6:d6:30:17:9e:a7:96:f2:a0:ef:22:e0:db:
af:23:f2:7a:46:2b:34:71:ef:b1:2c:16:f8:36:89:
fb:89:61:a6:27:83:b0:66:41:c8:ca:eb:8a:81:ed:
2e:ee:8e:08:23:32:a4:74:a1:0e:86:37:b4:31:d2:
e7:be:69:83:dc:6e:f6:02:df:53:5c:b2:b9:ea:9a:
1f:4f:d2:1e:ff:f7:e7:32:38:08:34:6d:a8:bc:a6:
23:2f:ae:d0:ce:1c:d3:9a:e0:2a:e6:8b:8f:06:a9:
d4:85:47:73:d8:bc:84:96:62:8a:b3:49:1d:45:a2:
b1:9d:59:fd:81:0b:05:90:2f:6f:b1:33:27:4e:6d:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:42:52:53:04:07:46:5C:7B:62:4C:DE:70:14:6B:0F:53:70:77
X509v3 Authority Key Identifier:
keyid:62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:81:51:6e:40:9e:85:ba:ff:1a:4b:ad:47:b7:83:92:b5:28:
ee:4b:82:32:ae:3e:6c:99:73:4d:16:2f:52:b6:c7:d8:d4:03:
23:36:00:17:63:cb:27:58:7e:e8:e7:9b:a3:c5:47:6b:f8:80:
0f:e2:da:08:f8:74:e4:93:49:ec:5a:3a:21:5f:9d:f9:42:0c:
f4:bc:1d:3b:05:ac:d9:07:03:8b:2d:d9:eb:5c:53:83:c5:84:
58:2c:cc:28:66:bd:28:01:71:07:e5:8f:3a:6d:e7:39:3a:75:
21:ef:57:e0:bc:b8:79:e3:f6:65:5b:11:ad:8d:25:6f:6d:66:
aa:6f:e4:9c:04:45:98:85:d8:8c:bc:f3:aa:08:e4:ee:8e:78:
d6:70:b2:bd:46:f9:25:a1:11:41:ed:2a:49:4f:32:f4:50:6d:
fa:70:eb:8f:37:66:54:bf:4a:cc:38:9d:a8:e1:86:1c:b0:c0:
3d:c5:7b:d2:32:47:3e:73:45:0f:6e:20:80:fb:ae:45:89:5f:
6a:f9:fa:3f:50:c5:62:8e:cc:e1:e2:fb:ec:bd:10:dc:7c:24:
a8:ca:70:d7:b4:20:3a:1f:b8:f7:aa:df:1c:fc:20:77:47:75:
9f:05:33:ca:b9:0d:80:15:4a:46:9b:76:a4:84:be:fb:0a:4a:
6d:d3:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:04 2025 by rpki-client