Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: eTDCwWcNzl7kDQE7LSEvt2FXVkNSDyXm1SKDDMlvz3s=
Subject key identifier: 86:C4:93:3B:A6:9D:08:DF:69:86:21:AA:CD:D0:24:4D:C4:4B:09:82
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 01974C69910D1466BB48B994C910EFFDC6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 14E0
Signing time: Sat 07 Jun 2025 22:01:16 +0000
Manifest this update: Sat 07 Jun 2025 22:01:16 +0000
Manifest next update: Sun 08 Jun 2025 22:01:16 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: 6/UN7QJFSgqvrUE2NFIeAe4jobzQRL9aJKSW2641gRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:91:0d:14:66:bb:48:b9:94:c9:10:ef:fd:c6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: Jun 7 22:01:16 2025 GMT
Not After : Jun 8 22:01:16 2025 GMT
Subject: CN=86c4933ba69d08df698621aacdd0244dc44b0982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:87:49:8e:51:f4:af:6e:42:10:68:0e:3f:
20:66:a5:b6:93:9c:c0:08:70:ab:9b:ec:dd:b0:2b:
58:f5:e5:74:dc:76:ce:d6:66:fb:34:e9:c4:43:21:
cc:c7:f3:07:ac:a5:3c:f2:09:26:2c:fc:3d:1e:6c:
5d:4a:83:45:5d:96:d8:a7:22:3d:fc:dd:ef:62:78:
df:00:24:37:91:62:18:9e:7d:5f:9f:de:2b:84:5a:
3b:06:25:38:3b:d9:26:53:0f:cc:a7:94:20:ec:74:
2a:46:87:38:dd:66:24:10:67:2c:23:35:76:bd:96:
ba:f3:f7:e2:b3:d9:e4:97:ff:b3:ee:ee:3f:af:0f:
c3:17:8f:ae:47:32:c5:27:92:27:6a:04:41:bd:12:
b4:87:31:8e:24:c1:79:7a:33:34:3a:ee:e3:dc:20:
93:61:eb:ba:f6:78:e7:8d:1a:76:b0:d6:29:08:5e:
07:30:94:66:43:5f:2f:50:60:72:3d:d6:fc:63:d0:
62:38:17:01:ab:6c:37:52:9c:63:49:d3:08:48:c9:
90:63:9a:a1:e8:22:d8:3b:5a:75:4b:0d:6c:4a:32:
19:15:d8:55:4c:9e:55:30:a8:4e:10:5d:96:57:42:
ab:af:43:e1:d9:48:d2:b9:08:02:58:55:9b:54:d0:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:93:3B:A6:9D:08:DF:69:86:21:AA:CD:D0:24:4D:C4:4B:09:82
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:28:b5:6c:bb:4a:8d:1f:c9:65:e8:6e:77:a4:d7:a9:6e:65:
03:bc:ff:e0:70:3a:66:78:91:f3:76:d4:cd:e4:35:a4:72:96:
ca:aa:00:c8:d3:61:25:90:7d:66:33:e2:19:8d:ad:18:71:37:
8f:1f:84:f4:b5:f8:c4:c3:7f:63:37:3d:3e:e3:fa:59:8e:df:
6d:60:f6:47:b3:30:ba:7d:e5:df:cf:19:f3:41:95:7d:a8:2b:
43:2d:2d:9c:a7:3b:b7:44:ad:ba:23:7b:82:4e:73:ab:bb:30:
9a:75:42:15:28:de:ef:e7:11:63:ce:79:f2:7a:d0:77:3a:a8:
f1:ee:86:b8:d9:3d:59:82:35:33:20:b0:f8:ea:92:01:37:dd:
59:37:00:06:6c:26:49:05:48:6d:0d:0f:d4:46:47:2e:e8:7c:
31:71:77:ca:75:4a:c4:cc:3a:70:4f:53:26:74:6b:8f:7f:9c:
1e:25:88:82:8f:88:2b:da:8d:41:2f:a0:e1:ba:9e:52:c5:52:
c5:f2:51:fe:71:34:12:1c:4c:25:0b:c3:ec:c3:c0:2a:3c:30:
9c:48:a2:f4:2e:8b:c7:94:de:30:d5:f3:01:e6:a8:aa:a5:a4:
87:38:f2:86:53:1d:d4:eb:e0:48:7e:85:d7:67:49:0d:e2:30:
37:33:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:46 2025 by rpki-client