Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier: ffbzNVV8yLeWC2iRU2fHHUN2m5RWIOudxCLiPL0oVSY=
Subject key identifier: F4:12:45:7D:E9:E3:0B:AC:39:B1:08:4A:94:5D:C1:DD:2C:BA:F5:1B
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 01974A0C74C5424A85F085604E1F5D77A095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:19 +0000
Manifest this update: Sat 07 Jun 2025 11:00:19 +0000
Manifest next update: Sun 08 Jun 2025 11:00:19 +0000
Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: zZdQ/ZEupdGW1HlGh2xPubrIvF0bAn6HpNcOwYZVteM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:74:c5:42:4a:85:f0:85:60:4e:1f:5d:77:a0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Jun 7 11:00:19 2025 GMT
Not After : Jun 8 11:00:19 2025 GMT
Subject: CN=f412457de9e30bac39b1084a945dc1dd2cbaf51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c8:28:22:24:df:ed:54:1e:36:37:4a:73:4c:
5f:b3:46:a4:b1:3c:ed:8c:0a:ed:d8:7c:65:37:a6:
fa:8b:23:06:75:e2:73:c6:7b:bb:51:7e:80:04:87:
96:f7:9e:09:58:e1:c7:70:90:4f:ba:e0:89:d8:27:
29:bc:d0:70:aa:95:14:db:8e:4b:54:ff:ac:90:7b:
93:40:89:c6:f3:0c:83:f6:44:c0:87:bf:16:5d:0c:
af:43:5c:e2:ae:d9:cf:50:5a:c7:03:44:1c:9c:c6:
ee:66:54:b9:69:3f:d2:a6:f7:38:3c:19:9f:1a:c4:
10:53:08:de:e9:f8:3d:98:67:63:f1:33:4e:cf:84:
4f:31:02:c9:22:b4:0a:aa:8d:04:3a:3b:f6:89:5c:
18:6f:6a:86:d9:16:23:42:f4:d6:34:71:b3:e3:35:
ae:92:e6:3a:33:6e:2d:77:4d:66:dc:34:2f:ed:30:
74:19:fe:03:08:7b:d1:02:90:ba:6e:23:13:93:ae:
68:02:18:5d:27:8a:08:84:34:fd:c2:19:0d:90:7a:
a1:2a:3f:5b:7d:70:54:99:5f:21:be:04:e7:cb:62:
b5:f0:8d:54:69:f2:6e:96:ae:dd:78:bb:f7:4a:08:
f6:9c:51:33:f8:f1:5f:e8:95:96:0d:ee:87:92:f5:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:45:7D:E9:E3:0B:AC:39:B1:08:4A:94:5D:C1:DD:2C:BA:F5:1B
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:a2:c4:71:a3:a7:ff:75:79:a3:3b:37:52:6b:b3:ce:c5:
e8:24:72:56:01:c2:0c:08:9d:cd:82:33:52:c2:d1:f5:8a:4b:
91:f6:dc:94:ca:5f:95:6b:d5:cb:09:d4:40:de:51:0d:6b:34:
ed:97:b6:7b:64:e2:bb:0e:e5:af:7d:db:02:af:c6:9e:50:8e:
d3:34:f8:e8:56:09:06:f2:3f:bb:fb:97:39:a5:4a:8d:a8:7b:
ae:78:8f:a3:7a:ac:7a:b3:a0:54:9b:9d:89:ae:94:98:d0:59:
fb:38:98:82:98:46:40:d6:22:c7:18:f2:d9:3c:10:c7:21:91:
be:04:c8:51:f5:4b:d7:7a:35:23:6f:71:65:83:ca:47:ac:0f:
d4:4c:b7:0a:d8:fb:a6:8e:74:7d:26:cb:4d:a5:ed:92:4b:dd:
9f:2f:1c:bf:7d:6e:0b:bf:d0:ec:94:20:b9:55:2a:6c:4f:78:
4d:25:fc:80:83:3c:74:77:7a:b3:b7:16:54:4c:aa:79:46:ed:
1f:10:b1:30:5b:28:45:29:f5:f4:b8:cc:20:b7:96:45:93:50:
f5:8c:37:46:49:c2:0b:7b:9d:ad:c5:33:82:93:6a:02:1a:f4:
b4:e0:f9:ce:1c:d3:9e:0c:2e:d4:f5:27:06:39:0e:f0:6e:c0:
5d:de:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:49 2025 by rpki-client