Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: YN3bKxxi+8EhLZ2Yjpqn7k5iuKO3EbfHtJwdVokzVWE=
Subject key identifier: 83:FF:57:E7:06:8E:D1:12:1B:76:6C:A3:76:A5:7D:62:0D:52:4A:6F
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 01976F2CA6F70C85DCC2C37C909F0B093D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 151E
Signing time: Sat 14 Jun 2025 16:01:26 +0000
Manifest this update: Sat 14 Jun 2025 16:01:26 +0000
Manifest next update: Sun 15 Jun 2025 16:01:26 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: KKaGM6wIZ346+nLz56ap6He7YcI0lrIaxHTMRBa6L6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:a6:f7:0c:85:dc:c2:c3:7c:90:9f:0b:09:3d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Jun 14 16:01:26 2025 GMT
Not After : Jun 15 16:01:26 2025 GMT
Subject: CN=83ff57e7068ed1121b766ca376a57d620d524a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:e5:3f:99:ec:38:5a:9d:33:7b:d4:6c:61:
7a:de:e4:a4:0a:8c:5f:46:a7:20:82:88:81:e3:df:
a6:bb:12:a3:2c:30:37:e3:04:08:18:00:ff:46:b1:
a1:2c:1d:70:8e:67:cd:3f:80:5d:74:11:e4:a7:ef:
0b:45:aa:36:c4:f5:24:8b:aa:90:f4:f0:f2:30:19:
30:36:36:7c:1b:9d:73:3d:91:59:5b:d8:ab:b5:bd:
da:76:7f:d0:af:ee:b4:f1:4d:d8:b9:eb:29:f9:17:
8d:6c:6b:5a:53:95:91:10:3b:3a:da:27:f3:b7:cd:
20:f8:f6:66:b6:d9:1d:20:eb:75:30:19:cc:f6:83:
d6:bc:8e:25:ee:6b:6a:a8:fc:95:a6:a8:61:63:f9:
d9:8a:e0:7e:98:ee:74:65:4d:dc:8b:6d:de:7b:b5:
ad:c2:2c:c6:19:77:8f:34:a1:d5:95:b5:a2:24:13:
5d:1e:30:f1:22:dd:e6:69:2b:3f:6a:08:86:7a:6f:
e5:1a:0f:59:2a:0a:82:c2:17:85:68:d4:90:93:84:
8d:3d:f0:19:3b:3c:f7:bd:9f:71:60:41:de:d5:aa:
3c:26:40:85:03:1e:0c:43:b2:d8:ee:18:96:41:63:
4a:bf:41:1c:77:f0:60:75:5a:c3:a2:ea:3b:d8:9c:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:57:E7:06:8E:D1:12:1B:76:6C:A3:76:A5:7D:62:0D:52:4A:6F
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:ed:4d:da:b2:1a:02:5c:d0:4f:5a:78:e2:aa:1e:92:73:
ea:d6:4f:ff:73:ab:e2:8c:de:d6:30:03:54:0c:81:de:93:d1:
d6:66:e9:fb:b8:d0:ff:a4:8a:ad:12:79:80:ea:76:6f:e5:43:
65:e9:e1:8a:c8:aa:43:57:1a:bc:2d:40:1b:a9:e6:9b:90:c2:
d7:37:f0:a4:d4:25:38:0b:53:f8:66:c6:26:a4:8b:34:ab:4d:
0e:f9:eb:e8:02:e8:2a:7f:a0:e3:1c:a4:99:52:8f:ae:ce:89:
62:3e:ab:a8:95:a7:b5:2b:03:da:b8:c0:aa:ee:a5:45:9d:59:
80:c4:0c:06:e7:00:2b:1f:45:23:1a:f9:6c:a7:f3:e2:8b:bd:
f9:91:33:ec:0a:98:16:69:f5:d7:49:f0:4d:2a:d7:e7:03:cc:
a4:a7:19:45:56:73:2e:af:c0:98:9a:30:82:74:a4:3b:6c:90:
d2:63:23:33:0d:2f:62:65:e8:1c:13:e5:c7:6b:d0:5b:5f:23:
0b:67:76:2a:aa:09:eb:e1:fa:90:b4:0d:56:ad:bf:08:76:7a:
5b:8b:6c:2a:1c:a7:e5:9e:c1:b3:9c:e8:07:95:1d:94:13:14:
54:97:a3:af:bc:98:c2:ae:59:0d:9a:18:1d:c9:b6:19:f5:87:
a0:54:67:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:35 2025 by rpki-client