Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: pLRHKn3OButHNjVKKjnnq3rKwWU1lC7pdQyvbC6s950=
Subject key identifier: BB:25:C3:E2:12:BE:6D:9E:B6:31:D4:71:86:43:A5:64:80:DE:42:E8
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 0197866125EF50DD2C829D54FD2D8401E356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 03FE
Signing time: Thu 19 Jun 2025 04:10:02 +0000
Manifest this update: Thu 19 Jun 2025 04:10:02 +0000
Manifest next update: Fri 20 Jun 2025 04:10:02 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: bnkZVIAu1GJMZQGbewBSLj+GroYGPkBrwlZ0XRnc+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:25:ef:50:dd:2c:82:9d:54:fd:2d:84:01:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Jun 19 04:10:02 2025 GMT
Not After : Jun 20 04:10:02 2025 GMT
Subject: CN=bb25c3e212be6d9eb631d4718643a56480de42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:a7:75:f6:77:cf:84:73:c7:61:23:3d:7e:
80:e3:59:92:e2:2e:5b:55:35:2f:18:4c:8f:ca:d9:
fe:9f:8e:9a:e0:63:c0:b2:b6:b5:4c:5c:30:e7:03:
53:85:b3:7b:6d:d0:05:6f:a0:46:e8:6c:94:7a:f4:
fa:ed:10:cd:09:49:ad:28:d9:3d:ba:ab:91:a2:f7:
8f:4e:db:c6:8b:13:a2:fe:cd:6b:d9:61:3f:11:9f:
80:4b:87:d0:fb:f7:c8:98:a2:b5:95:5f:af:24:79:
2f:ad:bb:23:a5:3e:c3:7b:b9:04:f0:e8:2a:9c:0b:
68:0b:1c:e5:e7:39:91:e5:1b:e3:fb:65:e7:00:6e:
53:0e:01:41:41:f9:97:81:9c:1f:38:57:13:3f:10:
ce:39:d4:71:71:0b:dd:30:09:6c:20:f4:5f:c4:62:
d8:70:67:51:cb:ab:28:a9:23:dc:65:b1:b7:67:41:
01:4d:60:d3:c4:82:05:e1:51:bd:ad:95:13:f7:ec:
68:a6:2d:f0:a9:75:d8:fc:7d:5b:69:b1:14:4b:05:
f3:be:7a:d8:ce:78:70:03:d9:a5:77:50:ac:02:33:
4f:9e:ef:68:01:e7:41:d2:6d:b2:0b:e0:7e:5f:4b:
98:c2:fd:63:d2:f4:ea:a9:b0:25:b2:c1:33:67:9e:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:C3:E2:12:BE:6D:9E:B6:31:D4:71:86:43:A5:64:80:DE:42:E8
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:87:83:d0:f3:c9:8d:88:70:00:1c:b8:b8:82:e5:43:fb:
d4:6c:a0:e8:e3:8b:57:b6:46:34:82:3b:a6:07:52:05:20:c3:
94:8c:07:84:50:d4:79:41:31:b7:83:1c:65:dc:c7:08:65:eb:
b2:ba:ef:39:5a:6b:7c:92:0b:30:7c:7d:18:6c:af:51:03:17:
bb:72:6a:4f:85:08:c3:a9:39:2a:10:3d:3a:72:86:d2:3b:54:
86:a3:91:d1:c4:b7:25:42:ae:e2:f6:34:56:af:e7:01:0f:df:
af:66:31:1c:b2:f7:a2:a0:22:2a:97:4b:2d:6c:c5:bc:d8:e3:
ad:84:d1:04:d0:24:f3:c1:4d:f2:27:bd:9e:9f:37:3f:ff:16:
3a:f6:1b:97:b6:df:f5:88:2a:9a:ca:27:6d:af:b1:f2:a5:b5:
c0:b0:2c:30:c7:eb:bf:43:95:b5:41:6c:73:7e:07:44:98:6d:
62:b3:f2:b7:b2:76:c1:b6:58:93:b3:3d:d5:dd:5c:92:32:ac:
9f:50:0d:47:a0:14:e5:e1:19:18:6d:38:b6:56:53:7f:3d:4d:
d1:6a:c8:41:31:69:3c:3a:1e:6b:2c:3b:4f:26:2b:59:51:21:
89:16:51:23:7f:24:65:ec:23:92:a8:ae:f0:fd:77:9e:27:78:
fd:b8:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:42:43 2025 by rpki-client