Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json)
Hash identifier: 10c+bhMxS0O5ntxpl7b4BTSmipcUdx8Q+j0Wa+N1xCs=
Subject key identifier: EA:E7:AF:D5:2B:2C:8F:9D:73:78:6B:52:48:03:34:CA:88:BA:CE:6E
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01976F9A2964DCE6F087E9210F9A25CBD6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
Manifest number: 024A
Signing time: Sat 14 Jun 2025 18:01:03 +0000
Manifest this update: Sat 14 Jun 2025 18:01:03 +0000
Manifest next update: Sun 15 Jun 2025 18:01:03 +0000
Files and hashes: 1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: XH0zcgi1AVaLGyJksCttoCyOP59XkinVdWezf11KwAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:29:64:dc:e6:f0:87:e9:21:0f:9a:25:cb:d6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Jun 14 18:01:03 2025 GMT
Not After : Jun 15 18:01:03 2025 GMT
Subject: CN=eae7afd52b2c8f9d73786b52480334ca88bace6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:81:da:b2:1a:0e:22:98:1f:ce:dd:df:95:
a5:a1:9d:0c:d2:01:d4:a0:2c:d8:c5:49:b9:42:23:
2b:48:a3:f5:ec:0d:83:c7:32:6f:57:c4:25:c2:fe:
ea:23:51:8b:06:d9:dd:0e:f3:f7:7a:28:2d:9f:5a:
f4:a5:4e:2d:d9:76:b3:5e:c8:21:8f:21:e4:78:b3:
24:22:71:fd:0f:22:3b:35:d1:1a:d1:84:04:36:01:
5d:eb:32:66:42:10:f9:7d:ef:eb:fa:d0:06:ba:53:
61:03:d5:ea:40:74:19:8f:90:1e:f0:3c:c8:da:d5:
a1:c4:95:82:1c:9f:49:59:30:9a:c5:29:d7:76:20:
43:82:11:84:be:fd:38:55:f7:47:1c:54:83:9f:06:
bc:f6:0c:e6:e8:ff:43:3e:fd:e2:06:2e:d2:c1:40:
53:eb:b4:e8:a6:88:0d:f6:f3:b3:cc:1b:73:c9:a0:
c9:d3:95:fe:aa:a0:8e:d1:b7:d2:10:35:c6:72:45:
5c:f2:51:c1:00:50:ab:5a:f5:db:b0:d6:dd:40:1a:
63:e3:9c:f6:5a:90:a5:20:71:97:74:a5:64:20:c0:
5e:a9:9b:8b:a1:ed:c9:53:78:92:29:58:41:a7:f5:
ae:91:bb:78:ca:4b:f7:44:cd:a9:35:03:57:ee:14:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E7:AF:D5:2B:2C:8F:9D:73:78:6B:52:48:03:34:CA:88:BA:CE:6E
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d6:e8:b1:76:b6:51:fe:de:57:49:34:df:af:c3:7e:b3:f7:
76:d2:fb:1b:9b:88:5b:5d:22:25:3f:e7:4c:4b:48:4a:ee:36:
97:0f:5c:89:0c:40:5d:1f:4b:2b:70:de:88:43:bb:6e:b0:82:
ec:be:3f:cc:f2:d5:b1:db:f9:81:47:72:00:38:17:88:bd:eb:
1b:4b:c7:50:57:93:8b:fa:43:b1:52:a6:b7:34:a2:0c:c1:d1:
58:b5:72:4c:56:46:bd:75:9a:40:85:4d:da:f8:57:6b:48:9c:
a8:08:1f:e1:4c:26:44:be:bb:b8:6e:93:9f:5c:bb:ad:ea:d6:
d7:12:1c:cd:91:b9:53:05:62:21:c2:ce:8f:94:b9:0c:f9:fb:
13:af:b4:0c:0d:ee:a6:de:73:e0:25:1c:e1:75:60:34:a9:c1:
05:cc:fd:b6:ab:c8:64:aa:9f:0f:b2:47:8a:eb:71:e6:7d:48:
55:26:89:ff:70:ee:b7:24:12:e2:38:60:f9:5b:88:8d:83:66:
89:0b:ce:87:22:3e:8f:f6:ee:26:19:0b:95:0d:a5:a4:16:fe:
19:68:64:0c:f0:92:72:fe:cc:17:5d:be:e8:72:2d:18:4d:06:
d5:fd:ba:cb:e4:b8:97:31:cc:f3:e9:80:77:fd:f1:8f:62:0a:
4c:86:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:17 2025 by rpki-client