Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: VjNpyQpgTimqUhAllCf7jnuLUPDsfA2vfOK6iZawCqA=
Subject key identifier: B7:B6:1D:78:94:E8:B2:81:23:58:47:54:68:40:4F:59:05:D5:B8:ED
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 0197711A3A186D9FC870093FC17009479706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0C5C
Signing time: Sun 15 Jun 2025 01:00:33 +0000
Manifest this update: Sun 15 Jun 2025 01:00:33 +0000
Manifest next update: Mon 16 Jun 2025 01:00:33 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: ziJhOeG4BxazXgwb8Kfmv1hQuKxLee2SQhsLPX2hxog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:3a:18:6d:9f:c8:70:09:3f:c1:70:09:47:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Jun 15 01:00:33 2025 GMT
Not After : Jun 16 01:00:33 2025 GMT
Subject: CN=b7b61d7894e8b2812358475468404f5905d5b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d6:de:f0:ac:b4:c8:af:a0:12:48:ed:56:d2:
69:b7:df:5b:7f:39:5f:37:a3:b9:76:32:b6:db:6d:
fa:63:63:8f:1a:3a:80:a2:b9:1c:2c:f3:1f:58:98:
8f:a3:a9:88:a1:cc:77:fe:21:02:35:12:6e:d4:cf:
01:35:08:0a:c1:72:fd:58:13:88:b1:3b:a4:ef:04:
93:5f:61:2b:06:08:23:fe:36:bb:0b:72:25:d0:08:
1e:66:47:cb:b2:c0:84:cb:98:b3:83:d1:38:17:88:
cd:ff:7c:32:86:0a:d1:47:18:f8:21:f3:41:32:d9:
56:58:d9:40:ec:27:24:1d:80:6b:96:28:b8:bc:4a:
15:1f:58:2c:9a:1f:39:b4:1a:46:e9:1a:69:4b:4a:
02:82:c6:17:1a:60:33:57:4b:e0:81:21:04:ec:bf:
b6:e0:63:0d:0a:88:8c:45:e3:64:f9:97:34:c8:18:
e9:8f:64:c8:f9:3d:57:5d:01:8c:3c:c5:f8:f8:34:
ac:ac:6c:15:74:56:69:a8:8b:75:19:57:27:97:70:
86:d8:1c:a4:ce:5e:76:9c:70:58:04:8b:38:1c:c1:
a8:3d:c3:3c:6e:14:19:69:9c:ce:75:70:5c:9e:8b:
4a:8d:c2:17:16:d7:e8:c9:69:2d:77:cc:0d:58:9d:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:1D:78:94:E8:B2:81:23:58:47:54:68:40:4F:59:05:D5:B8:ED
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:96:6d:b4:2b:fe:c1:23:87:76:87:dd:00:11:da:79:ff:72:
a7:ca:99:b9:8d:ec:23:37:07:9f:dd:55:ff:44:4c:52:cb:29:
eb:f6:1a:c6:93:60:07:b1:39:52:ed:ab:04:0a:52:fd:7e:99:
01:d2:9d:aa:ee:5d:61:b9:2f:6c:21:bb:85:72:f6:5d:19:4d:
e0:5c:d1:7c:2f:74:bb:b0:d3:86:d6:4d:b5:68:65:60:56:b1:
ca:aa:f6:e7:5f:2f:b3:28:f5:38:94:be:c9:c3:3e:df:0c:93:
c3:66:40:de:f8:cf:a8:58:95:c0:1c:34:64:f6:08:de:84:f3:
aa:0a:34:d1:db:6c:9e:f0:8f:4a:b9:82:57:77:43:67:2b:90:
af:b0:55:f4:3e:6d:af:e9:96:ae:d0:c6:28:de:f1:34:57:b0:
99:3a:9c:04:0b:58:71:ae:a1:7b:a1:9f:ac:4b:45:9d:e6:7f:
a9:e0:c2:59:f9:71:50:48:9f:7c:92:7f:b3:50:93:d8:94:82:
d7:12:35:c9:53:ee:24:f7:f6:8d:6d:22:ea:c5:58:78:8b:97:
18:46:6c:cd:b7:3a:51:cb:07:f5:9e:9b:ef:33:43:3d:4a:fa:
41:f7:27:b1:54:64:9e:48:6c:11:1b:71:44:79:24:cd:fb:8f:
5c:a0:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:40:28 2025 by rpki-client