Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
File: yEg4FrQ75KdvYGCDK-xJkvpamM4.mft (raw, json)
Hash identifier: MKhcJHZ25nL2cDgPPQR+wr3gDEraAxeynL/VgqMqwd0=
Subject key identifier: 74:79:93:C8:6D:A7:FC:25:A7:30:C8:5E:A7:80:46:13:8C:EF:A9:01
Authority key identifier: C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE
Certificate issuer: /CN=c8483816b43be4a76f6060832bec4992fa5a98ce
Certificate serial: 019748C3018DF538F43950DDED85E47DCB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
Manifest number: 05A0
Signing time: Sat 07 Jun 2025 05:00:28 +0000
Manifest this update: Sat 07 Jun 2025 05:00:28 +0000
Manifest next update: Sun 08 Jun 2025 05:00:28 +0000
Files and hashes: 1: yEg4FrQ75KdvYGCDK-xJkvpamM4.crl (hash: jFqRXSy9wc6+2RPtlWTbc+pTcp3jtU7IeigST+3NdHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:01:8d:f5:38:f4:39:50:dd:ed:85:e4:7d:cb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8483816b43be4a76f6060832bec4992fa5a98ce
Validity
Not Before: Jun 7 05:00:28 2025 GMT
Not After : Jun 8 05:00:28 2025 GMT
Subject: CN=747993c86da7fc25a730c85ea78046138cefa901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:46:f8:f5:e0:de:65:de:4a:fb:aa:29:98:
48:a1:00:fe:db:d5:b0:e8:fd:1b:be:35:11:ff:a7:
3e:4f:0f:55:f6:99:5b:30:37:c0:bc:96:da:ed:6d:
6d:66:f4:cf:3b:b7:15:07:05:a3:f8:8c:1e:a9:5a:
66:64:32:b4:ff:e0:93:8c:be:a6:18:c1:36:84:b4:
d7:dc:5f:2e:41:b9:94:a4:b9:7f:a5:28:34:74:95:
ba:11:0a:16:16:c2:a3:8e:60:0b:e5:ce:fe:91:a4:
3d:48:b9:8c:9b:d6:5d:44:dd:b4:c0:c2:94:1c:30:
9e:48:ff:56:a7:33:d3:57:b3:ae:40:c6:43:23:c6:
53:48:3f:a4:22:82:02:22:02:7f:53:a0:f0:eb:79:
97:0f:5b:66:4e:2c:5c:39:86:dc:49:79:32:73:c3:
14:c6:88:f7:7a:6e:6a:0a:f3:ac:63:58:9c:76:f2:
94:3c:10:2b:7c:69:8e:65:ed:01:ef:c5:b3:10:af:
95:54:e7:39:fa:83:d9:f3:c4:e8:90:0b:bf:7d:05:
df:fe:f5:d6:8c:04:b5:5c:f6:4c:ee:af:06:97:e6:
c3:a3:0a:42:73:14:a7:90:86:b1:d6:48:87:d3:5d:
c9:64:26:1d:fe:0e:f1:08:f8:65:f8:ea:57:c1:f9:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:93:C8:6D:A7:FC:25:A7:30:C8:5E:A7:80:46:13:8C:EF:A9:01
X509v3 Authority Key Identifier:
keyid:C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:ff:07:38:6c:8d:9a:24:7a:49:d0:16:7b:6d:6e:98:8d:
fd:d4:08:d4:7a:86:45:bd:99:1c:23:21:95:33:59:4e:33:d4:
6d:0f:6d:53:c1:2a:5b:bb:f0:f3:a0:a0:ea:73:5a:08:d8:a7:
84:7b:b2:1b:e6:06:5f:04:45:1a:93:66:65:9c:3b:54:82:27:
c5:b9:be:45:25:de:ca:70:f2:18:e9:02:58:db:eb:11:0c:db:
3b:43:b2:38:ac:dd:39:2e:dc:c6:1f:55:28:07:7c:3e:30:44:
f2:e0:99:b2:7d:4a:79:f2:29:2d:3d:89:d0:95:42:d1:96:05:
8c:9b:0d:e7:9e:a0:1f:b6:d3:8b:0c:fe:19:62:14:0e:30:42:
e4:0e:c2:d6:41:b8:d1:9d:97:97:8f:d9:cb:cc:e7:a9:05:90:
3f:31:cb:05:4c:99:62:42:3c:0a:aa:55:22:e7:97:a7:a1:01:
a9:8b:ef:4d:6f:c7:fb:dc:e9:b4:85:84:71:12:24:3f:3c:5d:
7e:23:ed:48:f5:be:e3:4e:07:f6:e8:8c:2c:47:01:9d:75:e5:
3d:d6:87:a4:15:6f:94:b2:ab:b0:8e:96:d8:38:d2:af:4f:2d:
6a:18:9c:a5:b9:d1:f0:77:3e:e5:90:1a:16:37:3e:41:e8:ca:
7a:99:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:12 2025 by rpki-client