Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: 8qpJdeo84Mnrxzx+atlC1pjZYco2IxjlO0wUpqL6ctk=
Subject key identifier: 3D:E8:EA:49:61:CC:14:9C:E3:EB:2E:83:99:7F:6B:45:08:D0:49:4D
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 01976CCF8E0225F581EF7A1CF2EB5174FD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 01BA
Signing time: Sat 14 Jun 2025 05:00:30 +0000
Manifest this update: Sat 14 Jun 2025 05:00:30 +0000
Manifest next update: Sun 15 Jun 2025 05:00:30 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: zRUfAQ+jQjpx30aQL4EUAdfQ4m3SaqxlRU2siWmZHGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:8e:02:25:f5:81:ef:7a:1c:f2:eb:51:74:fd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Jun 14 05:00:30 2025 GMT
Not After : Jun 15 05:00:30 2025 GMT
Subject: CN=3de8ea4961cc149ce3eb2e83997f6b4508d0494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:0a:3b:51:1a:75:e8:3a:da:a1:59:d6:a1:
12:92:7d:19:ae:37:13:a2:36:5e:20:76:c8:8d:4c:
3f:02:47:6f:72:a9:ef:4c:36:75:19:ea:df:c2:67:
2d:93:53:03:e5:41:53:56:f0:ee:2e:46:d7:7b:ca:
38:bd:64:92:75:e1:c0:4f:79:75:f7:d9:7a:ef:9f:
2d:e3:cc:cc:56:c2:98:79:ee:44:1a:7d:07:3b:1e:
8b:d6:9c:d4:68:d4:f4:26:7d:76:05:51:00:c9:39:
78:a4:92:67:16:a3:07:51:61:64:04:7b:91:aa:42:
5b:d3:52:20:43:e5:d4:42:2a:bf:58:28:54:c1:16:
7c:76:55:d7:33:94:c9:17:45:fe:d2:49:4a:53:9f:
b3:e8:5b:d2:0b:3d:67:b6:3a:79:c9:c7:cf:e7:a2:
8f:f2:bf:f8:54:09:3a:2a:e7:7e:17:87:f3:bb:9b:
03:7e:44:32:f5:2d:a8:66:98:45:05:0d:0b:37:8d:
1e:0d:53:1f:b5:2f:d7:48:2d:ce:65:f5:71:46:e7:
f7:06:9f:b4:85:71:cb:b7:2b:11:2f:c3:e1:48:6a:
d3:40:43:91:18:1d:58:c8:fa:04:7d:ec:f2:81:e9:
ab:73:dd:4d:70:45:e4:cb:a9:39:de:d4:ab:b1:45:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:EA:49:61:CC:14:9C:E3:EB:2E:83:99:7F:6B:45:08:D0:49:4D
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:b4:11:37:2d:79:48:65:90:38:28:03:6c:85:46:64:02:
7b:33:6c:a9:73:27:db:18:fa:65:14:8e:19:84:c8:df:e6:0b:
d2:a3:cd:e2:44:53:34:4e:56:e1:72:87:73:12:f3:95:2d:3b:
94:18:43:c2:8c:72:4a:b7:1e:5d:e5:48:dd:77:73:71:c1:37:
55:e8:b4:11:3c:76:7e:09:82:c1:52:68:b6:ea:fd:bd:9e:24:
e6:3c:c2:e4:06:3d:8f:a9:65:4c:51:61:30:5a:3f:d9:61:f6:
01:fa:2f:a5:9b:96:e1:32:6b:ad:0f:e1:e3:ee:34:86:53:18:
23:ae:5d:c8:ad:05:90:c7:db:e3:fc:b1:f3:19:f2:49:74:d5:
f3:26:89:90:f8:e6:09:9d:9e:95:31:aa:0f:e8:a3:b5:99:ef:
76:aa:2f:9d:37:d4:fa:56:fd:dd:4a:59:89:0d:ea:3b:3e:99:
eb:7a:2a:83:ed:92:be:e9:fc:f7:7e:86:50:c3:78:90:f3:0a:
f9:b5:85:47:f0:ca:05:bb:0c:50:54:09:81:4e:c8:e6:98:39:
d0:4e:c5:17:e4:15:b6:a7:e9:e2:c5:c0:51:8e:96:5c:5c:b3:
e6:7a:02:98:7d:8c:56:dd:00:65:14:dd:bc:f7:87:52:46:b2:
fa:7a:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:33 2025 by rpki-client