Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier: 1Uahyus2LTAM7Du2FO5Wrj/fMluiqvwbFrfK52N+O70=
Subject key identifier: 18:3C:BA:18:21:DA:43:A5:7A:A0:54:1A:AE:5B:9F:01:D5:F2:9E:F2
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial: 0197B6A1AB1958D64449E61DF57C439A938E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: cvWFAFimdxpih8VIYeDuEJacusRJAi77pyuYv013xaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ab:19:58:d6:44:49:e6:1d:f5:7c:43:9a:93:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=183cba1821da43a57aa0541aae5b9f01d5f29ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:9f:4c:a9:ba:e4:89:31:fa:33:1a:48:19:
31:3f:02:84:05:65:c9:78:80:5e:19:72:56:4e:97:
80:d1:aa:7f:c5:f3:6d:da:19:7f:ba:cd:aa:b6:3d:
93:4b:18:62:b3:5c:93:04:3e:57:78:a2:11:b0:62:
32:04:b5:6a:fe:f8:20:d5:5f:20:67:33:5e:07:5a:
6f:da:88:e0:bd:d9:39:1f:7d:bc:4e:a3:1b:ae:8c:
bd:f5:19:06:62:1b:ed:eb:ba:36:1c:3e:c1:01:c4:
9f:dc:15:37:49:7a:49:e7:d0:c0:e0:3c:12:61:1c:
0b:4b:ee:41:1e:6b:f8:57:75:08:c8:d4:3a:9b:0a:
a3:6f:a4:72:7b:d7:b5:85:99:97:c1:b9:b1:c9:de:
8b:a2:8a:54:48:91:8b:2e:3e:6c:1c:f0:d4:96:4f:
92:ad:de:de:78:cd:a6:d4:ab:7e:ba:c8:1b:67:c4:
0c:89:fe:54:37:f3:6d:d9:7b:b9:e1:da:f8:9e:61:
6f:72:99:b2:4e:61:7a:2e:06:f0:5d:03:4a:39:5c:
b9:49:a4:d6:e8:1b:61:11:86:c5:07:07:b2:70:48:
0a:e1:dc:b6:37:32:b6:96:e4:66:58:3a:59:ac:c0:
ae:32:27:a9:67:50:13:ae:5f:01:33:8a:5e:2f:d9:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:BA:18:21:DA:43:A5:7A:A0:54:1A:AE:5B:9F:01:D5:F2:9E:F2
X509v3 Authority Key Identifier:
keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5b:ed:d8:d7:ab:fa:2f:1c:94:26:d7:84:fc:b9:31:41:28:
8d:27:ef:37:1e:c1:e9:46:3d:fc:50:1d:70:a3:3d:52:9e:ad:
8d:2d:15:b5:85:ea:fd:7e:3c:cb:81:be:e7:e5:79:2a:15:d8:
59:70:a9:a1:2d:cc:71:8e:db:51:81:ec:ee:92:f3:a2:76:84:
03:28:e8:a3:b2:37:35:f8:20:bc:18:02:f3:a1:7e:cc:7a:d3:
13:82:2e:f9:9f:3e:18:c8:49:7e:ce:b1:d1:e0:c7:1a:28:5b:
6c:e1:c4:92:66:63:93:2f:bb:b5:5a:09:a3:f1:1e:fe:e6:0a:
b1:1e:70:bc:e5:49:fd:04:9c:97:c5:25:d0:62:0d:77:21:6d:
76:e1:57:ae:77:3c:ab:16:4e:66:55:43:d2:57:4e:ef:09:23:
f0:91:a7:bc:87:9b:0b:d8:51:7c:8a:f0:04:e0:46:12:b1:c9:
57:e9:ef:26:e8:8c:6d:8f:5f:c2:2c:79:aa:99:db:9f:a3:49:
e7:44:30:0a:3b:6c:ef:d6:50:63:7d:fb:35:c6:bf:73:bc:e2:
8f:98:99:97:48:d5:ea:2e:d2:64:a1:2c:3a:79:c3:93:7c:d9:
77:a8:ad:15:6c:5a:91:e0:17:e4:38:2e:bc:cc:17:20:70:0d:
11:fd:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:12 2025 by rpki-client