Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: qzYLqO3hbcrpTQ5k1kh1lNzWq7QaO0Q4UboC3akV+Nw=
Subject key identifier: 5B:75:93:D0:D6:05:1D:5F:77:7E:E9:BE:85:4B:6A:12:19:19:DE:0C
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 01974C68F51773C01B4583D3F43F562574D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 1030
Signing time: Sat 07 Jun 2025 22:00:36 +0000
Manifest this update: Sat 07 Jun 2025 22:00:36 +0000
Manifest next update: Sun 08 Jun 2025 22:00:36 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: 5J99A3nsPal8GYN1/ykG0gmq2o8PDnfxdmSiZ4q1F8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:f5:17:73:c0:1b:45:83:d3:f4:3f:56:25:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Jun 7 22:00:36 2025 GMT
Not After : Jun 8 22:00:36 2025 GMT
Subject: CN=5b7593d0d6051d5f777ee9be854b6a121919de0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:01:73:92:7d:80:73:cf:31:cd:63:6e:d6:
44:09:a9:2e:a1:ae:e9:22:30:6b:b6:e1:cf:f5:43:
4b:a9:4f:c3:47:82:26:b0:fe:4a:db:be:dd:0c:36:
d7:7f:cc:d1:3c:bf:7e:63:82:ef:7e:ff:a7:4f:0a:
f6:7e:32:ce:b0:f1:77:f7:45:26:97:79:06:1b:1f:
69:e4:38:05:64:a5:13:be:37:5d:68:68:60:ec:5d:
b7:02:9b:b5:6b:84:4b:15:8f:3e:2d:ad:e0:62:ec:
6c:b1:b2:7e:48:f7:2d:80:c1:b7:f5:bf:b6:16:bb:
45:7a:ff:cc:e4:8b:a3:70:4f:4b:cd:c5:a6:9a:53:
01:4c:15:f8:bb:07:b2:82:e1:94:17:67:44:ac:95:
bb:e7:db:a3:22:d2:ec:75:51:b0:9f:4e:c3:c8:c9:
1b:a6:45:21:f8:68:84:64:94:ea:a0:0b:bc:63:ae:
dc:e6:a0:ca:bd:01:d0:d8:8c:30:e9:35:ae:0a:31:
6d:a0:13:c3:56:09:16:33:df:1c:f7:a0:d2:14:78:
a7:17:f6:1d:e2:5d:cc:4a:aa:18:20:03:24:76:8e:
7c:dd:2b:1d:d2:7f:5b:53:6b:6e:cf:27:6a:28:14:
b8:12:88:e2:8e:5f:b4:45:20:c5:90:2e:43:47:5a:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:93:D0:D6:05:1D:5F:77:7E:E9:BE:85:4B:6A:12:19:19:DE:0C
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:5f:39:b0:c9:69:b0:a8:77:79:fb:3a:9c:34:d3:9f:88:
89:9e:f4:d9:9a:d7:24:82:5a:ee:fd:a5:13:20:8c:94:8d:d1:
df:03:cd:ff:a1:ce:38:5f:63:18:75:15:9a:85:80:a3:ed:5a:
86:2f:3b:0d:3a:46:db:af:ce:82:f3:fe:df:46:0c:9e:bb:5e:
5c:aa:1f:fa:da:c8:ae:0d:bf:dd:23:61:e3:8f:15:69:36:4f:
bb:59:66:e6:c5:d1:97:e0:24:1b:13:24:7a:88:6f:c7:f9:b2:
4e:12:f1:5b:50:35:b9:49:30:41:1d:94:8f:1d:e7:bf:01:ee:
2d:d3:5f:f6:7e:fb:62:2b:76:ac:e9:99:2f:42:f9:46:f5:ba:
8e:ad:b8:80:c0:0f:94:47:ea:8b:59:8e:93:af:a5:3e:e9:9b:
08:ba:6e:e1:d5:d5:7a:da:db:1c:b9:e7:51:55:3d:0a:a0:84:
54:2b:53:a0:05:b1:e5:b0:da:55:01:13:95:64:65:44:0d:66:
f1:6f:ed:ff:be:2e:47:5b:dc:5c:7a:f7:87:54:8a:3f:ec:a2:
ed:70:6f:66:16:7e:63:47:41:e8:9a:c2:10:cb:e8:de:44:d7:
92:c4:46:ff:d0:bf:34:2b:e4:ef:d6:0d:69:64:06:d5:e5:56:
76:dd:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:19 2025 by rpki-client