Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: 05uWoS8VCNWkerMMnYNDHywdErPp/B+kiO6vcB1Qyd0=
Subject key identifier: 6B:52:9E:F5:84:B1:C0:01:95:01:A6:3B:2E:60:18:FC:58:53:17:67
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 01977007B25A1CE9954BBD25940B507973E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 09FA
Signing time: Sat 14 Jun 2025 20:00:42 +0000
Manifest this update: Sat 14 Jun 2025 20:00:42 +0000
Manifest next update: Sun 15 Jun 2025 20:00:42 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: UzOGhwvQZeqIr+mq+gVh+pBgMQvhxb0NCoO4QmB3wpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:b2:5a:1c:e9:95:4b:bd:25:94:0b:50:79:73:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Jun 14 20:00:42 2025 GMT
Not After : Jun 15 20:00:42 2025 GMT
Subject: CN=6b529ef584b1c0019501a63b2e6018fc58531767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:8e:99:61:6d:49:72:bc:db:3b:eb:3a:28:
26:c8:11:93:b4:16:83:11:5f:6a:60:b1:d1:38:75:
71:74:d2:c2:6c:b6:0c:fc:3c:f4:7e:e8:cb:74:c5:
09:9f:27:62:d5:2b:ee:93:f2:a0:02:ef:c6:f3:9d:
d2:31:fe:e3:0b:69:bf:83:f2:37:5b:5f:50:d7:0f:
1e:75:fb:a4:b7:fd:9a:3a:4d:ee:eb:b9:ba:f3:3f:
2d:7f:85:95:0d:15:9f:13:98:61:2f:3b:21:af:07:
f6:8f:ac:f3:08:43:d3:01:a5:14:15:b0:78:72:94:
75:f7:3c:a1:87:c7:38:9e:9d:c0:d7:87:2e:d0:e2:
dc:cf:1b:ef:fe:89:04:4a:5e:19:ea:bb:91:6d:8a:
92:dd:12:72:2f:fd:e4:90:57:89:ce:86:ae:98:fc:
b5:8b:14:ec:2f:72:ee:d2:40:aa:1c:c2:10:6d:c3:
84:f5:85:5a:2a:77:7c:b6:02:87:9d:2e:fb:57:51:
c9:21:cf:30:cf:11:d1:c1:6a:04:eb:23:a5:3f:a4:
29:76:eb:66:82:7a:40:cb:92:64:5f:b9:cb:cc:dd:
ee:ff:ba:54:2a:02:03:2e:0e:f9:7d:1d:76:57:c8:
07:28:49:c6:12:d4:b0:69:df:ef:dc:32:c0:3a:4c:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:52:9E:F5:84:B1:C0:01:95:01:A6:3B:2E:60:18:FC:58:53:17:67
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e9:78:43:e7:05:60:ac:d7:df:8d:0f:00:39:3f:d0:c3:79:
a0:77:69:cd:cb:3c:ca:14:57:63:8a:8e:23:ca:95:bb:ff:44:
14:b0:5b:c5:f8:d0:ef:97:9d:c9:c4:c9:c8:e0:1c:f2:e5:c9:
65:e2:26:0e:d5:e1:5c:af:bb:27:88:3a:29:3a:35:83:71:1e:
f9:4d:cd:da:f4:36:d2:bf:ee:42:2b:d9:e3:0c:99:af:04:01:
09:a5:c8:b6:7b:c6:b3:ee:63:d9:b0:15:ef:f1:f6:20:33:ad:
c9:75:35:6a:3d:d2:82:9b:50:dc:97:df:d5:cb:a9:10:21:66:
68:b6:cd:c7:55:36:b1:2d:fe:84:6f:0c:f7:d5:d9:7c:93:b9:
3d:0a:b1:fe:aa:1c:3d:62:fe:7f:c9:1d:03:f0:fb:60:68:db:
fe:77:16:2c:ce:21:a3:d2:02:4a:bd:e7:54:c5:f1:78:9f:d5:
07:a1:d3:5d:bf:39:7a:5e:51:a6:34:66:34:1b:32:39:97:8f:
1c:02:a4:d2:4c:79:5a:c6:52:5f:96:50:9b:a7:6c:c5:1c:c0:
11:54:f8:a6:5b:a9:d4:1e:1d:29:4b:db:a4:63:52:4d:98:62:
ba:e5:a5:4e:57:de:42:dc:42:f5:68:45:b1:a2:a1:49:56:01:
7c:78:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:37:35 2025 by rpki-client