Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
File: pyiF7ybebTsiYKtj0sXKD4Y33wM.mft (raw, json)
Hash identifier: Ch+6UG6KDSFKFyxy0J2VlrTGRyw3bDqqRTXXwXnOpDo=
Subject key identifier: F7:26:BB:95:21:76:41:29:FA:F1:E2:99:B0:06:43:64:E0:CE:C5:5E
Authority key identifier: A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
Certificate issuer: /CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Certificate serial: 01976960AB160635EBBF1B02DDB26DD9200B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
Manifest number: 14A0
Signing time: Fri 13 Jun 2025 13:00:32 +0000
Manifest this update: Fri 13 Jun 2025 13:00:32 +0000
Manifest next update: Sat 14 Jun 2025 13:00:32 +0000
Files and hashes: 1: pyiF7ybebTsiYKtj0sXKD4Y33wM.crl (hash: gBWwki5lHS4FleVKaXjQeRIbKdxYt7CtAbNaYavi0F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:ab:16:06:35:eb:bf:1b:02:dd:b2:6d:d9:20:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Validity
Not Before: Jun 13 13:00:32 2025 GMT
Not After : Jun 14 13:00:32 2025 GMT
Subject: CN=f726bb9521764129faf1e299b0064364e0cec55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:79:fe:8e:dd:8f:6b:5e:36:7b:1f:bc:6f:
e0:ea:5d:16:cb:92:b9:17:c5:0b:49:f9:67:b9:51:
7a:af:6f:f2:51:3c:ca:ac:dd:49:09:9b:70:f2:af:
84:87:72:b6:b0:df:0b:46:96:0b:6a:3e:be:d3:8c:
4f:31:f9:05:2e:63:99:24:fe:d5:16:02:7c:72:96:
49:0a:61:d6:1f:89:f8:dd:05:ba:be:fe:fd:47:36:
33:43:fc:24:b2:c8:c4:f8:ad:16:e5:ed:0b:06:56:
eb:83:a0:37:7d:f8:54:d9:ec:28:6c:bf:c4:9f:79:
d8:e1:7e:9d:a5:b3:b4:87:58:5f:0d:17:82:83:fc:
1a:39:e8:81:f8:9f:cd:52:3f:6f:87:e6:73:7a:8b:
c2:19:9c:33:85:eb:c3:9a:05:73:4c:da:3f:f1:98:
62:c4:63:0a:7b:dd:c0:b1:64:8d:27:6f:cd:79:59:
37:1f:17:be:a8:85:73:9c:81:04:78:8e:f4:7f:a0:
3c:80:56:9b:1d:2e:3e:0d:6a:0e:6f:91:31:a7:a1:
9c:1e:b5:33:c5:2e:00:04:7c:e0:49:29:7c:26:83:
bf:db:55:dc:39:0a:e4:42:85:05:2c:72:ba:45:4a:
28:71:fa:eb:9a:56:67:31:72:4f:50:65:13:e9:b0:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:BB:95:21:76:41:29:FA:F1:E2:99:B0:06:43:64:E0:CE:C5:5E
X509v3 Authority Key Identifier:
keyid:A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:49:dc:c1:fc:44:ee:91:8e:a2:b7:db:0f:18:e4:53:b6:
2b:8c:f2:d0:38:b8:39:b7:ce:a7:0d:cb:ac:e9:08:58:0f:82:
a0:8f:9a:1b:dc:7d:1a:be:9f:7b:a5:8a:c9:ab:9b:1f:dd:14:
50:45:bd:11:27:1b:95:86:84:b7:4d:56:bc:28:2f:15:ec:5d:
d8:27:1e:1c:d1:6d:a5:33:d5:d7:69:8d:11:ad:24:4a:67:d1:
a4:c3:bf:66:6a:8e:66:89:7c:93:36:b9:ec:a2:ff:4f:c8:a0:
a7:f0:67:2f:2b:b0:fd:c2:1f:d1:2c:ea:17:d5:75:28:7d:5c:
87:7d:0f:92:79:b8:e7:43:86:fc:0b:af:76:64:61:0c:a2:8f:
4b:2a:e1:3d:3c:a4:ce:6f:c5:eb:8a:30:6e:2b:69:d6:00:4c:
b4:1e:cd:b8:b0:1d:67:8d:c6:29:c2:e5:0a:34:70:d5:38:58:
41:2a:de:47:7d:f0:5c:47:9f:ec:82:05:e7:70:4b:48:aa:6d:
7d:bf:d1:6f:3a:63:b7:80:51:4f:fa:09:1e:5b:f8:10:05:22:
15:0d:2b:9e:dc:3c:5d:6e:f4:a5:70:1a:6c:e9:71:9c:6a:a2:
05:94:6f:ae:55:c3:8b:62:d6:1e:99:f5:a0:86:90:c8:f6:86:
17:5c:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:02 2025 by rpki-client