Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: HzPdHHrFsXosK81eQtiu6AyWS75W09eTwWk93zNAahM=
Subject key identifier: 48:E8:0D:82:0A:60:ED:C0:96:D1:0E:48:59:DD:F2:F0:86:25:E6:8A
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 019777C12BC98688AF88D583B99AB5C90723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0C66
Signing time: Mon 16 Jun 2025 08:00:37 +0000
Manifest this update: Mon 16 Jun 2025 08:00:37 +0000
Manifest next update: Tue 17 Jun 2025 08:00:37 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: 5BfnW6TGocG+t9i93dE1WLoiEj7YvwcHq/gU3SKr4YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:2b:c9:86:88:af:88:d5:83:b9:9a:b5:c9:07:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Jun 16 08:00:37 2025 GMT
Not After : Jun 17 08:00:37 2025 GMT
Subject: CN=48e80d820a60edc096d10e4859ddf2f08625e68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:df:77:60:2a:28:77:ac:ef:26:5f:a1:4e:
69:68:11:f8:85:b9:9a:33:84:74:32:f5:22:20:bf:
68:2e:fc:09:0e:ac:2b:05:b3:73:d3:c5:f0:e5:9e:
0b:1f:23:33:01:35:cb:60:64:c7:2c:44:a7:ba:c6:
fe:08:55:7d:a1:31:0d:c3:4d:a1:b9:1c:62:20:9c:
3d:f2:02:18:86:e9:6c:c8:94:51:0b:96:07:df:2c:
61:16:38:be:60:5f:5a:ef:a4:1d:d4:96:ad:c4:25:
a0:d5:dd:20:91:b0:1e:2a:51:bb:62:45:ec:ea:61:
ef:88:c1:7b:82:e6:16:64:fa:20:c8:06:60:2f:21:
6b:07:47:7d:73:a4:7e:9c:4c:f7:52:29:6f:4f:62:
b6:c3:1d:ca:bb:e4:ff:ba:3c:9b:2a:bf:e2:81:27:
6a:10:00:b7:ec:57:ed:9d:aa:c9:fc:7b:93:ca:67:
a0:a0:77:7a:f1:59:47:48:80:c1:6e:19:f7:ea:04:
75:fb:ec:e8:d9:8e:bc:2d:83:74:10:46:3f:b4:63:
71:3a:01:fb:ee:81:f7:0b:bd:96:0e:20:3d:5f:54:
7e:7e:29:73:ff:65:4d:2b:db:4d:35:a8:5f:31:e0:
3e:a3:89:9d:0d:9b:90:cd:e1:8e:ee:e4:95:46:01:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:0D:82:0A:60:ED:C0:96:D1:0E:48:59:DD:F2:F0:86:25:E6:8A
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:c7:94:ac:4f:c7:ad:d9:21:80:9a:c8:49:5e:df:01:80:
1e:1a:c5:32:65:ed:57:8f:0c:4a:a7:ba:e7:29:48:55:57:35:
60:26:fa:1b:f4:0e:f6:76:bf:36:5f:a6:ec:67:9c:67:1f:e7:
cd:8a:a8:be:d0:e7:48:6f:77:1b:10:06:82:dd:5e:43:74:1a:
d1:91:94:67:1a:e6:36:b8:7f:f3:48:f9:9f:07:82:34:26:a7:
5c:5f:83:42:a1:5e:27:bf:a0:65:d5:70:94:8e:8a:d7:a1:68:
e4:c2:1f:a2:4e:fd:4a:49:86:ab:b2:0d:7c:51:92:21:c7:ed:
25:78:be:b9:c8:b4:ac:99:bb:48:60:84:44:4f:38:bc:2f:df:
06:7e:70:da:73:4a:f0:a8:0a:94:42:03:16:22:b2:b9:a8:49:
7e:50:03:bd:1f:30:fb:c5:22:ca:f4:4e:cf:17:a9:8b:32:75:
15:44:74:63:58:91:fa:fb:9f:53:4c:41:2c:e6:c2:43:e5:30:
51:b4:e8:60:3f:f1:37:53:83:9a:6a:8f:62:d5:f0:77:3f:b3:
49:e2:dc:08:0a:b1:c6:d0:90:4f:57:49:44:00:d3:e3:5b:cf:
6f:9c:4d:38:18:cc:f7:29:05:9b:68:cc:21:49:d1:83:a5:87:
a9:e6:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:13:47 2025 by rpki-client