Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
File: CyKQB_XS3fo_clwPpFLEe22dhU4.mft (raw, json)
Hash identifier: wwnHsCs2i0NV10pUYWQDTeKDQLctnzG2EdODBHfxRX8=
Subject key identifier: 42:C2:C3:07:C8:DD:8F:06:7A:89:DC:C5:F1:F9:C3:29:54:2F:AF:69
Authority key identifier: 0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
Certificate issuer: /CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Certificate serial: 01977CB11CF8D74358D66AA324188A64860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
Manifest number: 06DD
Signing time: Tue 17 Jun 2025 07:01:11 +0000
Manifest this update: Tue 17 Jun 2025 07:01:11 +0000
Manifest next update: Wed 18 Jun 2025 07:01:11 +0000
Files and hashes: 1: CyKQB_XS3fo_clwPpFLEe22dhU4.crl (hash: 5+jwasOGTYpr0vhYH1qJ8XCdgOXxjMmuBCNLbPtpEss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:1c:f8:d7:43:58:d6:6a:a3:24:18:8a:64:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Validity
Not Before: Jun 17 07:01:11 2025 GMT
Not After : Jun 18 07:01:11 2025 GMT
Subject: CN=42c2c307c8dd8f067a89dcc5f1f9c329542faf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:3f:46:24:f4:81:a6:68:40:6e:23:75:db:
8b:d4:bf:cc:91:ba:16:60:b5:82:19:d1:8f:6d:f9:
7a:bf:f6:b9:68:61:5f:14:3e:8c:6e:32:1d:67:67:
28:a5:50:d2:b3:3c:b2:cb:9a:e8:b8:00:57:8f:fd:
bd:d8:4f:24:39:01:e9:20:23:44:19:11:01:63:b8:
ea:b4:40:95:46:35:f3:7d:d3:b2:68:29:f5:90:35:
9d:17:42:bc:ab:15:bc:3f:b2:2b:ff:6b:b1:98:4f:
5d:53:0e:61:72:d2:52:0a:1f:7b:39:dd:63:42:a2:
ec:a3:68:9a:5c:52:0a:8f:d5:fe:c5:c7:0b:07:43:
e0:63:c2:e3:e9:f6:fa:02:3b:1c:79:9f:68:31:af:
ea:80:cd:6a:b5:cf:a4:83:92:92:39:42:c3:d8:32:
43:2f:8a:10:a2:66:db:a5:59:6e:a0:7f:d9:37:08:
36:f8:24:96:be:63:fe:c9:2f:9d:01:ba:14:26:fd:
c0:4e:56:62:5d:41:38:07:18:a5:2c:d9:67:4d:67:
ba:bc:6a:e7:71:1a:76:9a:1b:3e:ba:b7:bb:6a:64:
da:2f:0e:59:cb:b9:2b:a0:d3:42:80:bb:19:ec:6d:
32:07:73:0b:08:ee:af:4a:b8:94:8b:1e:9f:6e:34:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:C3:07:C8:DD:8F:06:7A:89:DC:C5:F1:F9:C3:29:54:2F:AF:69
X509v3 Authority Key Identifier:
keyid:0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:54:95:ff:b0:e0:e7:e9:98:49:b5:cb:a1:12:d1:0e:e1:69:
ce:a4:4f:7d:89:a8:68:0f:d2:4b:21:a6:ce:2c:06:c9:a1:62:
c3:4d:6e:68:a5:64:12:84:90:f9:04:33:b1:cf:a6:3c:dc:59:
ca:ac:7a:f0:72:41:f3:83:47:50:23:22:de:32:06:31:3f:84:
16:e2:64:53:c7:99:bf:0d:a4:d0:be:92:8a:00:ea:14:40:6e:
bf:43:5f:45:49:27:09:2f:bf:30:1f:5a:cb:ae:8e:97:ea:1d:
c3:06:a9:02:ae:fb:19:d2:ec:41:4e:82:8b:c8:4b:25:e0:29:
6d:35:b3:3d:d5:56:e5:f5:e8:46:17:1f:33:54:be:08:9b:2d:
56:23:cd:25:7d:4b:8a:80:14:68:0e:8c:8c:58:1c:96:eb:95:
20:4b:2c:f0:7b:31:6e:94:ec:f4:ce:63:33:c3:02:99:e0:27:
11:b8:6c:b8:9d:cf:24:9e:9f:96:d9:7a:a8:35:69:d5:fb:fe:
8c:47:a5:16:25:97:fc:ff:3c:d8:1d:59:0b:c2:5c:d8:fc:7a:
05:ee:20:1e:09:c4:9f:6d:1c:73:e4:e4:ab:ed:88:45:f9:17:
9b:5b:8c:bb:f8:a4:03:df:79:88:9b:e2:e5:29:00:0a:f7:49:
a7:02:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:58:27 2025 by rpki-client