Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: A7cXpwEa1vXuSiZCFvysdTw0DEyO3c6wqOv6gYoI/0U=
Subject key identifier: 62:C0:D6:8C:25:7C:6A:D4:70:3D:06:F6:BC:95:09:F7:8C:60:CE:AE
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 0197488D21AA2CF996AE1C634A618C4EAA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0941
Signing time: Sat 07 Jun 2025 04:01:38 +0000
Manifest this update: Sat 07 Jun 2025 04:01:38 +0000
Manifest next update: Sun 08 Jun 2025 04:01:38 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: WkDaIRarn6cbU3t1AwNTpUeR70ybAn0JPhCgLMDg+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:21:aa:2c:f9:96:ae:1c:63:4a:61:8c:4e:aa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Jun 7 04:01:38 2025 GMT
Not After : Jun 8 04:01:38 2025 GMT
Subject: CN=62c0d68c257c6ad4703d06f6bc9509f78c60ceae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:32:bf:2e:d0:f3:e0:54:a3:fe:fb:5d:2b:
33:7c:9a:d3:37:b5:e2:cf:2b:1f:e1:df:49:71:24:
de:c1:dd:5d:5d:f0:a1:12:61:0e:37:0b:32:bf:10:
c0:29:0c:bd:cc:49:5c:53:6e:c7:51:79:e3:b2:12:
94:8d:6e:93:8b:7c:51:d8:a5:0f:f1:cb:c8:62:9f:
e7:de:92:76:aa:87:82:9c:30:7f:c2:1d:49:42:38:
cd:0a:d9:71:a2:5c:71:4d:a6:d1:ef:00:3b:a1:34:
0b:87:78:5e:d6:d9:29:47:9a:e4:13:9d:6f:b7:60:
1f:a6:57:95:2a:ac:b9:8c:0b:8e:a9:a4:2c:6a:c5:
30:1d:39:38:03:3a:34:5f:27:64:43:a3:52:05:d3:
f8:b3:f3:f4:0c:42:b3:2f:8c:08:09:46:05:b5:cb:
d7:83:d0:3a:44:95:1e:d4:47:9c:6d:65:48:14:b9:
af:5c:6d:2b:cf:9a:a7:42:fe:3b:e3:cb:89:8c:f7:
03:af:cf:5c:0d:4d:83:50:31:bf:d0:d1:71:db:f0:
cf:b8:eb:86:e0:c3:d4:c0:ab:3b:d1:9c:99:7d:90:
44:f8:16:4d:c1:3e:7a:48:4d:15:5a:80:f1:0a:1f:
55:e3:9b:4c:49:e7:86:ff:ca:2d:99:7d:0f:30:f4:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:D6:8C:25:7C:6A:D4:70:3D:06:F6:BC:95:09:F7:8C:60:CE:AE
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:de:5b:9e:6c:76:7b:06:78:4d:1c:d5:ae:bf:ec:3d:9a:0f:
e5:6f:72:42:45:9b:cd:36:8d:d8:d0:1c:9f:f5:30:d4:15:70:
1f:99:88:95:b7:99:19:69:32:6a:8c:40:30:4e:d0:6b:72:db:
dd:4a:37:08:0f:77:a9:b8:e6:c1:83:77:d5:1a:fe:f2:ed:f1:
7c:90:cc:8f:48:3f:db:25:0e:30:ca:51:63:f9:da:e9:21:01:
2a:5e:a8:c4:19:ee:3b:d8:fd:03:77:d7:f6:04:82:ac:10:2d:
81:79:ba:7d:19:52:b5:3f:e9:73:39:a2:33:dc:ea:f1:57:8f:
89:84:3e:e9:ea:39:d2:c0:42:d5:b1:ea:39:af:88:2c:3f:55:
55:3d:78:a8:da:0b:a1:1c:94:65:2a:f7:b7:f6:0b:c9:91:96:
41:2d:f1:5c:fe:4d:43:18:12:59:f5:ed:9a:6a:3c:2b:e7:8e:
3b:72:22:79:99:48:e3:15:35:3d:61:8f:52:af:09:69:41:5a:
10:4a:c2:e9:49:e5:79:cd:92:91:5f:bb:d4:e8:36:ee:73:09:
e0:e5:78:ac:50:d4:bd:82:f8:d7:0a:13:70:eb:97:ac:ba:74:
07:1a:64:e4:5d:40:82:1e:4f:4b:7b:d3:93:2e:03:4b:66:42:
b0:f5:01:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:56 2025 by rpki-client