Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: 0nhuanzf1iuW1PeYkVPXT13pHfhwa1CjMapUhfqjKKo=
Subject key identifier: 52:35:52:ED:7B:DF:23:33:33:37:D3:31:F5:D4:F3:E5:A9:8D:51:2A
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 0197469E97B57224ECDBF8B035BE25776192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 150B
Signing time: Fri 06 Jun 2025 19:01:27 +0000
Manifest this update: Fri 06 Jun 2025 19:01:27 +0000
Manifest next update: Sat 07 Jun 2025 19:01:27 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: V+xs28dmC8ELeTo/Bid04/FEHzw4QFIgZsA5OgePetM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:97:b5:72:24:ec:db:f8:b0:35:be:25:77:61:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Jun 6 19:01:27 2025 GMT
Not After : Jun 7 19:01:27 2025 GMT
Subject: CN=523552ed7bdf23333337d331f5d4f3e5a98d512a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:18:60:1d:3d:dd:07:6a:c4:e7:ce:78:21:
88:ca:40:a3:3d:27:e5:69:c0:c6:90:cd:ca:96:c3:
d0:6d:bd:aa:21:4e:84:94:ee:a1:59:68:f5:36:af:
65:b3:4b:41:50:5d:a3:a6:5b:45:b0:7d:9b:74:b8:
78:8d:f4:ef:42:f6:6c:e2:96:66:f0:d6:fa:c1:7a:
00:05:01:9d:6e:3e:ff:33:0b:6a:1c:3e:0f:25:9e:
af:28:22:26:01:8e:61:a9:88:e1:1c:83:1c:2c:3e:
fa:cb:cb:8a:c4:6a:fb:90:0b:ad:e9:0b:95:af:af:
e9:24:b5:f2:a7:15:22:e3:28:cf:74:48:7f:73:e0:
79:9c:b8:f6:b7:73:0b:90:5e:61:c9:9d:f7:b0:89:
4b:43:61:fc:76:d0:43:6f:a8:e4:82:64:d2:da:0d:
90:e4:db:0b:3b:95:23:2c:30:82:4e:36:c6:51:d9:
e9:70:ef:08:f5:e8:48:03:50:c6:c3:d4:18:3a:f7:
9a:7a:1d:97:6b:a8:63:25:43:c9:f9:ad:a5:f2:0b:
2d:d5:45:0e:70:86:cd:d2:4f:6b:54:d7:5c:54:ba:
e9:ea:81:44:c0:2f:a4:6a:9b:c6:dc:9d:a4:05:59:
f5:29:52:7d:1a:82:c2:f1:00:cb:33:2a:b6:30:20:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:35:52:ED:7B:DF:23:33:33:37:D3:31:F5:D4:F3:E5:A9:8D:51:2A
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:64:37:f7:49:b8:a9:e9:63:77:76:48:f4:de:c9:99:d8:ee:
92:25:d9:16:83:ab:8d:33:ef:e3:21:55:3d:1b:6b:e9:3d:6a:
ba:df:66:37:26:d3:5a:40:79:ce:f1:48:ab:53:fc:4c:a5:25:
29:81:7a:8b:8b:25:98:eb:14:6a:bd:6c:12:8e:b2:0a:60:73:
17:be:d3:f6:5a:d6:9c:37:cc:9b:65:39:35:62:02:04:5e:7d:
e3:52:30:03:6a:48:5d:3f:d3:c2:cb:8c:02:aa:d1:d2:c4:5b:
69:96:9c:03:3c:79:cb:d7:c9:01:c8:73:7f:e2:0f:7a:55:9f:
79:3a:4e:1b:21:f2:d2:46:c7:3b:37:31:20:58:5a:39:51:c0:
31:2a:ff:d3:8e:f3:3b:a3:27:54:14:86:2c:1b:c2:a9:51:00:
98:79:89:ba:05:2b:77:cd:e1:eb:ad:3e:d1:9a:87:a8:01:07:
47:fc:61:3c:e0:6c:64:70:c7:8d:55:5c:37:84:32:2e:17:ae:
69:2c:97:13:5e:54:b7:1b:14:fc:96:28:69:d7:97:1a:a3:98:
32:ee:66:a0:ce:c6:75:94:0e:5f:53:71:54:e7:7d:50:9f:9d:
bb:e4:f2:94:54:50:04:96:c0:b5:f2:44:5d:8d:d6:f8:4d:f9:
0d:cf:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:59 2025 by rpki-client