Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: /aolemsk7zYno5T1kqlI+Fic3r/X36ofIC0XX1bKaJM=
Subject key identifier: 96:6C:FA:F7:48:84:40:38:AC:15:D8:DD:AA:D2:B9:B3:D5:E0:BB:3D
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 01976D3DF4264ABC007521C364786034B548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0954
Signing time: Sat 14 Jun 2025 07:01:06 +0000
Manifest this update: Sat 14 Jun 2025 07:01:06 +0000
Manifest next update: Sun 15 Jun 2025 07:01:06 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: JWLZJE4UdCM9k+uYN+oRgqhWdFr9bZX/DaNmUsfudz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:f4:26:4a:bc:00:75:21:c3:64:78:60:34:b5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Jun 14 07:01:06 2025 GMT
Not After : Jun 15 07:01:06 2025 GMT
Subject: CN=966cfaf748844038ac15d8ddaad2b9b3d5e0bb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:1d:13:f6:a7:f5:02:5a:29:ed:d2:4c:6c:
2e:45:93:d3:1c:c0:48:4e:cd:41:96:42:7b:9d:95:
e0:6d:ce:28:99:97:09:a6:91:b9:81:ff:35:1e:41:
48:8f:8f:f1:a0:b6:7d:40:63:27:88:b3:ce:2f:4f:
28:d5:0f:c1:3c:9b:6b:29:de:a8:5b:a5:b4:9c:80:
c9:a0:ea:cb:d5:51:6b:c0:13:c5:ad:90:21:10:f1:
3f:d7:29:cf:64:ad:ae:a4:8f:f4:96:8e:f3:15:21:
2a:f3:1b:00:d4:e3:fa:e1:3e:b5:44:73:d4:42:4a:
00:53:a1:87:f9:49:02:aa:61:b2:01:b6:bf:d6:e4:
e7:ca:71:b0:5b:36:72:38:52:d2:8e:1e:a6:e8:2b:
22:a6:8c:70:8b:cc:62:d8:06:da:a9:c1:98:b5:a7:
54:fb:12:79:c9:2b:8d:87:2a:80:40:2a:56:04:41:
26:a7:7a:61:6d:70:25:6e:22:91:b7:76:f0:bd:c3:
96:f0:ac:84:de:02:bb:a0:bc:fc:4e:ff:c1:dc:46:
ce:ff:90:10:dc:33:90:20:e4:d9:15:05:62:a6:5c:
c3:55:5e:12:39:12:c3:fa:f4:6a:67:1e:5a:88:de:
f8:22:d2:2c:73:12:01:0c:90:21:e1:38:d5:8d:23:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:FA:F7:48:84:40:38:AC:15:D8:DD:AA:D2:B9:B3:D5:E0:BB:3D
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e5:e0:b4:a3:c5:c3:8b:9b:3a:aa:a8:29:0b:e0:5f:80:a0:
b0:94:75:06:ff:76:54:73:df:31:5a:18:b9:24:4d:22:b0:d9:
1d:d8:88:f1:0b:95:e1:26:a8:21:be:1d:04:72:0d:b8:98:74:
62:67:3e:14:26:19:48:11:49:0a:6b:ec:ef:ae:78:9a:e2:5f:
f3:a8:33:6f:89:47:cb:b9:b8:93:5e:16:33:b6:7e:1f:46:76:
d5:ff:3b:4d:aa:31:78:b9:f6:85:5b:5a:2a:39:1f:fb:1c:7d:
da:18:7b:aa:71:a7:a8:02:81:4b:6e:09:29:1d:b2:53:85:cf:
4a:17:0d:23:c3:37:ac:a1:7e:45:11:c1:04:a1:28:c3:6c:2b:
94:10:75:af:91:28:4c:db:e8:cd:28:2b:9c:39:58:55:51:14:
12:5a:2c:db:4a:89:53:ef:56:f6:9d:08:7c:b2:b1:76:f7:03:
67:98:8b:b0:dd:32:c7:ec:d6:1f:ac:31:db:1e:73:83:49:07:
5b:4d:09:fe:4e:f5:e2:92:d8:d0:f1:f9:37:46:94:48:99:2f:
ea:4e:7c:1b:b5:6a:7a:b6:9d:25:83:dd:fb:35:f6:55:57:84:
87:bc:5c:dc:5e:18:47:cb:7b:0e:f0:be:69:ab:7d:8d:00:86:
87:d2:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:21 2025 by rpki-client