Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
File: Yv8lPFoTQ6JWma4I51dnrya52-U.mft (raw, json)
Hash identifier: IxPSMxz/Qaz/wqjugz7kkIP60+W6UIwzwPVpGfgwuBI=
Subject key identifier: 60:6E:16:4C:D0:98:2E:3E:D7:7A:5D:32:47:79:F2:FB:45:DC:CF:1B
Authority key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Certificate issuer: /CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Certificate serial: 019749D5D9AC11DB28D4E3EE8FACEAD67CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 10:00:40 +0000
Manifest this update: Sat 07 Jun 2025 10:00:40 +0000
Manifest next update: Sun 08 Jun 2025 10:00:40 +0000
Files and hashes: 1: Yv8lPFoTQ6JWma4I51dnrya52-U.crl (hash: TOLAegRnPsndhlHOaohHlxuiRLl7KUe1pUhGan7e1I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:d9:ac:11:db:28:d4:e3:ee:8f:ac:ea:d6:7c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Validity
Not Before: Jun 7 10:00:40 2025 GMT
Not After : Jun 8 10:00:40 2025 GMT
Subject: CN=606e164cd0982e3ed77a5d324779f2fb45dccf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:c7:bf:f9:be:7c:01:c6:0c:1b:69:99:0e:
45:d9:85:74:22:f8:b9:65:8d:81:29:34:a4:34:85:
4b:16:d9:7d:34:19:f5:e7:4f:09:a6:8b:d2:13:81:
12:a7:5e:6a:a7:de:f2:a5:b2:d8:8d:e0:87:81:68:
94:4e:8f:38:04:24:6c:df:0f:a5:23:87:93:89:8a:
5d:88:eb:21:39:c3:db:91:72:6a:11:a7:ae:99:44:
27:51:1d:a6:c3:a1:15:f9:41:be:5e:ae:37:69:da:
28:1d:ff:2d:cc:0b:b1:a0:18:18:f2:d3:f4:1e:e5:
75:f3:e1:61:9e:ea:75:b0:68:6f:d4:6d:af:3a:3d:
ee:31:48:60:28:66:6f:7b:27:a1:d8:36:73:52:74:
3a:09:46:5c:59:f8:15:96:e7:f5:63:f6:8d:3b:e9:
7c:cd:62:94:5d:00:bf:87:95:90:8f:73:c6:42:0d:
78:2a:ff:4d:cc:99:91:31:fb:88:0a:04:12:c2:6f:
6d:b4:d7:82:72:5d:22:52:99:f7:d2:77:5d:99:3d:
c9:c5:4d:55:bc:ba:67:a3:99:8a:27:0e:81:97:e6:
2f:33:07:93:37:4c:7d:14:10:6f:e5:76:70:f6:c3:
1f:f0:37:e9:d9:86:ed:b8:ab:2e:52:74:2e:3e:2e:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:16:4C:D0:98:2E:3E:D7:7A:5D:32:47:79:F2:FB:45:DC:CF:1B
X509v3 Authority Key Identifier:
keyid:62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5f:b7:58:29:51:42:9f:9a:11:3e:35:01:e7:13:46:35:83:
b9:01:e4:3f:7a:6e:53:7d:a2:81:15:9d:74:2d:fd:41:9c:9b:
49:72:d5:a4:2a:d3:32:6a:82:e1:11:e0:7f:d8:5c:54:83:7f:
e5:97:64:f4:2e:4f:7c:05:ed:0a:a5:56:1f:f6:42:02:c6:25:
a4:be:90:2c:b5:75:ee:03:aa:23:a2:39:b7:ea:99:55:29:7d:
05:9d:9e:51:ff:d8:85:77:b5:b2:d9:e2:a2:23:ea:2e:59:3a:
21:45:8a:43:42:58:4a:53:74:59:09:cc:d8:df:2e:25:5f:6b:
63:fe:23:2d:d9:28:58:3a:4e:b0:bf:6c:f2:68:4e:50:69:df:
2a:ec:12:54:4f:c9:64:d6:d3:76:18:31:96:e5:41:9f:55:cd:
f2:95:44:f3:ca:ba:3c:94:d3:74:05:ca:f4:77:d7:9c:e6:c0:
a8:59:f3:47:c2:f8:56:be:6d:4b:20:cb:91:b2:74:5e:82:5f:
d9:4d:92:07:c4:56:84:3c:11:bc:d4:d4:f4:ec:b0:0b:3d:89:
c4:7b:83:bf:68:86:3c:80:83:29:d1:90:d8:a5:b7:c8:bb:96:
1d:e1:75:ae:24:7c:22:4f:fa:68:c7:f1:fd:10:9f:0c:aa:4f:
a4:0e:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:06 2025 by rpki-client