Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: FTuBmWIVM7GACufYnBz++gsLoL1cvozifgX5YwxksGQ=
Subject key identifier: F2:0F:60:05:35:EB:E9:92:67:C5:74:4B:BA:C1:75:D5:6B:DB:5D:E2
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 01976BF4499ACC73F1FF6B37B0E5338A2552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 1220
Signing time: Sat 14 Jun 2025 01:01:01 +0000
Manifest this update: Sat 14 Jun 2025 01:01:01 +0000
Manifest next update: Sun 15 Jun 2025 01:01:01 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: sHJWXtx3nwBbddGUQK2s6dozivlVTXmZJ7130TkfUzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:49:9a:cc:73:f1:ff:6b:37:b0:e5:33:8a:25:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Jun 14 01:01:01 2025 GMT
Not After : Jun 15 01:01:01 2025 GMT
Subject: CN=f20f600535ebe99267c5744bbac175d56bdb5de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:db:56:94:a5:7e:00:87:61:0b:e0:0a:33:
e0:3c:4f:db:d4:2e:65:63:c0:a6:f9:4f:76:6b:05:
00:ad:b0:56:78:6a:10:82:fc:10:04:7c:90:b4:66:
b3:b3:e1:9a:06:6f:da:d7:62:77:b9:7e:24:b0:c3:
18:8a:71:75:0e:92:55:8c:87:5a:e1:93:a9:2f:3c:
9d:ea:ad:74:2f:83:1c:f7:90:26:cb:c2:a0:7c:bc:
bc:53:61:97:b0:d5:bb:31:93:96:4a:b6:5f:cb:b1:
f7:03:1c:08:92:27:50:8b:da:50:6e:3e:1c:92:6d:
9a:1f:ac:e7:67:ab:e6:9a:25:c3:a8:54:d7:ac:eb:
fb:fa:5c:22:c2:63:8d:dc:51:8f:ad:74:10:0a:3f:
cc:a5:e1:8c:a0:a1:af:c6:38:e8:08:dc:0a:ec:8d:
e3:ae:e3:56:96:3f:17:33:04:48:f4:94:60:b7:df:
28:e1:2a:68:75:57:cc:69:ce:b3:26:a5:f6:0a:2e:
81:72:2f:b3:20:31:7c:15:57:b0:9c:cb:25:f3:86:
73:56:2a:6f:42:f3:cb:6e:79:03:2e:f9:d4:a6:e5:
68:de:da:92:60:17:24:a6:e9:64:4c:2c:f7:00:27:
28:6f:a4:9c:8b:f5:02:03:d2:e7:20:a0:3c:38:3a:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:60:05:35:EB:E9:92:67:C5:74:4B:BA:C1:75:D5:6B:DB:5D:E2
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:51:23:1e:5a:06:0d:e8:87:5f:5f:e2:27:4a:dd:a8:a0:07:
37:9d:fd:64:ba:d8:aa:33:76:40:97:f7:f0:fb:6c:79:84:bb:
05:f5:fc:02:df:00:59:13:74:4c:b8:69:05:31:8a:48:58:53:
90:81:b9:fe:f1:64:50:80:d1:43:78:2f:c0:c9:33:fc:d6:7c:
c2:90:e9:b5:53:f6:53:80:9b:a8:8e:0f:19:44:86:72:34:c1:
c6:55:a7:f7:34:65:73:b7:82:6d:aa:01:ab:b3:31:b8:dc:a8:
ee:34:54:14:82:04:cf:8f:73:de:4c:90:4b:d5:ee:6f:b9:27:
f4:9a:04:d8:60:e7:0a:ab:eb:82:0c:ab:d8:2e:44:a4:07:ed:
a6:35:fe:23:f7:37:38:35:81:dc:d1:df:d4:de:2b:fa:03:76:
cc:7a:64:fd:9d:d5:b2:79:51:91:6a:f4:40:fe:18:01:1c:0a:
93:b8:dc:f0:eb:ea:81:44:94:bb:f0:e5:6b:09:ff:b9:fd:91:
f1:f7:3a:e0:8c:ab:08:d6:72:12:25:a9:4a:4b:05:f1:f4:1a:
44:8b:c2:00:9b:eb:ce:3d:58:19:d0:aa:d8:f6:ad:bb:c3:a6:
c8:33:4e:e4:06:7c:c7:87:4b:8b:e8:36:9c:18:3a:60:9a:d6:
30:b3:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:29:10 2025 by rpki-client