Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
File: yTLAXdVS5YBU2FWljWFhlVP1HGM.mft (raw, json)
Hash identifier: dW5Rv+jVzXbS5EnCyMRuPb526qrOHEumRTU8MgVycFk=
Subject key identifier: 02:A5:31:9B:2D:94:7F:43:F0:70:10:5C:E1:79:AC:03:41:71:8D:76
Authority key identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
Certificate issuer: /CN=c932c05dd552e58054d855a58d61619553f51c63
Certificate serial: 019770ACAE2C83057681DEA43D7884D36A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
Manifest number: 17
Signing time: Sat 14 Jun 2025 23:00:54 +0000
Manifest this update: Sat 14 Jun 2025 23:00:54 +0000
Manifest next update: Sun 15 Jun 2025 23:00:54 +0000
Files and hashes: 1: yTLAXdVS5YBU2FWljWFhlVP1HGM.crl (hash: v5rksulo7lKFhOME6LuNwmv0IueCP+GvZjXOwOgJ+3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:ae:2c:83:05:76:81:de:a4:3d:78:84:d3:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c932c05dd552e58054d855a58d61619553f51c63
Validity
Not Before: Jun 14 23:00:54 2025 GMT
Not After : Jun 15 23:00:54 2025 GMT
Subject: CN=02a5319b2d947f43f070105ce179ac0341718d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:09:c0:55:b6:55:d5:7b:30:88:4d:ff:09:
fc:5a:ab:92:26:f0:3c:0e:d6:d0:5c:02:95:4f:98:
03:ab:6a:b0:3c:1d:27:ce:b4:ab:8a:9c:e3:89:10:
27:ee:de:62:67:af:57:e0:c2:13:6d:91:41:4b:1b:
f9:35:76:84:6a:ae:7d:41:4a:46:af:bc:ec:f6:e2:
fb:ae:22:9c:d6:5c:f7:d6:a0:ba:a9:63:d6:56:69:
f7:ee:63:b3:e7:f0:1a:f4:6f:24:38:7c:14:e3:1e:
72:af:8e:b4:ac:29:5f:76:39:75:91:23:c9:a4:f3:
6b:c8:bc:32:1d:ee:d9:2d:9f:ce:ec:f1:f1:f7:46:
0f:fd:5e:02:45:8f:b5:24:64:5e:2c:bd:47:80:7b:
06:72:0c:94:fc:03:d4:a3:eb:45:aa:3b:9a:75:17:
c6:f4:c8:f2:90:31:50:1b:d7:3e:04:97:25:dc:49:
f4:46:45:12:62:7e:01:b1:49:b0:9a:0c:87:01:f0:
24:05:21:b0:e2:22:6e:5c:45:bb:5f:44:39:ce:e4:
1b:31:69:94:56:10:5a:a2:f2:f8:bd:9b:fa:b7:b1:
77:87:5e:b8:16:80:25:b6:10:32:8b:f6:9d:61:94:
95:0c:c8:15:f9:f9:db:20:b9:8a:6f:24:e9:48:17:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:31:9B:2D:94:7F:43:F0:70:10:5C:E1:79:AC:03:41:71:8D:76
X509v3 Authority Key Identifier:
keyid:C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:32:90:07:a2:b1:9b:d2:e0:f9:ad:5e:b4:bf:59:b7:8c:3e:
de:5a:c2:c2:2a:27:10:a5:a1:f7:31:2b:e6:7b:5e:4e:75:67:
a2:e7:84:57:95:72:2d:a4:11:d6:04:9e:13:64:7a:91:8a:59:
86:52:cc:b8:5b:62:50:b8:05:7a:79:55:1d:df:2a:99:72:ea:
24:6e:6c:71:5a:1c:92:5a:e8:bf:ff:3f:d5:19:61:7c:dd:7e:
03:2c:2e:bb:99:38:f5:2f:12:80:c9:1d:a9:6c:bd:64:29:d9:
64:e6:cd:24:f7:63:72:d5:da:c2:00:eb:c0:09:bc:b1:ee:d1:
ec:96:9f:10:89:a9:a4:ab:1f:0a:51:c5:5a:5d:8b:45:2d:41:
5f:be:d6:1b:16:f7:b8:fc:82:74:25:3b:67:48:98:8c:48:36:
df:e2:e7:ac:b0:e1:14:92:ff:95:da:ef:68:2e:8b:dd:aa:52:
b9:ff:88:12:0b:9d:77:de:72:4d:fe:02:b8:c9:e5:58:0d:59:
69:fe:bb:c5:37:01:e2:59:ed:a1:85:c5:9c:d9:d4:45:b4:38:
da:ad:60:ec:50:b0:34:cb:56:46:60:f4:7c:db:ae:50:e0:08:
c8:99:54:2e:8d:28:3e:f6:53:5c:0c:a4:8b:e2:68:7a:63:76:
07:7d:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:00:22 2025 by rpki-client