Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: Y2UY4fftmqZK2Ir57gc6xGD08AebEmxB7KVlJ8g8+e0=
Subject key identifier: 92:D7:93:6D:11:28:AE:94:8A:FD:0E:E0:6A:BE:D2:4E:A9:D7:E1:C1
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 019771BF251D28FEF466A0AAE69FFE3A3958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 0F10
Signing time: Sun 15 Jun 2025 04:00:41 +0000
Manifest this update: Sun 15 Jun 2025 04:00:41 +0000
Manifest next update: Mon 16 Jun 2025 04:00:41 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: W8d85felovkCVMMdsRuQz9SHvsveyNS4ikHLDYkk2SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:25:1d:28:fe:f4:66:a0:aa:e6:9f:fe:3a:39:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Jun 15 04:00:41 2025 GMT
Not After : Jun 16 04:00:41 2025 GMT
Subject: CN=92d7936d1128ae948afd0ee06abed24ea9d7e1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:30:1b:a1:b6:39:9f:51:88:03:71:ee:55:
93:ed:07:94:fc:c4:5f:5b:ab:40:14:89:05:d1:cd:
d0:98:76:3e:14:56:31:91:cf:57:9b:0c:7e:3a:63:
11:97:73:52:e6:e9:4a:98:ff:93:a3:72:53:36:0d:
2a:51:0e:af:65:63:73:47:0b:c9:3b:6f:9c:4e:a1:
d8:76:02:a6:22:36:05:4c:ac:ff:6b:f0:2a:23:30:
6a:d9:a6:83:04:ab:88:f7:9a:42:f0:29:49:37:af:
3a:fb:99:57:9b:05:80:fb:9f:34:76:70:33:13:02:
d6:9a:b8:f0:3b:42:2e:84:bc:5d:cd:f1:26:1b:4e:
72:09:92:e3:37:e1:89:45:bf:c4:29:72:a9:30:9e:
17:6a:67:64:1b:ac:e1:f5:13:eb:5c:d7:67:d5:00:
90:9f:e2:d3:0a:cb:04:db:02:be:23:e5:81:ad:6c:
2b:65:4f:70:61:61:95:bd:a2:a2:d5:39:62:51:60:
98:a2:b9:44:97:4c:aa:80:13:86:e8:c4:f6:82:d6:
0a:fd:a9:f8:6f:4f:e7:77:76:93:61:4c:99:9d:fb:
19:72:6b:b5:25:ad:15:fc:f5:34:3b:02:ec:a8:67:
05:9e:df:f1:b8:da:0e:a7:45:17:83:aa:a8:36:d2:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:93:6D:11:28:AE:94:8A:FD:0E:E0:6A:BE:D2:4E:A9:D7:E1:C1
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a9:a6:a0:9c:c5:e4:10:6b:ec:0f:69:cb:53:e7:98:dd:52:
33:a6:04:9a:62:b6:11:42:b8:3c:d6:00:55:2e:f5:41:e4:4b:
c1:3b:d3:f8:55:41:23:b6:36:56:2a:ad:35:0a:b2:51:a5:e9:
af:5f:78:5f:30:41:8e:83:4c:46:6e:2e:5b:b2:60:a6:ab:8d:
46:bd:17:25:08:92:09:40:8b:df:e5:55:0a:90:de:8f:ac:f8:
02:bc:c5:08:36:9f:4f:2b:72:eb:ed:58:e6:09:a1:fe:d4:41:
fa:75:77:7e:01:cd:38:40:bd:dd:19:76:17:8b:e5:eb:1a:c5:
20:d0:2b:78:d3:72:5c:11:c4:db:9a:77:ff:e5:85:23:07:5e:
9d:9d:e0:f0:e9:c0:ff:27:48:a1:5f:01:a6:51:8d:e3:ef:68:
37:76:ee:56:9c:06:13:b1:2e:55:8b:b1:5d:93:18:0d:fd:07:
3f:b2:0b:dd:62:9e:fc:11:53:c0:43:cc:c3:8d:15:b6:c5:6c:
b7:bc:dc:44:eb:ea:a1:cf:6b:fd:ca:cf:3c:28:36:48:47:4f:
d1:6b:8c:39:c4:b4:e7:14:25:58:e0:53:55:49:90:64:71:2d:
4f:f5:5c:39:9d:dc:63:87:f7:a2:ed:c2:a2:e3:c1:bf:d2:1d:
63:7a:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:17 2025 by rpki-client