Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File: Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier: RTV4SEP9hOUysFiDkVYOzJF9L7dFcwBEE/PpIZDdr9Y=
Subject key identifier: B0:E1:1C:C3:D3:35:FB:7F:63:1B:51:5A:3A:62:8B:2E:5E:3D:55:FB
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer: /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial: 019747E7AAEE491BFB91C77EA32843842FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number: 0944
Signing time: Sat 07 Jun 2025 01:00:54 +0000
Manifest this update: Sat 07 Jun 2025 01:00:54 +0000
Manifest next update: Sun 08 Jun 2025 01:00:54 +0000
Files and hashes: 1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: rp5fAraFsesBuc0BMtameFP9TbCCgVhLROQ8h13vMo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:aa:ee:49:1b:fb:91:c7:7e:a3:28:43:84:2f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Validity
Not Before: Jun 7 01:00:54 2025 GMT
Not After : Jun 8 01:00:54 2025 GMT
Subject: CN=b0e11cc3d335fb7f631b515a3a628b2e5e3d55fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:f9:ef:ea:95:a6:57:2d:41:f3:d2:8c:ae:
bf:20:78:83:1c:e6:11:d3:78:e3:6f:da:ac:26:23:
cd:65:ff:df:0b:72:6e:b7:c9:7c:e3:89:23:af:cd:
76:48:93:aa:2d:a0:cc:d2:c9:e3:22:b2:15:54:1a:
fe:25:54:7d:20:02:fc:e0:79:c5:ff:59:33:8b:fc:
81:df:db:41:b6:e9:31:3f:47:80:f2:00:e0:e8:7e:
cb:af:c9:cc:6c:e0:1d:ed:41:31:a9:9d:1d:e3:52:
f5:75:e6:82:34:7f:11:b9:90:1a:cc:c9:fa:fb:67:
4a:be:c9:ba:bb:8a:83:f4:6b:81:35:71:02:5a:78:
c1:da:65:9a:37:3d:18:8e:a4:40:5a:eb:c8:e1:62:
46:c5:90:74:b8:e7:24:dd:bd:ed:ca:eb:53:56:b6:
12:60:79:4c:2f:c4:a9:39:85:f6:58:b6:b6:3e:f6:
28:04:d9:d7:cf:2c:64:47:c9:75:78:bf:3e:c4:63:
7c:0c:51:eb:1f:58:20:fa:0d:14:47:a3:d2:d0:68:
74:66:e7:c7:01:97:ab:3c:dd:4e:5e:ee:ef:72:de:
91:0d:bc:74:76:ab:24:08:2d:e9:00:af:49:a2:4d:
4d:5b:d6:b3:e7:55:77:35:b4:33:6e:11:9c:23:70:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:1C:C3:D3:35:FB:7F:63:1B:51:5A:3A:62:8B:2E:5E:3D:55:FB
X509v3 Authority Key Identifier:
keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:41:0f:3a:db:f8:94:cd:b3:0f:e8:38:b8:fc:3d:e7:b6:25:
46:27:8e:7a:4f:db:fd:b5:dc:44:17:be:88:ac:9d:03:04:38:
89:bf:bc:b1:85:88:d8:e6:bf:71:f3:ab:84:01:0b:86:6c:bc:
18:1c:81:72:f1:aa:50:63:a9:5d:c6:78:fe:86:ec:d2:61:56:
1c:4a:1f:fb:0a:02:10:1b:9d:aa:1b:3c:ba:75:11:eb:eb:4f:
13:32:15:cf:d2:9b:c1:2a:5b:d6:6a:82:c3:34:cc:da:38:29:
ff:c1:bb:7c:c7:d5:7a:31:d4:26:7d:aa:17:b6:86:4b:02:60:
d4:91:e7:43:44:90:b1:26:9d:63:5a:07:98:7f:8e:5c:ec:13:
dc:66:bb:d8:6f:c6:de:2f:e6:bc:c9:52:28:e4:ff:13:d8:94:
59:65:58:9c:dd:ea:65:e9:4c:a3:d2:aa:c9:fa:c2:90:27:62:
6d:8a:a1:2d:b5:a1:9c:29:75:76:fa:31:31:82:22:70:a4:69:
96:bf:cd:ee:78:05:3b:4d:d1:58:27:20:be:dd:0d:d0:16:6a:
f6:72:c3:06:69:1b:1b:05:fb:96:c1:a8:d4:50:89:69:2b:9f:
ab:21:56:7a:f1:7c:3f:11:51:41:08:d4:cf:ae:5d:e8:49:39:
61:6b:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:34 2025 by rpki-client