Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: XLzg3ziV88ltgRHWT1EzUyZglP3FB4WvGPLVRa9z3RA=
Subject key identifier: 37:F6:8F:B5:D1:DB:77:D8:8B:97:26:34:4A:61:0A:C6:EC:9B:BF:EB
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 019772641D9BBB2B9E0F17BF4FBAE02D2C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 0F89
Signing time: Sun 15 Jun 2025 07:00:53 +0000
Manifest this update: Sun 15 Jun 2025 07:00:53 +0000
Manifest next update: Mon 16 Jun 2025 07:00:53 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: iwz7dMis+2lbkv4+36N2C4Jcw29a1HcuzuY7cqGxt/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:1d:9b:bb:2b:9e:0f:17:bf:4f:ba:e0:2d:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Jun 15 07:00:53 2025 GMT
Not After : Jun 16 07:00:53 2025 GMT
Subject: CN=37f68fb5d1db77d88b9726344a610ac6ec9bbfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:a4:5a:c9:e9:04:3a:d7:67:08:1f:76:b2:
d3:ec:fe:9e:2b:1d:5f:a2:5f:a3:2b:2e:96:bb:94:
4b:d3:1c:c0:fe:49:bc:3e:cb:75:de:bb:54:5e:f2:
cf:04:ba:9d:42:96:5c:70:0c:00:37:08:b2:92:61:
fe:72:8e:c8:31:cf:6d:3a:f5:86:71:d8:06:e8:41:
47:4f:b8:d0:82:8c:b5:d2:d8:f5:ce:8b:34:0e:39:
06:ca:f1:d6:24:ba:73:d2:f8:0f:a0:4d:d2:24:82:
5e:77:51:51:69:a9:7d:a1:9d:33:9b:ec:98:06:10:
b6:72:4f:f6:74:e3:c3:04:11:22:8f:05:bc:ad:61:
13:ac:f3:f3:4d:ca:3d:a9:e7:ee:c7:36:d3:dd:cf:
2a:3c:2f:b4:1d:6e:58:66:2e:95:79:c6:3d:6e:88:
a2:cd:78:a2:8c:e1:db:43:de:22:8a:29:8d:73:49:
00:41:82:55:e7:f4:71:2f:3d:69:b6:44:87:16:12:
e2:06:4b:a5:d9:ee:a7:a4:94:5e:29:15:aa:3a:97:
71:96:e5:9b:86:a7:7c:35:88:71:ca:48:1a:6e:c2:
14:81:7c:bd:bb:f1:bb:d7:e6:f1:82:a1:da:51:a5:
a1:93:18:33:60:d5:91:1b:92:cb:3b:8b:a6:7e:f9:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F6:8F:B5:D1:DB:77:D8:8B:97:26:34:4A:61:0A:C6:EC:9B:BF:EB
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8b:81:53:4f:a6:06:99:15:84:b6:8c:0c:a1:15:44:3b:09:
7d:fe:8a:9c:5d:ac:4c:5e:54:ee:87:9c:40:6e:b7:ee:6e:c7:
bb:6d:b0:41:b5:96:dd:ed:58:13:49:23:22:07:98:00:e5:88:
b4:9c:14:10:84:8a:2a:e4:9c:a8:07:e0:9e:5d:e1:d2:22:9a:
e4:7f:5a:82:fd:a0:29:27:fc:3c:47:ab:a3:fa:29:f9:60:69:
5a:87:d4:c7:39:71:69:01:5b:71:86:b0:60:be:3f:03:04:25:
34:59:a3:98:97:e9:bf:22:fa:d3:00:77:f9:7c:fb:60:ec:ef:
86:b1:4f:e4:06:93:61:64:ef:8d:a7:b4:13:e0:bc:4a:57:09:
6b:21:1c:32:f4:c1:9d:4d:1c:b4:d7:ea:fe:34:71:1a:ff:bb:
6a:20:a7:a1:6b:0f:8d:79:63:75:a5:39:e1:67:2c:54:a7:dc:
30:fc:81:d6:7a:a8:7a:4b:4e:30:43:90:86:62:d5:5f:06:4b:
4c:17:7c:4c:0a:e4:de:e1:8f:47:18:fb:75:ff:4f:b7:28:e4:
5c:e9:21:98:48:41:7d:e4:ee:17:72:9d:b9:bc:b5:cd:19:f1:
b1:a5:81:b0:93:ba:dc:1f:68:88:57:f7:07:99:47:de:c0:fc:
2e:df:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:46:05 2025 by rpki-client