Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
File: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft (raw, json)
Hash identifier: CYC+9TNUE38NRNujqzNn6Bqqk8uKSaZ12sm8hy2cbd0=
Subject key identifier: C4:03:AA:08:A3:05:18:4E:08:46:E4:4D:E6:DA:00:12:27:06:4E:6E
Authority key identifier: 63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Certificate issuer: /CN=636b027bfab91aa4719a80efe021246137428bda
Certificate serial: 01976E86E65F1FBC47AEEAC0A44EB4CF0D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
Manifest number: 132F
Signing time: Sat 14 Jun 2025 13:00:23 +0000
Manifest this update: Sat 14 Jun 2025 13:00:23 +0000
Manifest next update: Sun 15 Jun 2025 13:00:23 +0000
Files and hashes: 1: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl (hash: HlOofbI2g4m5/TyPciIsdh2MhVGasgvUjEChX2J4YDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:e6:5f:1f:bc:47:ae:ea:c0:a4:4e:b4:cf:0d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636b027bfab91aa4719a80efe021246137428bda
Validity
Not Before: Jun 14 13:00:23 2025 GMT
Not After : Jun 15 13:00:23 2025 GMT
Subject: CN=c403aa08a305184e0846e44de6da001227064e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:87:db:f8:ae:aa:79:16:db:33:c6:8d:95:
5a:f6:c8:96:16:51:17:89:83:1f:44:b0:88:d7:2c:
48:56:7b:b8:49:53:bc:56:45:40:7f:1f:d0:72:dc:
86:3a:41:97:77:55:8a:31:76:ee:dd:62:ef:56:9d:
01:73:f9:12:5f:32:11:08:b3:13:2c:60:6b:1b:84:
a0:99:20:43:76:94:9a:7b:0c:42:e5:98:d3:ef:9f:
25:e1:f9:9f:bb:3f:bc:b9:55:bb:ef:c4:ec:7e:75:
a2:f1:6d:17:56:ea:fb:00:dc:63:6d:32:c5:5f:96:
c8:27:b0:b2:54:8f:28:99:60:8c:ae:8e:22:7d:61:
15:1a:b8:29:dc:86:39:fb:c8:eb:ed:02:22:de:0c:
29:a0:92:dc:0b:91:19:75:0d:69:47:cc:14:cd:f0:
b2:9d:93:9d:86:35:a2:7d:95:8e:0e:d8:cc:ed:0c:
0a:5a:0c:d2:d4:6d:6d:ef:f9:7d:fa:f7:29:25:44:
36:cd:b0:f5:7e:90:c6:77:b8:4c:f4:63:ad:d9:8f:
85:44:e0:78:6f:2a:af:00:c3:d3:5f:aa:08:8c:a5:
01:9a:02:6d:65:cd:58:c0:f9:16:58:09:1a:04:83:
89:75:3a:7d:50:58:95:d2:71:5b:1a:f3:d8:5a:f9:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:03:AA:08:A3:05:18:4E:08:46:E4:4D:E6:DA:00:12:27:06:4E:6E
X509v3 Authority Key Identifier:
keyid:63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:9c:78:c7:d2:0e:dc:a3:92:0a:a6:1f:7e:ac:14:78:05:
30:09:85:0f:84:eb:2a:51:47:db:19:00:73:f8:8e:36:0f:a9:
39:6f:5e:3e:a6:88:ae:68:e7:82:64:20:20:5b:14:96:bb:4b:
5b:4b:57:30:5a:0a:a4:c1:a7:3d:92:3f:04:da:f8:57:f2:41:
65:f5:62:85:b7:ce:85:61:d3:78:21:6b:58:d2:3e:41:f0:3b:
6a:11:97:93:60:d2:ad:be:7b:19:f0:71:b2:a8:79:db:8e:1e:
ac:6c:8a:0f:23:aa:87:b0:45:9e:76:7c:6a:5b:83:62:c2:37:
89:ca:af:16:60:90:dd:ca:05:68:70:ae:15:ea:b4:47:ab:b2:
81:61:c9:55:46:69:0d:41:59:fd:49:05:97:94:4b:3c:19:0c:
be:5d:fc:2d:8e:2e:5b:b8:07:20:c6:57:19:1d:ae:50:9d:a4:
17:cc:24:8d:02:12:29:7a:64:92:82:ea:38:c0:89:cd:a3:d8:
f9:5a:39:9c:63:39:e9:1e:62:14:c3:28:cb:25:35:3e:e0:f4:
45:5b:4e:08:dc:13:2b:23:19:47:80:bc:8d:cc:3a:f3:e5:41:
32:b5:8b:77:bc:93:24:45:67:ac:5f:2f:24:2f:9d:0a:d2:9e:
44:fb:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:33 2025 by rpki-client