Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File: yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier: WMEVc8m9FOMkzSY8M3ItXQncx9HWd8g4bMKQ+AwHRW0=
Subject key identifier: F8:C6:FB:9A:98:7D:98:AB:0B:DE:19:22:B4:26:E2:3F:85:67:16:3F
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer: /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial: 01976F9A2B6B9C956DB3A930645F8D6EE285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 18:01:03 +0000
Manifest this update: Sat 14 Jun 2025 18:01:03 +0000
Manifest next update: Sun 15 Jun 2025 18:01:03 +0000
Files and hashes: 1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: UewlanIxzd+j+PRbyAAXlrfA89gCAbQQsWHN7XnIXO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:2b:6b:9c:95:6d:b3:a9:30:64:5f:8d:6e:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
Validity
Not Before: Jun 14 18:01:03 2025 GMT
Not After : Jun 15 18:01:03 2025 GMT
Subject: CN=f8c6fb9a987d98ab0bde1922b426e23f8567163f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:9d:dd:fd:77:b5:e4:d5:28:a4:ce:0f:d0:
a1:44:49:01:cb:49:77:a5:e6:5f:ce:cd:bb:ec:48:
ae:2c:ff:3e:98:3e:03:01:82:2b:49:4c:fd:9c:f6:
47:d6:16:1b:cd:0d:01:56:77:24:2e:e5:26:12:1e:
d5:fc:c8:62:ef:23:92:5e:8d:cc:1c:69:67:ef:b0:
68:e1:83:5a:11:9d:af:98:b1:c5:2d:76:2f:58:91:
30:ae:13:89:04:c4:16:23:56:b3:2d:94:b6:4c:e5:
9b:4c:8e:2e:79:7e:23:1f:31:ce:0f:37:9b:e8:54:
b1:99:75:c8:9d:e3:ca:30:6f:63:71:0f:ea:be:88:
f4:3e:b3:fe:2e:e6:61:c5:9d:2d:d9:ff:e8:7b:a4:
4c:78:59:b3:fb:da:b9:9f:c7:c2:88:11:5b:a4:16:
e6:f4:09:96:0e:78:23:fc:c4:33:b2:82:e0:ec:38:
dd:e6:92:7a:2c:b8:e2:bc:43:3b:07:6d:cc:53:e0:
4b:ac:9b:45:30:39:0e:1a:cc:07:14:df:ee:34:34:
35:ef:32:4a:a1:cf:7a:c3:e3:27:c9:3d:ff:25:b0:
13:3e:69:5d:ea:da:20:2b:27:9d:e2:07:bf:55:6d:
05:a8:cd:d5:1f:81:02:80:4f:85:86:78:98:16:f0:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:FB:9A:98:7D:98:AB:0B:DE:19:22:B4:26:E2:3F:85:67:16:3F
X509v3 Authority Key Identifier:
keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6d:5e:7f:a6:1f:1a:40:b8:4e:8c:c1:9e:0b:14:26:21:de:
f6:a8:fd:12:18:44:89:15:28:ec:4c:c6:59:25:9c:ec:a6:31:
17:d4:12:54:8d:7f:fb:f9:79:cf:3e:d8:e0:33:dc:f9:8d:3b:
49:38:3e:8c:bc:87:3a:47:23:24:51:f8:eb:c6:39:91:5a:37:
bf:db:f7:f7:cb:4a:9c:6d:74:f7:78:f3:4d:a1:1c:35:de:96:
f1:30:06:ff:1b:71:8d:1e:e3:ea:b8:37:4a:71:08:19:d2:5e:
aa:68:dc:1f:98:ac:18:6a:e7:62:e0:dd:26:a1:80:a7:b1:95:
e3:d0:19:20:73:c7:e9:e1:c4:6b:f4:83:40:57:05:82:72:3a:
46:d3:02:55:ba:15:8a:5d:79:8f:a3:17:2e:32:54:4b:59:f5:
5f:17:d0:39:58:1a:0f:ca:e7:29:a2:a3:b9:bf:d6:cd:eb:8e:
e8:72:2b:15:42:81:bc:69:7e:e2:59:c9:92:73:e6:38:c5:cb:
02:4d:fd:7d:59:f7:56:0b:dc:61:d2:4e:c5:09:dd:bb:27:32:
a1:cd:42:3e:ee:c8:b5:33:1c:4a:37:51:69:aa:78:a9:85:81:
ca:4c:5e:4c:83:0e:e0:a8:af:73:c8:c0:82:6d:5e:0f:10:13:
8d:9e:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:40 2025 by rpki-client