Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: /8tldBiAZgDz+FVzr7CecZs/pb1TByext2nz00bPNbk=
Subject key identifier: 6A:0F:98:7E:75:9D:7D:17:6B:F7:D4:A7:73:04:8F:98:6F:FD:23:21
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 01976C2AD9405F7CBEB46C4A9A5553D77184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0921
Signing time: Sat 14 Jun 2025 02:00:36 +0000
Manifest this update: Sat 14 Jun 2025 02:00:36 +0000
Manifest next update: Sun 15 Jun 2025 02:00:36 +0000
Files and hashes: 1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: dohRFQBkvBy2OncwcadQTcqWwmGHHgnk30GJ9D16sFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:d9:40:5f:7c:be:b4:6c:4a:9a:55:53:d7:71:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jun 14 02:00:36 2025 GMT
Not After : Jun 15 02:00:36 2025 GMT
Subject: CN=6a0f987e759d7d176bf7d4a773048f986ffd2321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:10:9b:9f:23:fa:f7:b7:1f:e4:80:7f:2e:
39:cf:ec:36:d6:e0:ac:fd:2f:02:5a:f3:19:13:8d:
e3:40:d9:c7:20:00:b5:20:94:a7:be:b9:b6:1b:45:
96:36:3d:89:65:05:67:cc:41:98:2e:fa:cf:ee:e3:
70:e2:fd:83:3c:8c:26:a3:95:af:50:28:3b:5f:b4:
ac:5d:0e:1e:13:40:1e:bd:27:61:ee:af:03:cc:59:
d1:ef:2c:a2:fa:b2:88:f3:b3:7f:ae:06:d2:69:17:
0c:4c:31:3f:06:56:31:60:1f:87:a4:7f:ba:25:f9:
2d:1f:7b:f1:a7:d3:35:4b:88:f4:d2:46:47:b9:c5:
69:df:29:da:81:99:71:e7:6c:81:c0:6f:d9:ff:d4:
74:54:2c:d2:e9:2f:b0:0a:01:76:54:74:95:0f:87:
46:4c:3c:72:61:45:53:00:65:a0:0c:67:d1:bc:a6:
28:95:eb:21:44:82:0e:97:db:1a:99:5c:40:67:28:
09:e3:c9:54:c1:0a:95:3e:e3:72:fc:e7:9d:3b:00:
0c:35:8c:c1:31:ee:92:3f:cc:c4:51:5b:38:2f:64:
16:40:58:25:bc:74:15:c2:f7:aa:83:ee:10:28:d6:
de:5c:3c:ef:c7:47:44:0f:69:c4:83:f8:93:dc:3d:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:98:7E:75:9D:7D:17:6B:F7:D4:A7:73:04:8F:98:6F:FD:23:21
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8b:38:ea:ab:b8:88:7e:14:f3:6f:99:11:a9:38:a7:5a:29:
a9:08:d4:cb:47:cb:d9:f5:a6:ff:77:69:29:c4:42:f2:51:3b:
1d:52:55:6c:62:d3:a3:87:89:fd:52:94:ba:42:b0:ab:96:35:
e7:0f:89:ad:49:f1:d0:ca:df:2e:e0:da:c8:2f:f0:9a:d7:13:
09:ae:91:d1:5e:2e:ae:fa:fc:be:a7:af:a6:3d:95:04:5e:3d:
75:36:1b:3f:a2:db:56:ca:79:02:48:50:49:a3:7b:9d:46:9f:
a1:2a:d4:cc:06:a8:aa:40:82:04:e7:ac:cf:4c:e3:90:e7:2e:
ca:80:dd:2d:4b:31:ee:88:06:15:4a:45:41:55:ff:02:ab:9f:
d4:0c:5d:32:ae:f8:49:ae:8d:01:c1:a1:75:49:a8:ac:dd:92:
ca:5e:ca:05:d9:78:ce:25:a9:06:05:ab:1c:e7:b1:f9:fd:6f:
f2:c9:d7:06:5a:1f:54:87:a2:15:1a:ae:92:5a:be:ff:7a:46:
60:a5:ed:9b:72:d1:0e:74:d0:d8:4e:2d:94:f8:dd:bf:b0:69:
b6:12:24:2c:77:fb:79:81:5c:da:18:bf:a8:b9:20:67:d8:19:
41:e2:83:d4:0d:39:43:6b:e5:f6:96:54:43:5b:90:a7:49:fe:
f6:ba:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:35 2025 by rpki-client