
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: sYUx3De5YjUufaySNoMigh/+l0kihj+K8HDbEK/yEbs=
Subject key identifier: 35:69:D8:97:EB:D6:B2:7E:57:27:2A:B9:09:6F:8C:5A:31:33:90:93
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 01976C2AB7657DC9EA0246F1B71B8A968792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 0687
Signing time: Sat 14 Jun 2025 02:00:28 +0000
Manifest this update: Sat 14 Jun 2025 02:00:28 +0000
Manifest next update: Sun 15 Jun 2025 02:00:28 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: bUj4NnoPR1gDJGBWkKu0obX7F+QBLW1ACe5NB/Y323U=)
2: sJgvME5bJ6yVOF59D9xKTp2vpfs.roa (hash: RFFMtoYHpJBnhJPcD6pM/r00V/xv6R7sQSuEQXzi4Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b7:65:7d:c9:ea:02:46:f1:b7:1b:8a:96:87:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Jun 14 02:00:28 2025 GMT
Not After : Jun 15 02:00:28 2025 GMT
Subject: CN=3569d897ebd6b27e57272ab9096f8c5a31339093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:58:0d:f6:7f:bd:d4:f3:01:ff:ea:49:07:
ac:22:62:c9:b5:c3:b1:cc:81:6a:46:d4:d2:a0:b7:
16:8a:98:b7:50:8c:83:68:e0:25:f3:6a:d0:dd:7e:
46:08:4f:e2:e5:0d:4f:66:80:b2:c4:78:91:6a:de:
15:3e:fe:05:2e:3b:e9:c0:67:64:84:da:45:2b:54:
2e:64:d2:4d:f9:ef:90:1e:6e:06:65:5f:c8:aa:dd:
5f:bf:3e:37:10:80:a5:f8:3e:f8:a0:99:05:f2:f8:
d2:02:0f:3c:dc:01:95:93:a5:88:36:95:0b:46:71:
47:37:e6:f0:2d:ef:f3:bf:7e:99:a3:0b:9b:d5:61:
c8:60:3f:f5:a5:73:2c:5a:2b:94:b8:04:21:25:32:
5f:e7:25:97:57:9e:03:22:e7:b3:d7:e5:36:8e:55:
53:2e:8f:d2:59:de:1a:f0:89:b9:3b:9f:3e:00:01:
d8:16:79:ef:08:62:9c:15:cb:cc:a7:4c:a5:f5:89:
95:44:d9:94:a9:31:f7:a8:3b:f6:15:a3:6b:61:af:
20:87:47:ed:2f:67:8b:14:2d:95:d6:66:e3:ab:8e:
96:c7:0d:57:5e:0c:e4:4e:23:7a:c4:9a:dd:dc:e2:
06:58:ac:d4:a0:49:f3:f3:a6:92:fb:5d:be:96:95:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:69:D8:97:EB:D6:B2:7E:57:27:2A:B9:09:6F:8C:5A:31:33:90:93
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f5:2d:be:fd:1f:2c:0f:54:4c:04:54:25:54:6a:86:8f:0e:
b3:9f:ad:c6:34:76:68:e5:13:c0:cd:17:d9:39:f7:94:ed:dc:
1e:09:1c:43:2a:46:65:56:b9:8a:2c:57:9f:13:a9:d1:76:da:
ab:54:19:81:4e:bf:1f:d4:0c:cb:04:92:02:2e:82:fa:d6:0b:
73:40:d9:0b:bb:96:7a:3f:00:b1:fb:19:58:3e:97:48:a8:5c:
77:fe:6b:1b:77:a7:a6:7b:a1:15:f6:7e:f8:9c:33:4b:9f:72:
13:11:07:1d:a3:35:37:19:b9:e3:80:54:a3:ad:71:d3:08:2f:
2f:c9:e0:6c:14:1d:29:f1:b1:e5:29:c2:8f:54:c5:9d:33:60:
4c:00:a9:db:21:d1:4e:0e:a3:09:34:e1:96:1a:50:8a:ee:db:
f2:6e:3c:a1:f5:38:04:42:f3:21:dc:06:4b:6f:19:ff:d7:c8:
b4:51:af:bd:d3:9a:bc:a5:c9:e6:dc:56:89:d3:6a:bc:ae:52:
e0:4d:ad:38:ad:d6:80:6a:00:c6:0c:a5:04:ff:42:24:2f:3c:
50:86:03:30:d1:38:c5:85:b8:ec:58:39:81:7f:d6:c1:72:83:
74:e4:75:fe:b9:7b:d3:fc:b3:d0:bb:27:8f:b0:b7:6f:a6:02:
0f:0d:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:52 2025 by rpki-client