Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: 9OB2s7yn9GkK3NZey3DdfIaAnxdLvykbkbp6x1b4lE8=
Subject key identifier: 73:DC:07:F1:4E:2F:86:D8:CF:61:10:32:75:45:CF:7F:40:4A:6A:9C
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 0197493161972369E06E65629E5EED30FC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 120E
Signing time: Sat 07 Jun 2025 07:01:02 +0000
Manifest this update: Sat 07 Jun 2025 07:01:02 +0000
Manifest next update: Sun 08 Jun 2025 07:01:02 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: CmrpPMb6I8/vXoKcDLAy2Jel71gfTOXx43EyoWO6S5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:61:97:23:69:e0:6e:65:62:9e:5e:ed:30:fc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Jun 7 07:01:02 2025 GMT
Not After : Jun 8 07:01:02 2025 GMT
Subject: CN=73dc07f14e2f86d8cf6110327545cf7f404a6a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:ff:98:cf:99:0d:de:3b:fb:fd:81:2d:52:
c8:42:45:bb:67:fd:71:01:dc:87:c7:45:2b:2c:0a:
88:f7:43:76:8e:ba:76:02:64:8c:95:d5:35:38:49:
5c:7f:fa:50:90:72:ce:3c:86:a1:9f:67:17:64:82:
13:7d:6e:f2:90:46:38:08:b5:78:16:4b:b4:d1:2f:
c7:9b:73:c3:90:b2:b6:1a:93:f5:97:93:a3:ef:10:
4a:af:9b:ce:4a:55:60:9a:07:b3:d4:85:e1:6d:de:
91:7b:62:27:e9:3c:68:5a:73:40:7f:93:20:3d:6c:
96:a2:eb:40:50:ec:3c:e2:dc:da:8b:30:33:b4:0b:
3b:3e:a7:ae:fe:fa:90:b9:40:d4:f0:11:b3:23:49:
67:5f:bb:a8:6e:6c:45:df:29:a6:de:8a:cc:ab:5c:
9e:26:86:15:1d:de:c8:43:87:e7:54:4f:1b:a9:05:
f8:6f:9c:c5:0c:30:ca:5a:f5:46:af:7f:aa:67:71:
55:44:0c:2b:ba:e0:47:0e:7a:c8:36:94:65:78:43:
09:d0:b4:96:03:aa:08:82:aa:e7:af:60:d3:7c:98:
cf:6e:e7:b2:2f:20:2e:21:33:72:31:6a:b7:66:71:
11:eb:2f:7d:ee:c8:bf:c8:4a:f7:9e:82:ba:97:19:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:07:F1:4E:2F:86:D8:CF:61:10:32:75:45:CF:7F:40:4A:6A:9C
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:73:df:bb:f8:18:b1:31:d3:4b:28:10:e0:e4:1e:2a:b7:06:
58:b9:cd:75:1c:38:36:97:14:1e:d9:00:f1:72:6d:a4:23:81:
34:7d:ae:af:9a:8f:20:98:dc:16:49:69:a7:63:2d:31:88:93:
5e:6b:ec:81:72:33:fc:50:8b:af:cc:f7:7d:03:6c:61:4d:25:
54:ba:e5:df:d0:4c:c2:83:af:30:d0:91:a6:4d:27:e7:35:ef:
9b:25:60:b7:03:bd:8c:9c:f8:7b:db:d2:e1:a3:e9:b1:17:5d:
d6:22:c2:84:ea:d5:b0:c6:c4:9c:c4:60:ba:df:54:12:28:d3:
1c:90:2c:5d:66:dc:1b:c1:4b:d6:52:4b:e3:90:24:64:2d:90:
09:ec:77:25:f8:9e:37:33:a9:23:0e:7e:b3:f5:4b:fc:e4:0f:
fd:39:8e:cf:86:0c:63:1a:35:b4:ca:5f:30:1b:65:3b:f9:06:
f0:af:84:cb:bf:69:5e:e2:be:fe:0d:d0:57:2e:35:b6:9e:d7:
db:1b:24:c3:51:8b:de:a4:e6:77:bf:2b:3f:4c:1f:01:10:99:
de:f9:ca:71:e7:fb:25:e4:75:ce:3e:51:bb:9c:4a:d6:1f:25:
82:f9:72:45:c7:5a:76:fa:1a:68:80:f7:51:7b:c7:59:2c:93:
ba:35:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:13 2025 by rpki-client