Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: WoqRCGuLnG8+8P9LKtNlfZbhINqILgyQMverDC08MSg=
Subject key identifier: 3F:0F:F3:7A:AE:CB:72:94:BF:D7:A9:6A:AC:85:A5:40:D7:1C:69:83
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 0197BA7DD7CE3E220EDD4B153F3DE4D4EECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 10A4
Signing time: Sun 29 Jun 2025 07:01:38 +0000
Manifest this update: Sun 29 Jun 2025 07:01:38 +0000
Manifest next update: Mon 30 Jun 2025 07:01:38 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: 8k/tsR0xM2EZHMVINxpcinCT0WUTgGRhVPhD0eyU27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:d7:ce:3e:22:0e:dd:4b:15:3f:3d:e4:d4:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Jun 29 07:01:38 2025 GMT
Not After : Jun 30 07:01:38 2025 GMT
Subject: CN=3f0ff37aaecb7294bfd7a96aac85a540d71c6983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:fe:bc:3c:e7:ab:6a:24:6c:0b:88:c5:2c:
6f:ae:80:c3:83:13:06:35:42:59:90:1e:60:00:52:
09:37:94:e9:d9:f7:4a:1c:89:68:2d:89:93:b5:34:
bb:a6:87:6a:2f:bc:d3:81:cf:71:b6:26:51:4f:70:
b0:1b:78:20:cb:0a:2f:b6:b6:eb:90:4c:4a:63:fb:
63:7f:cb:3b:f5:80:25:8e:75:6d:6f:0a:43:9d:dd:
83:bf:56:74:58:dc:9c:01:f7:48:85:d5:60:a3:91:
11:4d:33:ef:0e:17:ba:25:b2:ef:89:ec:33:c0:29:
dc:b4:19:17:c3:2e:44:53:bc:fe:af:78:f6:a1:36:
43:6b:91:da:21:08:1d:91:7b:94:41:59:79:75:5f:
db:d9:23:5f:3f:d5:b9:4e:27:70:99:f0:78:a5:d8:
8b:26:e3:e4:76:57:4f:a6:79:8a:fc:e4:c7:2d:2d:
b0:68:47:01:fb:a3:eb:27:b3:9d:8f:a3:ca:b2:09:
ce:8c:6e:97:8c:12:81:de:3c:20:2c:0d:26:3e:dc:
ce:ab:9d:2d:e0:41:82:0d:bb:ca:d6:ed:af:be:27:
57:8d:06:cd:18:4e:72:a9:4b:8a:3d:c5:4a:24:ca:
0e:48:52:9d:ff:40:42:85:4f:ee:fc:77:9a:be:0b:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:F3:7A:AE:CB:72:94:BF:D7:A9:6A:AC:85:A5:40:D7:1C:69:83
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2f:b9:43:3c:37:07:0a:49:89:a4:94:e6:1b:76:5d:14:38:
61:5a:25:72:4b:c6:56:ab:3e:67:c6:ba:d7:6c:c4:3c:4b:55:
ad:c1:ac:3e:11:ef:6a:94:4d:57:e0:f7:3b:52:21:b8:ba:ce:
c6:aa:42:59:e7:70:6c:d6:bb:45:d9:85:b2:76:6a:6e:f1:e0:
d1:6f:e4:23:8b:96:8b:00:21:9e:92:28:6a:fc:bb:cc:f5:17:
73:5f:cf:6d:3c:93:38:1b:f8:1f:ab:cb:95:ed:41:5e:0c:8a:
a8:8d:29:73:14:6c:dc:33:27:c2:a8:76:64:00:b9:27:cb:7f:
96:69:eb:68:8a:0d:9d:54:5a:00:fe:f7:2d:01:4d:47:34:eb:
51:b3:4a:ba:de:6c:2e:e0:80:b1:46:6d:56:fb:65:ff:c3:65:
c8:49:4b:13:eb:0a:b2:e8:84:74:4d:59:a6:08:d2:7d:46:4e:
a0:01:7f:2a:15:a5:44:54:43:1c:f0:dd:1f:e8:33:4e:ee:ed:
19:59:82:3e:49:f4:b2:75:cf:c2:25:7c:c9:eb:11:8e:a2:a1:
c7:44:1c:9e:46:ed:69:43:b9:47:f2:8c:49:e2:f7:ec:42:15:
ea:9f:d6:db:c0:d9:71:c4:3a:7d:ae:53:5a:3d:4b:29:d7:4a:
37:7e:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:40:52 2025 by rpki-client