Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: yS/3E6LhpvnmLyFU0qY0Pos3T599QFt7DIfSRB2jgWs=
Subject key identifier: BA:A8:8A:45:59:36:B5:C2:2D:24:01:4F:D5:16:78:67:C8:1F:18:02
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 01974779DF883B73B326AA0B79217586FB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 090E
Signing time: Fri 06 Jun 2025 23:00:58 +0000
Manifest this update: Fri 06 Jun 2025 23:00:58 +0000
Manifest next update: Sat 07 Jun 2025 23:00:58 +0000
Files and hashes: 1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: A4yGLmUUcymxLTSJfQ9wG5BseF4eszWEAWsoKV4EJU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:df:88:3b:73:b3:26:aa:0b:79:21:75:86:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jun 6 23:00:58 2025 GMT
Not After : Jun 7 23:00:58 2025 GMT
Subject: CN=baa88a455936b5c22d24014fd5167867c81f1802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:ba:9d:73:de:3c:41:09:45:78:1c:80:57:
da:d8:bd:18:4c:87:68:70:3b:18:08:5a:8c:ee:8f:
a4:56:7d:7f:0e:e3:6b:6d:64:35:9e:fc:22:01:43:
4f:fe:b3:6b:5c:22:7e:26:3e:32:11:d7:7b:20:ed:
5a:0d:55:57:7b:6e:ed:48:e2:d0:d8:3b:ba:c3:22:
88:d0:2c:38:d2:b9:f4:d8:a0:00:e5:3f:4c:ef:11:
ac:d5:22:49:e9:28:78:89:7b:b9:dd:57:5d:0d:fd:
d3:38:6f:ce:d1:2e:ff:6e:8b:f5:f5:43:62:a6:58:
ec:b3:4e:5c:27:09:4f:e0:bb:fd:22:53:d8:33:70:
db:6c:81:b5:4d:a4:b6:e2:bc:e4:8a:69:d8:8c:ef:
5a:f6:e9:14:83:12:9f:52:7d:9f:61:43:a3:be:11:
ea:cc:26:fe:f6:77:53:7a:5a:22:b4:c2:98:75:d3:
66:90:7f:b8:a3:4a:89:07:36:33:08:da:cc:7f:cf:
38:5e:8f:a7:07:93:2d:ad:94:37:f4:a7:1e:98:d2:
65:68:03:4f:b7:90:7d:a5:0d:3e:4f:4c:d0:26:a3:
2a:ea:74:d5:ff:59:ea:e7:2b:55:89:93:82:c0:cc:
27:af:c8:7c:e5:84:0d:5f:9b:5f:f9:e6:61:27:63:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A8:8A:45:59:36:B5:C2:2D:24:01:4F:D5:16:78:67:C8:1F:18:02
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f8:9a:19:e1:b3:94:e9:d8:46:2e:be:e7:7d:b2:ae:41:5c:
21:65:60:db:85:6c:8e:f3:03:e6:a8:5a:70:7e:de:73:42:34:
11:56:f2:83:fd:f6:8a:5b:fa:e1:af:8b:ba:b0:05:c2:54:1d:
e3:ea:dc:4c:9e:71:aa:83:21:27:8f:e1:47:70:ab:9a:42:47:
86:cf:59:0b:82:a0:27:e1:d0:a0:34:a9:f8:ad:c0:2c:2f:44:
a8:83:81:2e:e9:1d:c5:c2:17:5e:30:7c:a9:16:33:af:aa:7f:
72:3e:66:69:9a:3a:13:ce:4c:05:54:46:7b:68:76:6b:af:47:
a7:81:74:be:ca:02:cd:37:42:34:16:48:a1:4f:65:4a:ce:3a:
0c:cb:79:26:74:99:e9:1a:c1:83:c9:c5:4a:b4:1c:55:26:c4:
cb:50:02:f8:1b:7d:f1:f2:b8:59:70:75:9f:5f:c2:13:34:8b:
08:aa:eb:0c:ec:74:ef:e9:ac:82:1f:c1:7c:d4:c2:dd:eb:ed:
2c:3f:0b:c6:45:9e:bb:2d:71:6b:38:d2:b8:ab:e8:eb:7d:2d:
fc:08:51:fa:02:72:e6:d7:eb:d8:72:a5:6f:1a:85:c4:77:31:
6c:9d:79:a4:03:11:f4:b8:d7:d3:26:d6:d3:87:00:dc:51:92:
27:36:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:40:09 2025 by rpki-client