Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: JOKKuL8RibzA2MfTl/7D6WsdGs2MFkP+EGhOTSDv8L4=
Subject key identifier: A8:86:67:3F:6D:F2:78:98:B6:C2:3A:2F:01:5A:AB:82:F0:D7:FE:E7
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 0197711A2364199137A10B4344FB50A4CE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:00:27 +0000
Manifest this update: Sun 15 Jun 2025 01:00:27 +0000
Manifest next update: Mon 16 Jun 2025 01:00:27 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: VdpSGrDUk8GoVtNh4d0n8WLSAMc5gJuFw8J9F3eg8Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:23:64:19:91:37:a1:0b:43:44:fb:50:a4:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Jun 15 01:00:27 2025 GMT
Not After : Jun 16 01:00:27 2025 GMT
Subject: CN=a886673f6df27898b6c23a2f015aab82f0d7fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:90:4b:bd:ee:62:58:c3:b7:04:a2:85:4e:
51:80:31:c7:4e:f3:7e:a3:91:31:be:e6:d0:8e:be:
17:97:71:f8:d5:cc:15:b4:8b:53:ef:cd:36:9b:1a:
7a:e6:83:b2:8f:e4:bc:46:66:52:e7:9b:50:f2:ce:
1c:34:31:fd:77:56:7a:93:fb:b1:e3:33:32:30:74:
8e:79:a4:83:01:12:db:91:b2:96:fd:2a:21:e7:c2:
f7:87:60:d4:dd:8d:2d:8e:80:55:d7:b4:a2:99:9b:
c8:d8:32:45:73:d9:2d:e2:f1:c0:a2:10:57:75:1e:
d2:c5:65:ff:6e:e3:b1:47:3d:d8:7d:59:62:62:b6:
71:9c:be:69:56:63:9a:b7:ae:5f:ca:47:84:1b:77:
07:49:e1:f1:99:e4:2d:ae:a7:17:f8:bf:4c:24:c7:
0b:8e:f6:91:97:13:18:b2:94:97:6b:27:e6:2b:4d:
80:3d:48:bb:06:30:7f:c8:b9:cc:31:e4:ba:12:b4:
4b:e5:ae:2b:23:aa:d1:1e:20:1f:8a:2d:c4:a2:57:
e7:97:b3:f2:84:16:5a:ee:e6:e8:dd:95:b7:8a:4d:
5b:a9:69:6a:f8:11:2f:12:ae:57:d1:da:fd:42:77:
1e:a7:2b:71:95:27:ca:d4:d5:3f:8e:9c:9d:d6:3a:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:67:3F:6D:F2:78:98:B6:C2:3A:2F:01:5A:AB:82:F0:D7:FE:E7
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:e2:cb:21:2a:df:18:d8:2c:b0:a4:07:28:a0:80:e5:18:
e3:40:d3:f9:96:95:aa:eb:42:58:b3:2c:7f:24:68:1c:4d:a1:
e4:5b:1c:9a:81:ed:df:7e:58:20:8e:c9:90:dd:76:8e:0f:49:
29:ba:22:21:6b:67:e4:4d:26:b3:cc:c2:95:b8:09:4c:e8:9f:
38:22:95:ab:1d:e6:49:7d:c9:81:38:02:0b:14:97:16:71:0d:
ae:3d:26:34:7a:96:24:43:91:58:2e:67:b5:65:22:6a:c0:a1:
24:bd:db:da:9d:0d:89:8e:3b:fd:63:a0:ca:02:82:c5:3e:c9:
df:8e:72:5c:94:3f:58:96:02:eb:ab:29:b9:58:ad:ce:0a:72:
d6:ac:44:3d:04:6c:82:48:6a:96:22:c0:13:20:bb:de:f7:56:
aa:4d:a2:7b:5d:1e:c7:1d:fc:08:89:b4:1e:82:3b:fc:bc:e5:
54:b0:5f:bd:17:5e:da:1f:9a:a0:46:cb:3c:b9:d0:bd:86:7b:
bd:35:b4:22:bc:2f:d0:2c:e5:3b:af:5e:91:02:8d:a7:ae:4f:
24:ae:1a:d3:2b:da:49:0d:b6:e8:ef:9e:14:5b:ef:99:5b:00:
cf:4d:37:a7:b3:05:3c:07:11:ac:71:50:bf:41:7f:84:cd:02:
42:91:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:13:46 2025 by rpki-client