Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: Vo6RtX2pxoqk3SD+6XMXvl6a39NyfibNXyHg/Mlo+VE=
Subject key identifier: 8C:23:FA:98:5F:91:71:CD:9F:E8:C9:E3:66:06:FE:81:11:FC:6E:1E
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 019776E5EBE173472E4A4714EC2B75B2F2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 0FD4
Signing time: Mon 16 Jun 2025 04:01:08 +0000
Manifest this update: Mon 16 Jun 2025 04:01:08 +0000
Manifest next update: Tue 17 Jun 2025 04:01:08 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: fWp17X3pN69axd4Q0GC6zJCeQ7HC2E2zrWLJzGJJ0PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:eb:e1:73:47:2e:4a:47:14:ec:2b:75:b2:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Jun 16 04:01:08 2025 GMT
Not After : Jun 17 04:01:08 2025 GMT
Subject: CN=8c23fa985f9171cd9fe8c9e36606fe8111fc6e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:43:42:aa:4a:17:a2:ff:b0:f2:ba:7b:90:
6b:c6:8f:bc:10:73:06:a0:9d:b8:d8:f8:42:a7:43:
93:b2:0f:9f:2a:40:6c:93:9b:ec:3d:00:43:4f:f9:
e7:a0:71:b3:7e:eb:5b:72:42:c1:38:6b:0b:fb:40:
a8:3b:07:3a:a7:1f:45:32:12:5a:86:65:f3:5c:99:
dd:eb:07:34:f8:8d:34:c5:4c:16:c0:07:dd:43:04:
70:03:bb:e2:a0:55:3c:a6:e9:9f:93:5a:23:2d:d1:
9b:89:c5:f6:d8:09:6f:44:5a:e9:fc:5b:3d:ae:cc:
e9:fc:69:20:6f:fc:50:4b:83:b3:6b:ac:ee:c6:03:
ac:3e:f7:ca:a2:6d:98:07:c1:fc:1b:68:87:c5:60:
f8:95:00:44:29:6c:02:a8:f1:99:8c:e8:5e:e4:d7:
18:08:7f:75:8e:1a:3d:d4:4e:e5:69:2d:a0:36:0e:
5f:7a:f2:ae:8c:26:51:c2:84:3e:ed:03:e4:3c:5d:
28:7e:a2:d6:a4:a7:34:43:7d:ff:1a:89:80:df:81:
c5:e3:87:60:71:e6:63:ec:ec:f5:bf:6d:e2:cf:c2:
c3:0c:09:e8:42:c8:08:40:3b:ec:2b:81:4d:6c:5b:
ff:cb:17:e1:37:a6:e9:e7:f8:00:97:9e:0d:db:22:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:23:FA:98:5F:91:71:CD:9F:E8:C9:E3:66:06:FE:81:11:FC:6E:1E
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3b:e9:06:b0:94:ae:a0:73:fd:9d:9e:09:8f:b3:5f:fe:75:
7b:ed:23:69:e1:95:45:76:04:d6:89:af:a8:12:61:c3:3c:c3:
fc:3d:ca:f2:a2:25:f6:49:73:54:b4:7a:e7:51:d3:b5:ed:81:
f5:c4:37:6b:63:67:03:5a:02:1d:20:08:c2:f4:4e:6d:bd:6f:
a9:93:fa:46:c7:bf:af:4e:2d:35:5e:ac:8e:ea:48:c5:18:c9:
53:17:18:26:d5:83:19:aa:fb:4e:18:5b:68:22:4b:e6:9b:20:
3e:08:18:18:22:7e:d6:f1:be:49:a2:b2:b4:a0:f2:a7:29:a5:
db:8b:4b:1d:e4:b4:23:30:73:d5:2d:f0:e5:6c:aa:15:f6:70:
6f:13:91:d2:82:99:2f:98:04:0b:20:05:54:4e:42:6c:21:8b:
4b:30:5d:ae:fd:49:64:35:f0:2d:99:3c:35:1f:16:27:5e:fa:
f9:b3:8f:e2:fe:3c:4d:5a:fc:d5:be:01:8c:12:c8:76:ea:53:
2a:6d:67:8f:15:1d:14:b6:1f:f0:53:a9:33:63:7c:65:3f:15:
cf:80:a7:69:3a:47:76:29:ae:34:3f:73:9b:b7:64:0a:df:79:
e2:be:5b:6a:c3:9a:fa:bd:16:09:49:f2:e3:ca:a5:ea:eb:ab:
61:f1:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:42:38 2025 by rpki-client