Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: iQtRQUoDJIVaOx5oG309U6dtD5+nZDDHv8juuqCm93c=
Subject key identifier: 33:F9:1A:DB:69:C1:85:58:56:39:CD:13:90:BE:E1:2C:62:CB:77:E5
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 01976EF4FAC8F4EF1B189F9DE6D63AA1913E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 09C8
Signing time: Sat 14 Jun 2025 15:00:38 +0000
Manifest this update: Sat 14 Jun 2025 15:00:38 +0000
Manifest next update: Sun 15 Jun 2025 15:00:38 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: 1znLISj/xOJd95g0WMBU2KiFCiKhE2VWI2lSIwJn7Bc=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:fa:c8:f4:ef:1b:18:9f:9d:e6:d6:3a:a1:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jun 14 15:00:38 2025 GMT
Not After : Jun 15 15:00:38 2025 GMT
Subject: CN=33f91adb69c185585639cd1390bee12c62cb77e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:a6:9c:7c:c8:12:ee:01:8b:26:3e:3e:f6:
f7:2a:fe:e7:31:0e:65:69:9d:46:39:07:2f:6d:90:
d7:f6:df:bd:b0:bb:df:2b:cb:c6:85:0f:c3:2a:e7:
40:56:24:e5:a4:76:94:bf:cf:f3:24:33:57:83:c2:
2d:fc:d7:dc:14:8a:38:b3:f7:7e:7c:c4:2a:66:e0:
42:af:fb:ae:40:ca:41:c3:c2:97:3e:5d:58:64:4c:
43:a1:5c:bb:12:1a:8f:39:1d:83:2b:0b:0a:fc:8d:
23:39:a7:8f:1a:b0:96:b0:76:2b:92:34:c4:d5:90:
66:d0:5b:3b:37:5a:ff:00:9b:44:e5:a2:e6:b0:d5:
9c:06:4a:f9:9d:89:5b:0c:45:e9:1c:bd:b4:97:2a:
6a:fa:2d:73:58:10:92:5b:96:22:7e:72:17:8f:3d:
3c:ec:78:27:66:8c:69:21:52:e8:d0:b1:22:da:f1:
0c:5e:70:6c:e7:61:7f:65:2a:e7:de:8f:4d:01:c2:
3b:af:6f:66:e8:a2:12:28:d6:42:da:f9:e6:e7:ea:
5d:d3:a6:6c:da:84:c5:ec:02:36:d0:e8:a8:b9:29:
fb:c1:c0:04:a1:f5:48:6f:c9:c1:69:a0:63:38:89:
21:cd:7b:67:a3:46:4e:7f:f1:12:a3:81:f2:9e:d2:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:1A:DB:69:C1:85:58:56:39:CD:13:90:BE:E1:2C:62:CB:77:E5
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cd:88:b9:91:07:c5:dc:a1:a1:23:ab:12:c1:6f:c4:d1:21:
23:dd:ce:3c:9e:3c:e1:ab:c2:48:0b:ac:38:45:7e:c7:63:03:
17:f7:4f:d4:aa:28:09:15:0d:1d:d8:02:27:cc:9b:3d:84:28:
aa:45:bc:41:36:17:0f:35:c0:38:35:5b:7f:60:10:15:25:0f:
bd:9d:6d:55:50:15:85:a2:5c:39:05:6c:0e:7c:ca:5a:57:bc:
0f:6a:9d:5f:ce:77:64:8e:ba:18:7b:2f:36:7e:77:39:19:fb:
eb:a0:4a:19:4e:4e:3e:1f:45:91:94:73:03:74:26:43:68:bb:
f2:52:84:b4:76:51:8e:dc:4f:06:7b:e8:38:6a:d4:7c:f2:bc:
b8:69:97:9c:94:c9:0e:bc:7b:54:89:e1:6b:07:97:e4:72:2f:
dc:2f:a5:62:14:a5:20:27:c0:b8:3d:2b:c6:19:ad:e5:29:5a:
fc:be:07:ee:e4:64:82:e4:35:2b:60:37:9f:54:20:4f:4d:54:
53:7e:21:a3:ff:7a:ae:5f:e5:1f:f0:5d:55:7f:39:64:2a:e2:
58:34:9c:ae:28:da:06:ee:d0:39:4b:eb:92:40:d4:6b:a0:fa:
72:cc:24:86:21:f3:87:94:9b:25:96:fa:8b:6f:1a:c1:42:a6:
f8:d8:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:22 2025 by rpki-client