Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
File: yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json)
Hash identifier: nPL6J0txV5VcNkujEFsWWb0Rnsi42gIMdcyfW8R4y8M=
Subject key identifier: AE:C1:D3:7A:C6:3F:6C:66:B6:DC:65:52:4E:DF:8B:56:43:34:46:ED
Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
Certificate issuer: /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Certificate serial: 01976E87457732D729CAA1BE9221265BB5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
Manifest number: 02AB
Signing time: Sat 14 Jun 2025 13:00:48 +0000
Manifest this update: Sat 14 Jun 2025 13:00:48 +0000
Manifest next update: Sun 15 Jun 2025 13:00:48 +0000
Files and hashes: 1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: i/atq5S4lwHQk5LsoAYJ7dZ13IDIEFVok5Lz8iHIZKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:45:77:32:d7:29:ca:a1:be:92:21:26:5b:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Validity
Not Before: Jun 14 13:00:48 2025 GMT
Not After : Jun 15 13:00:48 2025 GMT
Subject: CN=aec1d37ac63f6c66b6dc65524edf8b56433446ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:4f:b5:d5:18:80:b2:e3:39:40:eb:cd:5f:
9e:64:94:90:a9:fe:ba:da:4a:e3:da:a9:39:1b:86:
e1:bc:5a:bf:01:58:0d:3d:8e:6e:83:24:9f:2a:ce:
9f:f5:50:c1:81:6c:a2:92:dc:12:79:fe:92:bb:6c:
7a:ce:74:d8:15:bf:10:ef:8c:7b:44:9d:1b:5b:37:
e9:40:fc:8b:23:63:1c:ae:33:43:5d:9c:7d:72:aa:
cf:e6:53:0a:d4:63:d3:ec:2e:3a:04:f4:cc:51:15:
c6:d2:2d:2a:3e:22:cb:b3:b7:aa:0e:17:3e:43:6f:
e9:51:b9:79:6b:80:74:0e:9a:ff:4f:37:96:d5:c6:
5f:93:b2:0f:5f:ad:a0:99:ae:4b:ca:a1:61:33:c7:
eb:14:c8:e9:e6:5a:6f:57:41:0c:80:cb:6c:dd:e9:
dc:21:9c:70:53:f4:7d:d1:b1:45:61:60:5d:b6:88:
e1:4e:5e:2e:05:06:e3:46:8f:0c:f9:91:7f:ee:cc:
44:60:6e:79:ce:25:58:f6:8d:67:ab:8d:96:fe:a9:
b8:58:a2:07:49:a3:d6:7b:8b:23:96:1d:6b:81:c5:
13:ff:95:ef:ef:5c:c2:10:fe:d2:c1:52:72:dc:4b:
49:19:8a:89:6f:e2:4d:c8:e1:6a:a7:db:14:3a:b0:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C1:D3:7A:C6:3F:6C:66:B6:DC:65:52:4E:DF:8B:56:43:34:46:ED
X509v3 Authority Key Identifier:
keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:b8:cc:87:69:3b:10:76:d1:08:45:f1:1b:a9:d4:5c:f1:
08:43:e6:40:fc:7f:77:34:13:22:24:e7:81:c6:6e:9f:ca:c2:
5f:b7:8f:ba:29:58:36:02:cc:f9:91:72:fe:8e:32:4e:35:71:
27:c8:40:8c:e1:7b:f0:07:ca:2a:26:7a:f2:c4:03:56:6c:d6:
43:db:d2:f3:34:24:ac:ba:ca:28:38:f0:15:3f:1d:8e:8e:ed:
05:6d:6f:37:6e:81:7c:a2:d5:3b:41:7d:dc:28:ea:d9:b7:ce:
63:98:03:2c:47:43:2e:70:1a:86:2e:09:ee:22:55:03:23:f9:
05:53:ec:9f:d7:b2:f0:74:f1:a3:ba:f9:75:c9:67:09:0f:63:
c4:4b:fc:56:ac:a6:a7:ed:95:72:ec:61:79:01:0b:e4:20:ad:
54:1d:99:73:b1:1d:07:f8:63:97:72:8e:ae:98:45:64:d1:59:
a6:e6:9f:ce:b5:c9:eb:ee:2a:c9:e4:6d:d6:2f:71:d0:ae:1d:
a1:8a:dc:89:b5:74:19:c3:c9:4c:d1:89:0c:0d:22:7a:8b:14:
4a:6c:8c:7a:59:44:62:8a:4d:16:c5:eb:3e:d2:80:4b:de:7b:
19:86:3b:76:e3:fe:77:78:af:1a:49:5f:40:cf:83:b7:ea:21:
37:46:09:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:47 2025 by rpki-client