Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: Zqt2XpptX6QWWaT+o609piiDXWiJh+I9juK/40+jWHs=
Subject key identifier: 6E:C9:F4:5E:BE:FD:EE:16:6D:51:7A:79:47:B1:15:B2:E4:4E:65:51
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 019778D4031844A18CF23F42861719156B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0C9A
Signing time: Mon 16 Jun 2025 13:00:49 +0000
Manifest this update: Mon 16 Jun 2025 13:00:49 +0000
Manifest next update: Tue 17 Jun 2025 13:00:49 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: O9jvI/cJWG5eEADZ1k95PXq4GplKl1ttSVYW5sy24sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:03:18:44:a1:8c:f2:3f:42:86:17:19:15:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Jun 16 13:00:49 2025 GMT
Not After : Jun 17 13:00:49 2025 GMT
Subject: CN=6ec9f45ebefdee166d517a7947b115b2e44e6551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:c0:94:28:b4:8c:59:9d:74:7d:07:65:56:
97:2c:c9:5e:20:36:8e:d2:ad:bb:9b:cd:57:93:d4:
1b:65:b6:00:2e:85:6c:a4:dc:26:9b:c4:fa:61:38:
3e:81:e7:9e:1e:4f:22:20:bb:db:29:07:19:e9:22:
59:21:7a:8b:8f:e0:92:f3:80:b8:2c:58:26:10:f9:
44:11:c7:14:ee:84:95:57:eb:56:4b:5c:10:a5:03:
02:4c:f8:36:52:43:fc:55:52:11:ef:ef:39:86:a0:
21:d2:09:1b:d0:91:77:35:cd:08:3c:8a:c0:bf:1b:
02:51:b8:06:5d:e0:07:69:bb:13:ea:e1:29:9e:a9:
1c:0a:b3:ef:b5:39:4b:b2:b9:73:a9:68:ef:35:24:
77:1f:7b:4f:fd:02:38:69:96:c2:9e:25:34:c3:7e:
7b:c8:55:5e:3a:cb:fd:bb:b7:50:8f:05:5c:96:64:
6c:27:e9:07:3b:10:ae:51:7b:f6:86:b6:a4:b5:cd:
e6:c2:bd:5c:3f:ef:71:74:08:87:b5:c4:4c:7a:0f:
2d:43:6e:70:08:08:6e:f8:22:e3:3f:42:ed:40:68:
56:17:12:e2:96:e3:63:da:2b:b2:ad:38:bd:14:9b:
14:98:aa:cb:32:9b:62:d4:11:e5:44:dd:6b:70:c6:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:F4:5E:BE:FD:EE:16:6D:51:7A:79:47:B1:15:B2:E4:4E:65:51
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e7:e4:8a:25:4b:ec:c3:df:25:68:6a:af:0f:62:d3:99:b4:
86:a1:12:20:d5:77:a3:92:40:79:26:23:e0:33:6d:92:ea:a6:
ab:57:c8:fd:dc:c9:4e:d9:94:be:c1:66:46:bb:9e:8c:90:38:
e4:32:08:c2:45:14:4c:e5:3a:b5:6c:f1:ab:ef:9f:46:62:f6:
c4:16:6f:c2:e5:a4:f3:cb:43:5a:ce:ea:04:66:fb:58:14:09:
58:20:ad:d4:9d:9a:f1:d9:e2:9f:cd:fd:a7:e5:26:b2:ff:ec:
63:9e:80:de:76:62:1d:85:cb:ea:a9:9b:20:e3:e1:f1:cd:b8:
22:7a:6b:c7:76:19:66:fb:75:55:90:df:68:e2:ec:2f:72:d9:
18:9d:4c:c9:b9:2b:0b:4f:89:c3:e0:36:70:40:74:cd:0f:7c:
1d:01:60:15:5b:38:17:8b:8d:d7:67:fb:ba:27:85:fb:31:6a:
4e:fb:ba:c4:d5:33:eb:69:a2:95:0a:e0:7e:a5:7b:2b:2a:ee:
91:86:d0:d9:60:15:3b:e5:79:38:78:61:1a:a3:06:e9:f1:e0:
af:4e:70:5f:88:5f:c1:59:7c:90:6e:6b:8a:a1:18:0d:8c:60:
cd:84:98:dd:d5:af:ed:0c:2e:e2:e1:ec:02:a0:cb:31:f7:4b:
f6:f7:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:07:44 2025 by rpki-client