Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier: FL6R0z/9N3YPQQqEZCbw2UYh+xlQVWcw2pycU2G0ESA=
Subject key identifier: F6:CE:F4:F2:42:09:0A:3E:AC:0B:26:9D:D6:DC:6A:EC:7A:A7:AA:21
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial: 01976C9911D768606DE6352669FA4D2A6D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number: 11A9
Signing time: Sat 14 Jun 2025 04:01:00 +0000
Manifest this update: Sat 14 Jun 2025 04:01:00 +0000
Manifest next update: Sun 15 Jun 2025 04:01:00 +0000
Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: czuPsBm1aSRmkjC8VYpisLIX2iy7kPBChXhA7P1LyYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:11:d7:68:60:6d:e6:35:26:69:fa:4d:2a:6d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Validity
Not Before: Jun 14 04:01:00 2025 GMT
Not After : Jun 15 04:01:00 2025 GMT
Subject: CN=f6cef4f242090a3eac0b269dd6dc6aec7aa7aa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:f7:1f:a7:31:a8:ca:4d:87:78:02:80:2a:
20:eb:57:d4:8b:6e:94:95:bc:95:4a:84:67:73:55:
dd:db:5f:f8:d6:fe:05:1d:73:04:7c:59:d2:96:3a:
d1:d2:10:d8:95:e3:78:7d:10:6c:f8:fd:fc:da:a6:
53:05:ab:c8:26:f1:1b:00:6b:a7:b2:41:32:06:22:
2b:b0:ba:e5:b0:41:02:f6:86:1a:fc:b1:d1:aa:31:
59:2a:ed:91:c1:d0:ba:5c:77:7c:86:31:9f:e4:ae:
db:b7:6b:78:99:e2:e1:e3:39:73:66:0e:fd:32:b4:
83:bb:6b:8e:ca:67:cc:93:59:3c:8b:4a:95:44:7a:
33:a9:60:ba:f3:37:db:e6:7d:47:51:f0:c4:8a:1b:
32:fe:11:d0:3a:96:79:94:27:f6:d7:60:92:5f:21:
db:dc:40:50:04:09:3a:61:f0:89:91:2c:95:5b:79:
ea:83:8d:d5:9f:21:a2:b8:5e:c8:99:60:39:e7:a5:
4c:27:af:8f:26:ff:79:6b:87:fe:e5:9f:5e:0a:fc:
70:17:d0:48:4e:4a:9b:4c:93:f5:00:23:2f:96:dc:
c3:fa:ca:5d:5b:3b:0e:0e:5a:42:ba:44:fe:95:c0:
ea:81:13:9e:b6:49:e6:dc:0f:39:4b:03:32:79:04:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:F4:F2:42:09:0A:3E:AC:0B:26:9D:D6:DC:6A:EC:7A:A7:AA:21
X509v3 Authority Key Identifier:
keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:48:6d:99:b2:b3:89:c1:75:ee:8f:19:53:84:58:1a:22:f3:
91:4e:11:d2:c8:67:8b:d4:5b:fe:0e:5c:86:4d:e8:b6:a7:af:
e6:e4:e5:03:e9:b7:b4:2d:c4:1f:3a:f3:ac:b6:e2:87:f7:66:
ac:17:18:2a:ef:3b:9e:65:52:77:ee:af:d1:b0:21:a8:99:61:
90:14:24:c2:7b:fe:94:f1:6a:47:cc:2b:45:00:ed:a8:cb:03:
44:2b:d1:c7:36:62:ae:80:c3:ef:41:ed:ed:86:d7:80:b7:bb:
0e:63:a8:15:9f:fb:b6:c4:19:96:df:c0:1f:35:81:9b:9f:e8:
cc:64:60:01:47:98:92:d8:ff:ef:56:54:d7:ae:25:fe:eb:85:
b3:dd:72:49:83:56:81:15:f4:d2:df:56:91:4e:cb:b4:87:dc:
f2:22:11:0b:b4:3e:92:3f:98:b8:4b:50:57:df:b6:00:a6:70:
99:f9:4f:19:8a:6d:c2:de:fb:2d:d4:0f:60:98:fd:8f:34:21:
aa:c4:fa:a9:42:95:5c:b5:5d:1c:31:ab:a1:b0:e6:ea:aa:5f:
a7:c1:05:eb:76:55:43:21:09:cd:da:1f:b3:c2:1a:a9:e2:3e:
2a:47:54:0d:4c:52:1d:54:2b:a3:ad:2a:9f:88:b8:0f:84:f1:
0c:65:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:57 2025 by rpki-client