Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier: XlkXjcvLV1T9tABOnnTzPTOSmc9yPu+sS9ddAqvNkr4=
Subject key identifier: 02:F3:6A:98:52:41:68:8C:2E:00:AB:FD:76:EA:1C:0E:31:43:F7:F4
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial: 0197B96B007235D96DBB39776CA6C0182AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number: 0F17
Signing time: Sun 29 Jun 2025 02:01:26 +0000
Manifest this update: Sun 29 Jun 2025 02:01:26 +0000
Manifest next update: Mon 30 Jun 2025 02:01:26 +0000
Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: 6kHBaavXAlbT/aVGEb+TVlxg0WllWTsZg/b/j7f3pNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:00:72:35:d9:6d:bb:39:77:6c:a6:c0:18:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Validity
Not Before: Jun 29 02:01:26 2025 GMT
Not After : Jun 30 02:01:26 2025 GMT
Subject: CN=02f36a985241688c2e00abfd76ea1c0e3143f7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:0d:17:08:db:cf:50:18:24:8e:58:20:1e:
b2:70:4e:94:08:c8:c6:14:3f:43:43:df:a1:e5:96:
09:b1:43:2a:7e:00:82:e4:55:f5:37:02:7f:dd:dc:
0d:e9:c8:0c:a9:ab:f3:94:bc:f2:02:59:fc:04:38:
e1:fd:48:b7:5a:43:be:eb:50:07:32:7b:0b:e0:87:
02:35:ed:ad:77:31:61:93:bf:b7:a6:c4:09:6c:0c:
36:43:12:1a:dc:5e:39:17:1f:f3:7f:27:da:6f:b9:
13:72:8c:ec:f0:d8:85:26:55:15:62:54:c7:7c:b6:
35:53:57:5c:ea:94:27:51:88:ff:de:6c:2d:c3:15:
d4:a7:d6:f2:88:99:71:ed:a4:4e:10:fe:89:d4:1d:
ba:6c:ce:d8:fb:cf:60:78:dd:5e:f2:11:09:d5:b7:
5e:31:9f:60:ad:ab:12:1a:23:76:0b:93:17:54:31:
08:06:02:56:9c:7e:e7:88:0a:5e:0e:5c:b2:49:c3:
51:8c:85:36:26:b8:32:23:ee:23:a4:23:26:d0:31:
59:7c:19:bd:e5:81:e6:0a:d1:8e:3b:c2:60:57:27:
b9:0a:c0:77:d8:c7:98:88:aa:b5:67:32:89:df:82:
85:5b:d7:23:9d:43:ae:0f:36:aa:9b:81:c5:0f:e9:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:6A:98:52:41:68:8C:2E:00:AB:FD:76:EA:1C:0E:31:43:F7:F4
X509v3 Authority Key Identifier:
keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5f:df:b4:2f:6e:2c:1c:1a:f4:03:0d:6e:36:31:3f:fa:f6:
18:ba:ee:9c:b5:e2:30:9d:9f:10:74:f5:82:a4:05:4c:12:c7:
ca:31:49:00:42:6c:8b:3c:1e:92:ca:99:23:98:86:49:c1:cd:
07:89:0d:74:30:ef:f8:a4:24:fc:c0:cc:52:56:9e:d2:b8:36:
5b:c6:13:6a:e7:20:ad:44:c8:47:05:04:41:a3:ca:f5:6e:7e:
2b:d9:cf:10:bf:c7:f8:ae:da:34:01:e2:65:07:c9:27:9e:86:
6f:0d:30:f5:cd:7b:98:6e:30:cd:4e:8a:c8:ca:05:2b:8a:af:
1f:e3:d7:71:08:93:07:12:10:6c:37:be:f1:1a:8d:c0:8e:aa:
ef:52:e6:3c:c8:19:39:9d:be:4a:7f:cf:3b:bc:89:f9:54:70:
c5:df:c3:ee:7a:19:47:02:f1:41:10:24:b7:0c:18:9d:3c:c7:
82:a6:0f:cf:e6:03:89:53:61:a1:fc:f3:11:16:b8:24:c3:27:
be:d1:13:df:09:bb:5c:a7:fc:b9:c7:69:10:33:90:19:f9:ad:
2c:c7:04:22:86:49:83:e5:35:d5:eb:17:b5:c3:f9:16:67:22:
6e:40:1b:e9:62:14:a9:cf:f9:5b:b7:9c:a2:ea:ef:ab:5f:4e:
51:cf:fe:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:53 2025 by rpki-client