Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier: BBe+/Wu5vO86YV6ACoYK8GN6hiJyb7EiQiLYopXg17A=
Subject key identifier: 12:09:CE:69:E4:EA:32:61:BF:99:F2:20:2E:68:EE:6F:A8:65:FD:F8
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial: 019754229F6F9610F04289395F197919B184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number: 157D
Signing time: Mon 09 Jun 2025 10:00:44 +0000
Manifest this update: Mon 09 Jun 2025 10:00:44 +0000
Manifest next update: Tue 10 Jun 2025 10:00:44 +0000
Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: KPaAVxySUNAy2da5nNxDG43z4sRVU3KzVctxtIYUsP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:9f:6f:96:10:f0:42:89:39:5f:19:79:19:b1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9187af710f6285e13553071328b9d994852c471
Validity
Not Before: Jun 9 10:00:44 2025 GMT
Not After : Jun 10 10:00:44 2025 GMT
Subject: CN=1209ce69e4ea3261bf99f2202e68ee6fa865fdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:9b:2a:4c:77:b2:5e:67:ec:39:12:e4:8b:
0a:c6:13:fb:5e:51:9f:7f:29:7e:23:34:a2:42:5e:
1f:ba:12:e5:17:d9:23:dd:92:11:b4:3d:ff:c6:ef:
6d:31:20:85:e4:3d:ab:9c:51:9b:80:d6:0f:05:97:
53:fd:8d:d7:64:42:8d:60:43:95:60:2b:e4:9f:57:
48:13:78:1b:cf:f7:e4:bf:e5:29:86:5c:61:9a:e1:
4c:28:47:bf:aa:ed:f2:a1:29:19:85:8b:b6:5c:62:
8e:8e:89:76:36:16:db:d1:9d:50:8c:c1:c7:05:cf:
2a:9a:4a:aa:38:d2:31:68:b7:76:d8:cf:01:13:b9:
f4:08:8a:85:15:df:c7:92:97:33:6a:4f:72:45:41:
e7:16:f5:5d:5e:1b:f9:38:63:7d:fd:14:bc:f6:30:
66:e2:c3:47:ca:ed:c2:46:89:90:27:03:d5:7d:27:
55:7b:3e:2a:4e:ee:b8:16:0a:6f:dd:a8:02:88:79:
52:39:a3:88:21:d4:36:60:4a:ef:88:e9:90:03:89:
e9:2b:5c:92:b2:3c:10:50:b3:9f:cd:e4:5d:8a:35:
ec:ab:17:3b:34:c4:69:d8:bf:d9:5a:34:82:5e:7e:
bb:50:24:35:93:3b:7e:d9:e3:90:08:ad:b6:5e:0d:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:CE:69:E4:EA:32:61:BF:99:F2:20:2E:68:EE:6F:A8:65:FD:F8
X509v3 Authority Key Identifier:
keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:f5:b5:f4:5b:71:77:c1:38:8c:74:05:d1:eb:ff:7a:e2:
3e:04:68:34:e2:33:86:95:98:1d:ac:e4:11:81:80:9a:d2:0e:
14:99:35:a5:99:49:a6:4a:db:32:2c:1b:02:68:89:1b:87:e4:
24:70:f9:2a:a8:50:53:91:34:30:14:e0:67:25:5d:ee:4a:05:
81:6d:c3:bb:9e:c2:42:db:32:1f:14:84:db:1e:86:dd:ea:67:
68:88:ed:66:b9:90:7e:60:9a:b3:af:44:8b:32:18:47:49:d0:
6b:4a:9c:f4:2a:36:c7:39:0f:ef:6e:11:fc:50:57:c9:86:9d:
0f:4e:d1:ef:f6:fd:37:90:f0:71:f6:95:19:ac:dc:ce:39:c8:
d0:15:09:38:00:a3:25:a0:90:52:c2:8d:6d:a5:3b:d1:c8:82:
5d:1f:8b:c0:7f:0a:70:6d:5f:11:89:f3:95:f3:6f:30:09:f4:
65:b9:41:d9:f7:56:26:03:37:e1:90:0b:00:e3:e4:65:d8:10:
0e:c6:db:20:fc:bd:0c:70:fb:ee:8e:5b:25:44:12:0b:e0:57:
b0:a2:57:f4:ad:1e:10:8c:85:02:2c:25:29:6d:20:98:0b:f1:
fa:73:2e:1d:5c:b2:83:f3:fb:45:d2:64:99:22:65:bb:b1:ac:
fd:aa:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:59:20 2025 by rpki-client