Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
File: yyDpqru2GRVGEQI1z3bEg4S0UdA.mft (raw, json)
Hash identifier: qxZ8LftzMiTH4nPW3Yw/CIubvOVfazyOWAXu5tSAHPA=
Subject key identifier: 04:2B:3A:90:3D:CE:C3:39:2E:5C:A4:F9:FE:7E:C7:82:23:2D:6F:9B
Authority key identifier: CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
Certificate issuer: /CN=cb20e9aabbb6191546110235cf76c48384b451d0
Certificate serial: 01976929860CFA1117242E9E311F0CE900CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
Manifest number: 04DA
Signing time: Fri 13 Jun 2025 12:00:18 +0000
Manifest this update: Fri 13 Jun 2025 12:00:18 +0000
Manifest next update: Sat 14 Jun 2025 12:00:18 +0000
Files and hashes: 1: yyDpqru2GRVGEQI1z3bEg4S0UdA.crl (hash: Jko0qi4HNXZjOMmSVIkfA1kaMjQPeLY4+NHzBu+Wot4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:86:0c:fa:11:17:24:2e:9e:31:1f:0c:e9:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20e9aabbb6191546110235cf76c48384b451d0
Validity
Not Before: Jun 13 12:00:18 2025 GMT
Not After : Jun 14 12:00:18 2025 GMT
Subject: CN=042b3a903dcec3392e5ca4f9fe7ec782232d6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:5c:25:d2:8f:4f:1b:10:2a:34:33:21:2c:
84:41:66:91:d2:4d:73:b7:4e:d0:30:90:ad:01:60:
af:4d:7a:b3:7b:86:63:c1:65:6a:d2:03:e1:36:2b:
3e:c6:d7:b3:ec:c5:e2:c9:cc:c1:18:03:95:73:a6:
c7:32:42:1d:ee:b7:69:89:6d:3a:62:ce:ab:ec:54:
c1:f8:4b:b5:8a:8c:2b:31:b5:01:e6:98:35:8c:73:
0b:ef:1d:db:92:cd:ca:84:d2:17:4d:bf:da:29:1e:
58:f7:de:cf:e4:60:35:f4:54:d3:d6:d5:bf:6d:60:
82:34:50:f1:60:b2:2d:3d:f6:0f:a9:c6:02:1f:62:
f4:6f:d0:6c:ac:32:eb:22:8e:d5:e7:c7:9c:20:fc:
80:7d:f7:66:a2:b8:64:70:ba:73:62:73:97:d5:b9:
0a:e5:ad:f9:07:8d:3f:15:d6:3c:23:04:21:2e:e8:
b1:37:84:8f:56:cb:a7:1c:51:0d:8b:f9:67:18:9f:
e2:c8:e4:8c:99:9a:80:6e:df:cb:9e:a9:0f:6b:8e:
58:b0:a6:f0:88:b0:8f:a2:51:c5:d6:29:d9:2c:61:
15:85:de:1a:9e:19:1c:b0:4c:94:20:13:d9:ae:81:
f2:f8:79:ce:4f:b0:4e:1b:ea:1f:e9:a9:5c:7c:a9:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:3A:90:3D:CE:C3:39:2E:5C:A4:F9:FE:7E:C7:82:23:2D:6F:9B
X509v3 Authority Key Identifier:
keyid:CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:97:21:38:a2:55:57:74:de:d1:73:8f:8c:98:f7:cb:0b:66:
f8:0f:28:96:1d:bf:2b:84:53:13:e5:2a:8e:c4:2e:30:d7:f4:
cc:0c:b5:bb:18:a0:6d:80:11:24:f5:13:c8:1e:ed:c1:7e:18:
2d:70:22:9a:f9:c4:42:1d:0c:12:ef:e5:b0:75:72:0b:6d:55:
81:22:2e:9e:78:18:b9:2d:92:c0:43:04:89:f7:ca:2e:dd:df:
09:7b:9e:7b:c9:e1:76:2a:45:4a:34:af:a2:58:89:8a:8c:51:
d2:16:a3:ff:ef:12:d3:25:d2:78:df:21:48:1b:c7:52:5f:19:
11:a5:d6:ec:cc:6e:87:c9:ea:84:d6:d6:a1:f0:37:17:6b:e0:
e2:6d:48:1c:f4:30:b3:5c:9d:b9:73:ee:3b:91:94:f7:4d:83:
9d:7f:cc:ec:56:27:6b:aa:47:ef:2d:bc:11:7e:60:f4:6e:10:
ca:cd:bd:5e:e7:94:1c:8d:ef:e7:65:3f:51:4a:13:08:03:f9:
62:cc:6d:bf:b9:39:d4:7d:76:eb:cd:97:5c:09:bd:51:89:fc:
cb:cc:e1:4a:2c:eb:1c:de:15:fe:dc:57:28:cc:13:a8:75:72:
c6:75:fb:c7:7c:82:24:be:9f:57:dd:35:02:74:90:f4:11:7e:
c4:7c:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:55 2025 by rpki-client