Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: 0Y73ywJ/jZbgyjZupISshsTH+gvp59SyMpGOZfO9AWs=
Subject key identifier: FA:95:A2:1A:B0:9C:28:8E:93:8D:B2:4E:F8:DC:8D:4C:9C:9C:B5:0E
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 0197711B60CB178AC8CFE36BBC088BCD76AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 01:01:48 +0000
Manifest this update: Sun 15 Jun 2025 01:01:48 +0000
Manifest next update: Mon 16 Jun 2025 01:01:48 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: pqMMkXfNNo0rK4uLol9e7l4cTGOnvzrs0udPNqBzuw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:60:cb:17:8a:c8:cf:e3:6b:bc:08:8b:cd:76:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Jun 15 01:01:48 2025 GMT
Not After : Jun 16 01:01:48 2025 GMT
Subject: CN=fa95a21ab09c288e938db24ef8dc8d4c9c9cb50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:42:c1:b8:9f:21:73:81:1e:5f:bc:1b:2a:
c3:c8:d4:2e:79:7e:9c:e7:12:64:6a:c8:dc:bf:86:
c4:76:d7:a2:ab:bc:40:42:d3:65:f1:90:c8:ed:12:
7f:6b:ce:ca:d3:8a:94:3a:1f:14:ef:e6:aa:4e:94:
ff:63:e9:da:d3:77:67:91:be:62:19:26:51:42:07:
cb:fa:dd:22:1f:fd:1e:cd:18:88:fe:2b:1f:9c:af:
84:71:52:af:6c:54:d3:bf:c9:5c:2e:be:46:4d:d0:
6f:07:bf:3d:67:96:f7:67:b2:dd:ed:26:46:95:7c:
47:20:8f:bf:4a:1e:68:b0:57:9c:1e:28:f3:69:48:
b3:5f:a0:8c:81:79:f1:bc:65:c2:e3:f4:34:d2:2b:
80:49:84:1c:88:c2:c1:6b:c4:e7:f0:e5:98:62:e9:
3d:89:c7:95:08:bd:a8:5d:d0:fc:a2:99:40:78:b3:
d2:9a:e2:19:9c:34:6f:d2:7d:91:3a:2d:a8:fb:51:
76:87:cf:2e:b9:fd:77:3b:6a:4c:3f:8f:8d:5b:a1:
08:11:79:4b:6d:b3:cc:a1:bd:c7:e8:4c:0e:20:8c:
9e:fa:59:b8:2b:c3:33:fb:d7:4d:b2:9f:e5:a2:a9:
ab:c1:a2:38:f2:4d:f5:c1:20:dc:1d:42:03:35:85:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:A2:1A:B0:9C:28:8E:93:8D:B2:4E:F8:DC:8D:4C:9C:9C:B5:0E
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7b:f0:cb:d1:c5:a3:12:98:28:27:7b:1c:09:c1:15:bb:b3:
75:a8:07:c2:6f:9a:32:f1:74:f2:08:d7:ed:be:1c:78:7a:77:
02:29:bf:bb:ad:f5:34:11:67:23:73:82:31:b4:b1:8d:3d:00:
fd:b8:24:a4:ef:84:78:da:6f:fc:0d:36:8e:6c:a5:b7:cb:7b:
99:21:cf:ba:45:7e:9f:95:34:97:b9:5b:23:09:7e:f6:10:cb:
d8:73:ca:07:28:13:db:2a:bb:b2:a9:9b:e9:4a:89:a0:3b:33:
6a:00:04:95:2a:61:d1:5d:67:09:08:e8:71:f0:1b:2f:23:26:
28:82:94:71:f8:d8:fa:ba:1a:50:1e:56:9c:a5:04:4b:d7:8b:
cf:b5:57:a3:ef:39:59:40:61:64:46:63:a7:54:71:2d:41:f1:
6b:d8:d2:66:d4:3c:65:28:3b:01:e6:e8:48:27:ae:5f:32:d8:
0f:73:23:76:bf:b8:53:47:36:dd:0d:b4:f3:90:98:45:5d:98:
79:15:37:50:0f:6a:81:ad:00:32:e7:e4:06:a3:07:1d:44:9e:
8b:e6:c6:2b:b8:43:a7:e6:0a:82:fe:f6:ed:2b:27:17:31:6f:
e1:26:2f:b3:d7:cb:3f:d7:28:47:f5:e5:98:0f:f0:ed:b4:12:
26:34:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:58 2025 by rpki-client