Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: 6kultutyVoThwxIuyLZNSM8Fn+zdQFlLrfiF9EMYsFY=
Subject key identifier: 44:78:1A:86:2C:80:0C:CB:82:B1:75:78:C5:2B:22:CE:7B:CD:13:04
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 01976D3DEE3A6F61352D7A542EA00ABC98AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:04 +0000
Manifest this update: Sat 14 Jun 2025 07:01:04 +0000
Manifest next update: Sun 15 Jun 2025 07:01:04 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: MJiVNgCNc2GZI3V7RKX6fU3bHW6KSwouzUrHRsx2C/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ee:3a:6f:61:35:2d:7a:54:2e:a0:0a:bc:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Jun 14 07:01:04 2025 GMT
Not After : Jun 15 07:01:04 2025 GMT
Subject: CN=44781a862c800ccb82b17578c52b22ce7bcd1304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:8b:ab:bf:c0:f5:1d:f2:4d:a1:e8:6e:69:
e3:ec:38:40:3f:69:1d:53:a3:d5:3c:76:a1:55:e5:
8b:f9:8f:8b:fb:22:3c:b8:ca:d2:6e:ef:02:80:6d:
57:2b:e6:e6:f2:ba:cc:28:0d:33:45:01:63:39:bb:
6a:b8:47:ad:a8:69:8d:4f:2f:9b:c9:5e:36:cd:d9:
78:a1:97:10:c8:b0:52:01:02:cd:df:2c:9c:c5:63:
f6:85:b2:e2:e1:90:a4:82:54:1d:03:0a:8a:f9:99:
b7:a4:f3:2e:bf:70:15:54:96:52:1d:fc:70:1b:b6:
ca:a1:b4:cf:01:51:a7:de:9b:ce:29:08:38:14:bf:
b8:ee:63:9a:e4:60:23:30:31:2c:86:7f:93:56:72:
1b:98:a7:18:f3:af:c0:7c:5a:4d:4c:1d:3d:8c:16:
6b:43:64:a6:6a:b5:14:6a:2a:0b:d4:e9:dd:0c:03:
22:7d:1f:c7:3c:2c:f6:e9:24:c4:11:67:f1:ea:18:
5d:f1:5c:0d:b9:c1:6f:4a:42:26:9b:a6:ad:ef:98:
52:40:33:54:c3:45:91:4e:44:63:46:8e:ed:63:94:
21:27:dc:45:3b:fe:64:1c:91:37:27:07:af:36:60:
e0:ec:b6:8d:6b:fa:32:b8:8b:8a:e4:85:d6:15:8a:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:78:1A:86:2C:80:0C:CB:82:B1:75:78:C5:2B:22:CE:7B:CD:13:04
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:06:21:fe:5d:e8:12:c1:d8:30:e1:90:2f:46:2b:48:dc:
a1:83:a2:41:0e:04:5c:75:9f:41:41:1e:d5:29:3d:5e:65:d0:
0e:85:6c:fa:9c:ad:5f:56:d0:45:5a:c6:e1:fc:94:7a:f1:4b:
6a:e8:b4:bf:f5:5a:b4:36:63:27:88:04:71:92:56:81:07:c4:
8a:16:e3:ed:7e:4a:fa:77:e1:76:c6:41:94:35:f0:b3:6c:ee:
93:43:4f:15:99:c4:f5:5b:59:d7:1b:41:88:05:28:64:2f:5c:
14:fc:cf:64:c7:e0:99:1a:59:93:02:14:2e:92:da:47:a6:01:
3c:54:ee:0c:3b:18:a8:6b:29:eb:b7:83:96:fe:76:fd:18:5b:
d0:43:43:e8:de:72:ef:9d:a8:f7:de:a7:60:9f:4b:85:05:45:
38:a2:51:cf:49:d7:d8:00:ed:03:f0:fc:4c:d7:79:2b:79:ea:
c6:6b:60:87:14:51:9c:d9:74:29:af:08:39:bb:2d:bd:db:64:
90:bd:d7:e8:cc:ce:1e:4b:67:1e:9d:38:2c:af:b9:ae:53:10:
3d:86:d8:c3:c0:e6:02:3a:a5:cd:24:48:9e:07:19:9b:43:fa:
52:b2:b3:2d:79:dc:a7:bc:f7:80:f2:56:c1:97:dc:10:c7:2b:
bb:67:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:07 2025 by rpki-client