Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
File: Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json)
Hash identifier: t57R3eshHL1LjQuNIQEcIF8B2VpyXbZCv10LI/zEJL0=
Subject key identifier: 53:3E:86:F4:A6:81:EA:30:2D:9C:DD:50:F9:4D:78:2B:5F:FE:14:C0
Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Certificate issuer: /CN=638cc407ceff57b13b49455f30c20b761c7912b5
Certificate serial: 0197B7EAA0B54AF8D248BBC297142BD63E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
Manifest number: 77
Signing time: Sat 28 Jun 2025 19:01:36 +0000
Manifest this update: Sat 28 Jun 2025 19:01:36 +0000
Manifest next update: Sun 29 Jun 2025 19:01:36 +0000
Files and hashes: 1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: 97QByPxdNwUXrvc9/LAv0IvLSyTD8Ukk/8v9Z8fEVR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a0:b5:4a:f8:d2:48:bb:c2:97:14:2b:d6:3e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5
Validity
Not Before: Jun 28 19:01:36 2025 GMT
Not After : Jun 29 19:01:36 2025 GMT
Subject: CN=533e86f4a681ea302d9cdd50f94d782b5ffe14c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:d6:25:7c:43:65:ca:bc:2d:d2:2c:ee:57:
2e:d5:1c:fd:66:f2:65:e9:1b:4d:cf:81:fd:f1:84:
c4:2c:6f:92:80:e2:32:45:62:91:25:54:0a:a6:67:
21:e3:17:1d:aa:55:2b:c6:23:5f:02:9a:c7:72:19:
2d:47:2c:4c:87:93:fe:e5:9c:c8:00:fd:d2:91:ce:
a0:5b:36:9d:83:26:c9:94:9d:e1:d9:f1:c2:25:d8:
c4:16:34:65:b0:9d:bd:a5:e9:c9:54:18:f6:9e:ce:
3c:a6:61:bc:a9:03:c7:4c:e9:cd:e8:4e:e5:ba:f6:
e0:ad:f3:cb:df:ed:69:dc:45:ff:2f:e8:d8:47:75:
21:ca:ba:64:d8:66:28:23:5b:6b:65:a7:6a:6f:fc:
5e:17:ca:09:e3:d3:bb:91:1d:89:5d:a1:58:1a:f3:
97:b8:66:03:37:88:e2:97:65:52:91:0b:be:02:f7:
07:66:5d:52:cb:42:da:44:44:88:bf:dc:7f:c6:a6:
ec:d4:ca:f5:d9:77:5e:30:ec:0f:c2:e9:1b:7f:1b:
ab:95:3f:41:e8:cf:0d:08:89:68:ca:d7:aa:52:64:
7b:ca:fb:49:09:cb:c7:a4:68:84:72:de:7a:78:16:
54:ab:62:9e:d3:19:bf:0c:db:d9:fc:60:21:07:49:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:86:F4:A6:81:EA:30:2D:9C:DD:50:F9:4D:78:2B:5F:FE:14:C0
X509v3 Authority Key Identifier:
keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bf:34:84:fc:2e:2d:bc:48:3c:b5:d5:83:5f:d5:21:bb:cf:
f9:8f:f0:13:94:52:d9:61:c8:5f:61:a4:a2:c5:0b:3a:e6:f0:
ba:aa:5c:14:7e:99:53:7c:9f:08:e3:65:9e:d1:87:af:f6:ad:
9e:70:df:ab:c3:6e:2b:8b:37:ce:a5:24:51:9e:9b:55:78:5f:
67:a0:ff:d2:aa:3b:56:8d:4d:d0:cf:76:9d:8c:f6:64:0a:73:
02:40:9a:e0:e2:3c:c4:5d:f7:22:48:78:d4:dd:9d:71:8b:61:
56:01:cc:44:90:18:db:cb:d3:fb:66:bd:6d:95:2e:19:f3:c4:
80:c8:b0:26:60:f3:60:b0:b5:54:e9:2c:9f:d6:5a:a2:c7:af:
33:9e:15:d9:6d:f8:c8:64:af:10:62:76:aa:04:0f:a5:12:63:
22:30:6e:11:79:91:b6:c7:2d:4e:3e:ab:43:26:69:27:54:1e:
e2:4b:1c:00:61:45:9a:22:39:ff:93:4b:04:95:00:7d:e9:e0:
98:ad:dc:12:37:4a:d8:e7:c7:95:9d:d2:b1:b6:80:bc:50:54:
6a:15:ea:f2:9b:9b:75:d6:6b:b5:f6:7a:26:d0:9b:ad:31:aa:
0b:7d:72:bf:87:f5:22:18:9d:ee:4a:4b:be:f1:6f:d2:ab:b4:
70:25:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:13 2025 by rpki-client