Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
File: YTChAogFFzqiJUSk67mECskbyNA.mft (raw, json)
Hash identifier: OmomQ96W6QlpN4YUQE5mK5Q5Xb/4wRLvcRU/EaRxvPs=
Subject key identifier: 70:97:F1:F2:71:02:3F:07:52:C8:B8:F8:DC:8E:E2:C3:C6:2B:31:77
Authority key identifier: 61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Certificate issuer: /CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Certificate serial: 0197B6A1C61652F8BE8607489249EF03E37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
Manifest number: 0D15
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: YTChAogFFzqiJUSk67mECskbyNA.crl (hash: +YLt1KvDcF1UthkhY09HuzEDE5+l/27gUo1YQDLW41s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c6:16:52:f8:be:86:07:48:92:49:ef:03:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=7097f1f271023f0752c8b8f8dc8ee2c3c62b3177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:d3:94:58:56:bf:61:22:8c:bf:db:ed:f0:
62:4a:7b:88:7b:9d:39:bb:07:63:9a:fa:79:1d:d9:
cc:6f:e6:64:a6:22:2a:5a:f0:04:9b:4e:26:d1:aa:
d5:14:05:53:23:50:be:29:a7:5a:77:08:5f:bf:e7:
fe:0d:87:37:61:df:33:df:dc:df:18:49:96:57:09:
ad:8d:78:a3:3e:38:37:d2:5b:b6:b1:dc:43:f5:48:
87:a5:98:12:33:0d:85:64:a3:e1:af:db:12:e3:0e:
ef:40:8f:05:d0:38:f4:a5:d4:46:98:36:e3:45:aa:
76:05:23:9f:ee:0d:43:af:50:17:f0:09:ce:86:ea:
7a:00:e5:51:7c:94:9d:72:16:2a:7c:67:50:75:a0:
82:e2:5d:aa:8d:48:da:ec:74:c5:33:c0:5c:56:f3:
ec:67:35:55:4d:98:35:66:8f:30:19:5a:c3:e1:7a:
12:84:05:59:0b:08:f8:3b:80:f4:5c:61:89:18:bb:
1a:60:c2:c6:80:48:21:08:8b:95:09:5a:fd:13:66:
69:36:10:ef:34:da:e3:52:c4:4f:5d:34:4d:76:cb:
21:59:55:6a:4f:3e:1b:21:61:62:ca:49:be:8f:e5:
9c:4f:32:be:fd:6e:a1:c5:03:09:d1:3c:41:63:1d:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:F1:F2:71:02:3F:07:52:C8:B8:F8:DC:8E:E2:C3:C6:2B:31:77
X509v3 Authority Key Identifier:
keyid:61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9f:e8:82:00:03:d9:ee:b2:92:fd:1d:d1:2a:28:1b:c7:66:
29:12:71:1d:8a:01:c3:44:7b:59:51:83:98:e8:58:f6:e4:44:
c2:16:bd:27:7f:62:ec:da:8c:7e:00:bf:79:99:f3:d0:6b:47:
99:39:14:14:39:80:f4:d5:21:50:a9:ae:da:19:c2:aa:9a:64:
80:00:a0:3d:79:18:6b:89:90:cb:00:ea:f0:7a:92:02:ff:01:
0f:f5:2b:22:7a:d3:a9:9d:00:2e:2b:1c:11:37:ee:b5:57:8a:
d3:c8:b3:fe:b0:a7:4d:97:0b:7f:85:9a:fa:6c:f3:e9:64:43:
0d:d5:b5:ae:9f:fd:98:7f:17:f9:56:92:04:34:fb:84:cb:bb:
31:b6:53:cb:66:17:bd:a8:0b:e9:af:77:fa:dc:b9:fd:6c:27:
fb:2b:33:73:79:8d:b2:83:29:9d:86:04:4b:85:d0:35:00:45:
a1:ad:d0:ac:d3:c3:8c:fd:ec:2d:55:30:6c:07:3e:72:b0:54:
64:11:46:a1:b5:fd:f4:62:1b:57:b2:e4:8b:e2:5d:60:3e:63:
85:68:50:06:ce:1b:49:fd:eb:3d:33:e3:ba:52:89:70:3b:34:
5e:28:99:57:15:49:25:6f:66:8e:91:b6:88:63:7f:9b:a0:8f:
34:c6:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:42 2025 by rpki-client