Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
File: ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json)
Hash identifier: jWra0M1qiuZPPNG+iChmI1B9+wDzgUJ66CQfniWCAaY=
Subject key identifier: 6D:4B:BB:3A:BF:E2:92:8B:38:F1:B0:16:66:BF:F1:10:79:17:E7:81
Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
Certificate issuer: /CN=c92a961c87ac90518ea752f185bb65128aba2866
Certificate serial: 01976D3E55DC4B5E0939DC114296A18B12DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
Manifest number: 0233
Signing time: Sat 14 Jun 2025 07:01:30 +0000
Manifest this update: Sat 14 Jun 2025 07:01:30 +0000
Manifest next update: Sun 15 Jun 2025 07:01:30 +0000
Files and hashes: 1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: fQmF9PMpN+M5ISjwWdCqrtYtVLoDW6LIWOTlPWMVYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:55:dc:4b:5e:09:39:dc:11:42:96:a1:8b:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866
Validity
Not Before: Jun 14 07:01:30 2025 GMT
Not After : Jun 15 07:01:30 2025 GMT
Subject: CN=6d4bbb3abfe2928b38f1b01666bff1107917e781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:22:e4:88:7f:3f:e0:dc:44:5e:c5:cf:ee:
22:e1:42:2f:6a:a3:32:7e:89:81:78:60:89:5a:e0:
2f:e2:d8:b1:52:04:02:99:e3:ee:4d:de:59:aa:34:
23:16:ed:7a:a6:f6:d9:d6:9e:8f:a8:59:47:8f:7d:
b8:d1:4c:ec:d8:7c:40:5e:ed:8b:89:0f:81:88:60:
bc:3e:4c:67:8d:ec:df:34:25:0e:96:16:08:3d:d2:
e3:fc:2f:22:4e:5f:5c:c9:75:35:96:19:b3:e8:05:
f2:0d:a3:82:8d:af:c0:ab:6e:dc:af:0a:7d:22:7e:
16:39:10:03:e0:58:49:c7:50:31:cd:b0:15:c1:5e:
26:55:62:e4:46:cc:71:02:17:4c:26:04:50:de:87:
7c:46:a5:b1:36:25:9c:04:8a:62:5a:6e:cb:cb:58:
7c:df:20:e7:1d:f5:fe:68:38:05:2d:71:ac:c5:d9:
56:7b:b9:45:46:32:bc:bb:bf:b2:18:51:c8:8a:09:
28:41:ce:e0:6d:a2:38:32:3b:64:52:ed:6a:ae:fa:
a9:cd:40:81:88:89:53:41:a7:13:96:d0:bc:89:42:
f4:0b:45:e5:6d:e1:f4:a8:fa:ce:d6:9e:20:0e:12:
c1:7b:15:61:97:b2:a0:81:86:c5:74:fa:12:cc:fb:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4B:BB:3A:BF:E2:92:8B:38:F1:B0:16:66:BF:F1:10:79:17:E7:81
X509v3 Authority Key Identifier:
keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a4:c7:76:79:43:81:5b:dd:94:1a:4d:db:ec:08:93:80:07:
b3:9d:91:c8:36:c6:ac:0a:47:bc:b5:dd:20:48:8d:9f:7c:4b:
92:86:fb:17:72:44:bf:3b:94:c8:42:4d:9e:0f:fe:af:cb:8f:
ee:61:1a:a9:b8:de:be:c0:d3:e3:e2:ad:63:d7:82:89:8e:68:
d1:31:e0:68:c5:90:62:cc:61:01:99:c6:38:13:01:7c:5f:f7:
7b:10:a4:af:b7:c5:39:d2:01:19:a3:f0:cf:32:72:d1:a2:ca:
3c:cd:a7:b7:28:94:57:47:dc:9b:f7:40:f2:84:54:17:a0:6a:
2b:f3:d7:a8:69:57:46:72:7b:e4:e8:eb:20:86:8b:a8:c3:09:
7a:90:d1:b8:56:79:b6:85:9d:3f:51:55:90:c4:53:ed:ca:18:
5a:6a:18:06:30:54:7b:ff:83:e3:f0:4d:d8:c9:5b:c8:5e:0d:
89:51:45:6d:e1:45:d8:89:76:e5:5a:dc:02:33:b7:67:38:a2:
cf:fe:b2:52:c3:d7:67:35:77:8f:a2:0b:2c:31:a8:3d:e5:96:
a5:52:a3:5d:22:2e:8a:23:4e:a8:7a:12:20:d9:0c:43:83:d9:
8e:68:e1:ff:14:a3:fe:9b:81:dd:d8:78:80:fa:c4:16:0c:e0:
af:4a:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:47 2025 by rpki-client