Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: hkK1F5cXd2AGoCr5wifvpDzG3Z9GiT9qkUy+KKtrlcQ=
Subject key identifier: 5F:14:67:6E:34:01:19:E4:04:08:7B:B5:47:CC:82:3D:8A:B2:FA:74
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 019786608EF24DC39226AA0F71DAF3EF09AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 08A3
Signing time: Thu 19 Jun 2025 04:09:24 +0000
Manifest this update: Thu 19 Jun 2025 04:09:24 +0000
Manifest next update: Fri 20 Jun 2025 04:09:24 +0000
Files and hashes: 1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: sDr7vXklQIxIOYfN9SiMNkIpSbvdhbgFegKmtN31Sqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:60:8e:f2:4d:c3:92:26:aa:0f:71:da:f3:ef:09:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Jun 19 04:09:24 2025 GMT
Not After : Jun 20 04:09:24 2025 GMT
Subject: CN=5f14676e340119e404087bb547cc823d8ab2fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:91:aa:16:33:fa:b7:e1:c8:03:31:a0:c5:
6e:7e:e6:b3:81:6d:09:05:ce:14:da:97:d9:ce:d1:
89:4a:5b:69:60:04:a9:bf:b1:88:78:dc:77:55:47:
36:63:2f:c8:ea:5e:7e:59:3b:c2:f9:b4:63:58:3f:
ed:bf:ae:46:c8:61:cb:aa:27:24:c7:0c:c7:91:1d:
7e:4f:04:8f:d1:e7:40:c6:a4:71:7c:1d:c5:0f:df:
bd:b1:4e:2d:52:6d:51:73:04:48:bf:54:10:3f:fe:
d7:3e:32:c5:6e:cc:0a:d6:8a:c9:65:59:e4:6c:0e:
24:f4:a8:85:86:5a:5b:9a:c0:01:05:01:d4:4d:aa:
35:46:82:4b:95:b1:c8:f4:0e:fa:ff:6b:48:ba:8d:
b6:34:04:04:d5:80:dc:2f:12:c9:15:90:00:a8:47:
eb:5c:b5:d7:0d:e4:fe:04:b7:b0:45:f7:32:f3:1f:
c3:9d:73:fb:ad:d0:bd:b5:fa:47:a5:46:fe:f0:bb:
05:41:32:3f:06:41:6e:76:3f:18:9b:e2:6f:20:7b:
a9:8b:19:aa:61:9e:2e:49:81:f0:20:4b:02:5a:09:
2b:6d:f1:bf:f4:ae:93:fb:e1:0d:a5:b0:33:e3:3c:
3d:fb:e0:43:41:29:8f:41:0f:5e:af:70:28:bb:e8:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:67:6E:34:01:19:E4:04:08:7B:B5:47:CC:82:3D:8A:B2:FA:74
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:aa:a0:6c:7a:e5:e2:df:89:a5:fd:a0:89:ee:fa:fd:98:
ca:f0:69:ff:3a:45:9c:e2:be:b9:b4:33:8f:03:a5:c6:2c:72:
33:a0:96:c7:a6:90:4e:46:bb:da:4f:2c:cb:99:62:4b:c5:f1:
48:f3:39:8b:18:e5:50:48:bb:ca:26:89:f0:5f:d6:40:d1:8a:
e6:d4:4f:80:a7:99:b2:12:7d:43:c4:7d:49:92:bd:d0:bd:67:
ac:ce:04:77:0e:19:db:ee:6d:fc:41:3c:8e:4d:d9:cc:7e:27:
b3:12:f5:b4:5b:c1:d6:94:ba:3d:73:ac:c9:7c:a7:2c:fe:c8:
e2:2d:bc:7c:8f:e1:f3:e9:f2:bb:85:39:8b:36:aa:cd:5c:cd:
4c:12:34:75:17:8a:26:07:ae:fa:a3:12:78:fc:13:aa:13:4a:
49:9a:b4:a5:bc:e0:b6:c0:af:0d:85:0d:44:45:a1:a1:5d:72:
b8:64:0d:00:52:4f:07:6b:48:f0:6c:b6:c0:a0:07:e6:5f:08:
7b:ed:4e:b3:89:83:8c:1a:c2:8b:2b:1d:a9:8f:e5:da:1e:93:
bd:fe:f5:68:b4:11:2c:4d:e3:d3:2c:c1:94:56:50:18:12:db:
60:3b:47:b0:c1:d7:73:56:f1:f1:48:c1:73:ef:8a:52:47:f2:
fd:ee:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:21:10 2025 by rpki-client