Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
File: yFiMcrJRDxd7g18gHjNl7PnkWh0.mft (raw, json)
Hash identifier: kg2nLbgizyEk69bvlCV3ZbDODyRoujGUI5ITdAe0eyQ=
Subject key identifier: D8:23:37:03:4A:35:99:92:C1:14:78:CD:86:28:BD:2F:55:E0:2A:D3
Authority key identifier: C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
Certificate issuer: /CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Certificate serial: 01976A05C6D54E383D71C928962CD7B1D5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
Manifest number: 0F3E
Signing time: Fri 13 Jun 2025 16:00:52 +0000
Manifest this update: Fri 13 Jun 2025 16:00:52 +0000
Manifest next update: Sat 14 Jun 2025 16:00:52 +0000
Files and hashes: 1: yFiMcrJRDxd7g18gHjNl7PnkWh0.crl (hash: 0DLYJgWfd2iU3uVz/8163H9cxvfv90wzSdiwN82jHaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:c6:d5:4e:38:3d:71:c9:28:96:2c:d7:b1:d5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Validity
Not Before: Jun 13 16:00:52 2025 GMT
Not After : Jun 14 16:00:52 2025 GMT
Subject: CN=d82337034a359992c11478cd8628bd2f55e02ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:76:2f:38:c6:f4:50:8c:e4:d3:ea:db:3c:
5f:5c:ab:db:45:a5:e8:3a:89:3b:ae:8e:2a:f2:f6:
49:1b:b0:7b:62:a4:95:e7:a1:9e:95:b7:d6:98:21:
ff:73:03:e8:f0:c1:97:06:86:e0:73:96:bf:53:b5:
e6:e0:59:da:3f:41:8c:16:49:7a:ce:fa:2d:86:7a:
c1:d0:cf:d9:48:1e:b7:58:2f:a5:ca:f2:fe:a1:bc:
95:ee:e8:5b:76:87:76:ea:d5:13:97:4a:80:4e:cf:
ba:a2:6b:7a:4e:0f:c8:87:e7:bd:ba:8c:11:b3:c7:
33:73:82:f8:8d:87:db:6b:28:02:7f:3c:7c:16:5e:
76:cf:66:15:57:af:fe:3c:4a:e4:fe:62:e9:24:02:
c5:e1:92:e3:a0:59:c4:7b:2d:1a:2b:4e:cd:69:5e:
79:b2:5e:98:10:51:8d:6b:8f:d6:6e:83:9e:9b:80:
d7:ec:b2:c2:da:89:75:c8:49:29:e8:b6:16:1c:d9:
db:26:76:8f:17:94:84:b4:61:ef:57:ef:fb:1b:40:
65:29:b9:ab:ef:6b:5f:86:1c:b8:63:e3:92:72:ce:
9c:8d:ee:d9:9a:26:c9:4a:81:38:36:49:a1:69:73:
e9:24:36:75:8f:8f:ca:59:7e:e8:eb:94:64:bd:dd:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:37:03:4A:35:99:92:C1:14:78:CD:86:28:BD:2F:55:E0:2A:D3
X509v3 Authority Key Identifier:
keyid:C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:b8:ec:72:52:dc:3c:6d:57:b4:f0:d4:38:9f:a1:f1:ca:
59:03:45:83:5b:f8:29:9f:b0:80:a9:b2:7d:3c:d8:ae:92:72:
2c:2e:6f:46:b4:11:1e:9d:57:99:1c:cc:b2:57:f0:04:04:a1:
96:7c:5a:a6:d8:25:43:4d:93:d2:5f:75:e6:00:a4:1a:48:11:
66:9c:0c:2c:ce:ac:20:12:7a:ca:1a:74:f3:a2:8a:d0:bc:bb:
55:22:bc:69:6c:f9:00:05:41:c7:ea:70:7e:05:bd:8e:c9:dc:
04:d0:fd:4e:9a:9b:76:42:f4:5f:b0:52:2a:70:bc:f3:d0:5d:
46:2b:ad:c0:2b:df:f5:df:ad:d8:dd:67:69:33:3b:a4:ad:34:
4c:e7:d1:78:b2:db:43:04:81:ba:5f:80:0d:ac:01:1c:4f:bd:
e6:c8:a1:d3:c0:9b:b3:c5:f1:92:5f:e0:da:8f:3f:0c:87:24:
75:fe:53:39:60:96:a5:c6:81:8a:c1:46:e1:f9:49:8e:e2:f9:
de:dd:f3:ba:53:89:02:f9:c4:a1:82:6c:a7:bd:73:36:96:b9:
49:a3:86:ef:9a:44:1b:54:23:bc:17:76:87:1b:2b:dd:bc:cc:
a7:0c:24:0b:1d:03:7c:28:83:e0:64:87:f6:45:b9:30:02:33:
ce:28:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:36 2025 by rpki-client