Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
File: yTLAXdVS5YBU2FWljWFhlVP1HGM.mft (raw, json)
Hash identifier: xYrQXHUouJyK1uAvYcJdBFjFKMvieYqbRGXP27Jkyzk=
Subject key identifier: C3:FA:88:67:45:40:7C:49:CC:DA:32:96:D4:C6:67:0B:7C:37:27:FA
Authority key identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
Certificate issuer: /CN=c932c05dd552e58054d855a58d61619553f51c63
Certificate serial: 01974FD7B9F346ECC825690BD7871714E410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
Manifest number: 06
Signing time: Sun 08 Jun 2025 14:00:27 +0000
Manifest this update: Sun 08 Jun 2025 14:00:27 +0000
Manifest next update: Mon 09 Jun 2025 14:00:27 +0000
Files and hashes: 1: yTLAXdVS5YBU2FWljWFhlVP1HGM.crl (hash: uxzIcwPRcMLY0Ag0G/C4HUlz/0x/mNGDUbG4InYYdsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:b9:f3:46:ec:c8:25:69:0b:d7:87:17:14:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c932c05dd552e58054d855a58d61619553f51c63
Validity
Not Before: Jun 8 14:00:27 2025 GMT
Not After : Jun 9 14:00:27 2025 GMT
Subject: CN=c3fa886745407c49ccda3296d4c6670b7c3727fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:6a:f0:a2:77:22:82:b3:72:78:06:15:aa:
fc:5f:7e:7c:f3:77:dd:85:4d:23:97:fc:f4:f0:89:
cf:0c:51:52:64:8a:9e:82:88:ab:e0:43:1a:f2:2e:
d5:e6:69:d5:92:40:ee:21:0b:12:73:dd:aa:b7:56:
a2:f7:6d:b8:c3:57:e7:62:c8:13:c3:76:bf:c1:98:
5f:8c:89:7f:97:93:00:f9:84:f1:8f:77:0e:c5:b2:
c8:46:73:b9:3e:9d:ec:fa:16:0f:b9:b7:91:5c:21:
f0:0e:dc:0b:d0:53:da:13:68:ff:8d:c8:95:aa:88:
b4:66:c8:6e:ec:4f:af:9c:e2:c1:df:54:b9:19:d2:
60:11:9f:ed:8d:0e:ad:ae:a5:e6:37:d1:b0:28:47:
5f:ee:a3:f8:af:ce:f4:df:61:71:94:27:33:26:58:
76:68:a5:ed:f9:2b:97:1b:a6:72:92:9a:30:26:29:
83:27:b0:a2:22:1d:3b:d7:68:41:52:6d:86:0d:37:
fa:eb:9c:97:e2:26:61:8e:86:49:b2:f4:e4:54:65:
f2:09:b3:42:fc:ab:43:35:17:be:60:b6:f4:a6:03:
04:bb:e5:1b:83:80:09:9c:2b:df:78:f8:c3:af:ed:
1d:7f:62:83:81:48:40:bb:8a:a7:0f:1e:f2:c4:ce:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FA:88:67:45:40:7C:49:CC:DA:32:96:D4:C6:67:0B:7C:37:27:FA
X509v3 Authority Key Identifier:
keyid:C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:f6:28:5f:ff:a2:5b:9d:75:f3:21:2b:62:a9:93:56:51:
c2:ae:26:64:73:29:45:5e:5b:87:93:ac:dc:00:53:c8:bd:6e:
46:21:8f:51:6d:10:c7:1c:af:ee:6b:70:c9:dd:fd:d7:c0:25:
19:f7:26:fb:4d:7e:57:5c:b0:b8:7f:3f:b3:9c:90:12:02:fb:
1c:66:0a:4a:09:33:a3:af:52:61:a6:72:ff:4b:7e:e7:47:0b:
61:85:c1:95:22:40:e1:4f:95:fb:d3:21:4d:de:59:54:e1:b2:
95:63:f4:5a:27:1e:34:f0:ca:73:38:55:f1:9f:5f:9b:cc:b0:
2f:4c:4b:d7:81:b2:4d:49:ed:55:ed:ca:48:ab:5e:c2:02:20:
d2:78:ef:2c:00:9d:41:7c:6d:01:e8:84:e8:24:ba:b0:bb:b3:
c6:be:f7:2c:ed:78:98:0c:a1:cf:13:ea:40:7f:8f:4f:c2:49:
43:f6:a6:3d:0f:54:e0:b2:49:31:08:b7:f6:f9:27:43:ee:e3:
7e:c0:71:ad:b2:ea:2a:4e:19:f6:df:c4:bf:2c:9a:4e:3d:4b:
1f:32:78:e4:a1:2d:bf:71:49:4e:c0:26:01:7c:17:75:93:3d:
bb:5a:7e:c1:57:00:a0:74:66:a5:90:08:a7:9e:af:21:ab:d0:
4d:d8:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:18 2025 by rpki-client