Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: 0KKs3UqRj37etydMl6+cZBOXmiEzMkTNO+VBAVVg8Y8=
Subject key identifier: 7D:AB:F0:1E:71:F3:65:25:DD:B5:12:F8:0A:43:B1:32:4E:02:77:DD
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 0197C6EFDCEA35EAEB4F72329B47C1397474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0C8F
Signing time: Tue 01 Jul 2025 17:01:37 +0000
Manifest this update: Tue 01 Jul 2025 17:01:37 +0000
Manifest next update: Wed 02 Jul 2025 17:01:37 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: ZvEpx20rlvq6AEObCpyvrPW/mWFGX8zCNnLkdEziHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:dc:ea:35:ea:eb:4f:72:32:9b:47:c1:39:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Jul 1 17:01:37 2025 GMT
Not After : Jul 2 17:01:37 2025 GMT
Subject: CN=7dabf01e71f36525ddb512f80a43b1324e0277dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:f6:fe:c4:47:c7:11:1a:86:6a:cf:cc:c7:
6c:fe:d2:99:b0:db:f5:38:dd:e2:ba:ad:88:32:d4:
d1:d6:c2:0c:be:9f:8d:91:b1:c1:32:c5:48:74:47:
03:8f:e0:0c:5c:f3:85:a5:a2:de:80:a0:44:cb:88:
02:7a:11:b5:8b:8f:bc:1a:3b:e1:ac:1e:50:03:28:
b7:0a:49:54:b0:13:e0:59:af:45:bb:86:57:bc:a1:
95:ca:fa:e6:da:87:9f:52:62:66:c3:7e:49:d8:53:
bb:c6:d3:61:1b:a0:53:e8:58:bd:72:f7:f9:a0:cb:
0d:09:0a:f2:d6:15:9a:e6:e8:41:7c:43:52:a5:2f:
60:47:3b:70:f5:6e:43:30:2d:4e:71:5a:5a:4e:af:
a5:52:22:3d:4d:60:1f:31:b2:24:b3:54:dc:96:ab:
eb:6c:6d:c2:3b:5f:3c:f8:2c:ec:a1:82:9c:5c:d2:
57:23:67:f5:8c:17:b0:e9:2a:da:80:1b:77:23:c3:
86:e3:aa:94:8f:c2:3a:31:73:e5:bc:c0:d4:c4:1e:
d7:7f:8a:43:27:8b:c3:02:6a:f9:e2:6b:9d:fd:08:
6a:27:4f:68:4b:48:e6:77:25:09:8a:b7:06:d3:4a:
ad:54:5f:28:b5:0c:ae:df:54:a0:97:df:a0:52:d0:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AB:F0:1E:71:F3:65:25:DD:B5:12:F8:0A:43:B1:32:4E:02:77:DD
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b1:c5:ac:e0:af:d4:e2:16:e7:8b:a1:db:94:7b:f3:3a:f0:
dd:f7:00:d3:d3:2e:72:52:06:14:56:15:ee:d5:0d:fb:68:f4:
7c:e2:73:bd:63:3f:65:fe:e3:9f:20:e3:10:32:30:a2:ea:38:
cf:91:73:8d:cf:be:ad:a7:be:77:a8:dd:2d:4a:51:4d:43:1f:
f8:ac:c8:aa:8a:4e:a6:62:da:20:35:8b:2a:e7:28:a0:09:1c:
35:57:4e:3b:f9:4b:ae:34:69:37:d1:db:9a:6b:ce:af:2f:6d:
59:76:7a:2d:e2:7a:e1:71:06:0e:a4:08:4d:eb:80:35:06:34:
0a:4e:fb:aa:fe:63:c7:00:96:7e:93:c7:48:81:9f:a4:ec:a1:
6a:94:7a:ab:44:78:ce:8f:8f:a0:74:3c:fe:5c:f2:71:da:0c:
63:b6:ec:f6:6f:8b:10:64:c4:61:32:e6:90:00:44:e3:96:f1:
e0:dd:db:2c:4b:14:d9:df:a6:c9:e3:8c:11:f5:08:94:17:90:
8b:89:eb:32:bd:6e:fd:6d:f3:91:21:cd:9c:f9:16:50:63:b1:
f1:23:64:48:ed:93:7b:d4:08:94:a8:7a:08:da:d9:8b:15:5e:
a1:e7:c2:fc:11:7a:62:03:b5:74:e9:01:ad:b0:cc:78:73:89:
48:08:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:56:33 2025 by rpki-client