Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: O4qgKnloLYTF5WVYuZjN103dFIc0D5E0eCgd5BlR93g=
Subject key identifier: 24:98:D0:17:2E:B0:52:53:E0:01:0D:B7:9D:3D:BE:5A:62:A0:49:56
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 01976C988AD4A1FD9F85C81FCE5CE70E5432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0CFC
Signing time: Sat 14 Jun 2025 04:00:25 +0000
Manifest this update: Sat 14 Jun 2025 04:00:25 +0000
Manifest next update: Sun 15 Jun 2025 04:00:25 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: 3J4YoAvTSpUFrZoDTwunJ4X70NRfSoieb4IlrckpY3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8a:d4:a1:fd:9f:85:c8:1f:ce:5c:e7:0e:54:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Jun 14 04:00:25 2025 GMT
Not After : Jun 15 04:00:25 2025 GMT
Subject: CN=2498d0172eb05253e0010db79d3dbe5a62a04956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:68:f4:5b:56:7b:74:08:da:17:b4:37:e0:
bc:e9:f0:37:37:24:d9:cb:5e:d5:58:5e:b4:c8:24:
ba:d9:93:e3:c7:e5:03:a5:eb:3f:ce:12:b1:25:0c:
83:4c:ed:79:7d:1e:f9:12:a4:e2:7b:ea:66:6e:0c:
ee:1f:34:92:7b:d9:fa:65:3c:cc:01:30:12:7d:9f:
27:34:60:68:22:40:85:b2:c8:5a:43:b4:82:b3:11:
a6:f4:cf:37:d6:01:db:79:10:f1:2d:ba:df:eb:08:
af:0e:8b:af:7f:8f:c7:1c:a1:f4:1b:3e:77:37:1b:
b5:7f:9b:8f:6c:81:19:98:91:73:b4:92:a0:27:e3:
71:73:2a:a7:9c:cd:12:38:7f:de:f0:cb:72:e4:f0:
7b:b9:c8:81:94:b1:d3:34:c5:20:a9:a4:2d:ff:84:
92:f5:c3:8c:c6:6a:4b:3a:d2:fd:d7:07:13:64:80:
49:ed:26:ca:bc:d9:0d:92:4a:a4:08:6e:c4:34:04:
e1:82:5b:f3:e4:ee:56:a3:c6:71:57:83:a0:69:3c:
4f:80:06:38:fd:e2:da:33:4b:bb:d0:20:90:22:68:
ff:dd:e3:c7:c1:6f:56:f3:e0:69:c6:36:b1:69:ae:
50:c7:2f:2f:6f:ee:a7:16:e1:06:88:b0:93:b2:77:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:98:D0:17:2E:B0:52:53:E0:01:0D:B7:9D:3D:BE:5A:62:A0:49:56
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:87:bd:a1:ff:22:f1:70:63:b5:08:94:e4:85:63:42:e6:2c:
5a:db:08:94:04:79:3c:1b:75:f7:f7:ea:c0:cd:b7:c9:d2:d2:
97:e3:9f:ae:90:6e:17:3d:2e:e1:58:1a:45:83:4b:7c:90:23:
a9:0b:73:54:90:c4:4b:b7:04:5b:a5:b5:98:95:c4:5a:fd:23:
a6:9f:65:92:83:ce:12:e9:1e:45:c9:99:d4:db:e5:50:55:5d:
b6:a6:c7:43:1f:7f:23:d2:f7:38:5b:a3:de:9c:e3:f3:51:f5:
15:41:52:3d:2e:3f:ea:00:06:87:0c:0f:2f:c8:7d:00:47:e7:
0c:81:e6:81:79:7a:c8:76:8f:9a:18:06:4e:fd:a0:70:1a:20:
00:af:0b:a5:70:35:54:35:c2:7b:05:3d:0c:e8:11:fd:97:9d:
08:c1:4a:c0:f4:23:28:20:24:b4:33:c6:fc:28:f6:ed:bc:4d:
6b:69:38:c6:f9:40:4a:1e:a7:0a:ca:4a:65:26:4d:42:18:d8:
a3:00:04:b4:dc:7d:dd:18:9b:ce:02:56:f3:02:58:81:13:8c:
4b:c3:7a:5f:1f:8c:c7:59:6f:f8:bb:2a:21:82:a7:40:2c:97:
b2:4c:d9:01:47:f5:c0:d8:d4:fd:3b:f0:bd:2d:83:90:a3:93:
99:0b:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:39 2025 by rpki-client