Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: Srd4NQlO5Mrw+y/vN9nIVsXFS1PS+RCy1OuScn2Smc8=
Subject key identifier: 92:DB:60:04:3E:1A:0F:C4:79:80:C5:FA:11:57:05:AA:A8:C3:13:26
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 01976F2CB43F28FFDAB88DF7C9D91B183117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:01:30 +0000
Manifest this update: Sat 14 Jun 2025 16:01:30 +0000
Manifest next update: Sun 15 Jun 2025 16:01:30 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: u8wuJTxXGiLjPtjXBvnvOXDxtRZaVVZmhsWFa82Oq5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:b4:3f:28:ff:da:b8:8d:f7:c9:d9:1b:18:31:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: Jun 14 16:01:30 2025 GMT
Not After : Jun 15 16:01:30 2025 GMT
Subject: CN=92db60043e1a0fc47980c5fa115705aaa8c31326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:81:7b:08:12:e2:92:b8:db:9c:43:b5:a4:6d:
be:63:0b:0e:ae:50:fb:75:35:ae:90:58:2a:77:74:
ef:3f:0b:2b:fa:8d:99:bb:ab:43:4d:40:fc:95:5a:
74:80:dc:97:99:29:33:0e:0d:61:09:8a:01:ff:05:
8f:36:8c:02:33:8f:ca:d6:15:61:b7:33:1e:84:af:
d6:43:f7:99:4e:dd:78:b1:c3:95:1f:67:e5:c8:b4:
75:49:3e:0a:c1:ec:59:f0:77:73:ce:8f:1b:92:ee:
88:08:52:f0:9b:0a:6d:a4:f9:13:32:c1:20:36:af:
0c:36:1e:8b:d8:1f:b3:4e:df:58:46:d8:9e:eb:13:
c9:26:fb:14:07:a5:fb:85:b2:69:51:a6:63:b9:67:
a0:3d:ea:f8:4d:0a:86:3c:8c:32:18:7d:48:e6:44:
ac:e7:ee:53:17:0f:a7:9c:af:6b:60:10:ad:eb:0e:
32:c3:b8:24:81:39:2b:50:60:a5:de:dc:8b:c9:3b:
50:e4:a2:15:b1:be:94:f3:35:c0:3a:19:0f:b6:23:
a7:7d:01:4e:0d:49:c9:e1:cc:dc:0a:fa:7e:cf:b1:
6c:a4:9e:10:dd:ef:e2:ca:ab:f6:5a:c4:72:fa:0c:
fa:7e:8f:18:23:2d:40:e9:cc:1f:0f:8a:ce:40:66:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DB:60:04:3E:1A:0F:C4:79:80:C5:FA:11:57:05:AA:A8:C3:13:26
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e8:05:aa:2a:81:31:7d:4f:6f:a2:06:c5:8a:08:57:f5:36:
a6:e9:de:68:49:34:1d:3e:51:9a:6e:8c:37:d2:a1:dc:91:ea:
60:ff:71:7f:95:95:59:cf:61:f9:5a:29:8f:4e:d4:d6:76:d7:
70:eb:27:04:db:2d:86:9f:29:ab:c9:b0:b6:c8:7a:0d:bb:8a:
1c:ef:8a:1c:81:81:c1:62:4c:b2:b9:6b:b7:9f:40:ca:27:20:
7a:b6:3a:82:3f:99:66:3c:8a:89:02:b7:4d:09:20:1c:8c:ad:
e8:d3:7b:7d:a9:0e:f2:d7:8d:76:90:49:35:02:3e:a0:90:d9:
0f:9c:61:7d:e9:c4:a1:75:ae:8b:8a:ac:3c:59:fc:1c:67:74:
8b:3d:3e:e6:8a:21:e0:65:e8:65:ab:03:3b:c8:5c:1c:84:3d:
3a:b1:c8:b8:bb:8c:25:0f:ee:3b:da:9a:2e:ff:85:7d:ad:36:
0d:55:6d:66:f4:1d:40:3d:7f:6c:24:ba:fc:72:a3:b1:56:c2:
46:b7:87:a0:54:ce:b7:35:34:a9:54:96:52:b5:a9:b1:23:2a:
1f:80:6e:3e:3a:ce:95:cd:0b:da:7b:ed:38:a9:fe:ed:c0:22:
a1:30:eb:ee:3a:21:39:d1:10:c2:44:75:1b:a9:47:ee:4a:9d:
37:38:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:00:23 2025 by rpki-client