Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: wMFUPEDL1MJVXRIS17ayXPEMUxJtMxU1Fv+4HiktAwQ=
Subject key identifier: 3C:EB:D2:89:9C:7B:F9:7A:F4:88:BE:44:FE:11:9D:4A:7F:B6:5D:C2
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 0197BF363AD31C592A8726B35C36A0D5051A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 0E
Signing time: Mon 30 Jun 2025 05:01:31 +0000
Manifest this update: Mon 30 Jun 2025 05:01:31 +0000
Manifest next update: Tue 01 Jul 2025 05:01:31 +0000
Files and hashes: 1: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: 6PQlcIzZG0SfP3YN5zbxUqDrKr6D3DEtL/7I98NBT0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:36:3a:d3:1c:59:2a:87:26:b3:5c:36:a0:d5:05:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Jun 30 05:01:31 2025 GMT
Not After : Jul 1 05:01:31 2025 GMT
Subject: CN=3cebd2899c7bf97af488be44fe119d4a7fb65dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:7f:b5:83:87:df:8b:d3:7e:a9:e3:71:53:
a1:39:b0:28:2b:5f:29:68:6c:74:b9:ab:58:36:bd:
0c:e9:42:d6:18:4d:00:6d:c7:ae:e8:5e:b7:fb:6c:
0b:d9:3b:0c:f0:ce:a0:d0:87:2a:f8:c3:73:69:be:
dd:17:d3:d0:2e:49:f4:41:91:ca:84:b4:ab:cc:ee:
96:58:d6:8e:94:ff:fe:ee:49:e2:23:00:a9:11:75:
f2:41:4d:3e:24:9d:7b:fb:6b:01:fa:b0:90:2a:64:
9e:0c:13:44:c1:c7:80:49:48:2c:2d:08:50:00:52:
c5:ff:d9:6e:ec:38:3a:e6:8a:25:d9:a8:93:bd:82:
ce:e1:17:63:bf:1e:b3:6e:b0:d9:c9:dd:30:1d:69:
45:a5:04:eb:b6:2b:08:2c:d0:5f:34:f0:88:be:59:
b7:4a:e0:77:57:77:20:a4:4a:b8:5f:00:8f:ed:8a:
c8:cf:80:9c:16:d5:8d:61:13:07:63:32:8c:27:37:
54:db:cd:cd:f6:85:0f:d0:0a:95:38:b1:08:96:0d:
cf:2e:b0:74:0b:79:8e:dc:4f:2d:8f:53:7e:67:a1:
1e:c5:b1:d7:c8:8e:c1:ad:f6:d7:19:3d:7e:5e:02:
6f:80:fa:47:3e:f3:7d:12:56:bc:6f:78:1e:96:bd:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:D2:89:9C:7B:F9:7A:F4:88:BE:44:FE:11:9D:4A:7F:B6:5D:C2
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1e:68:0d:84:aa:68:70:6b:24:b0:b1:cf:10:85:78:4b:44:
0b:a9:fc:f0:83:a6:e7:87:04:c6:59:cd:10:02:ad:6c:47:b5:
3a:46:b3:f2:2e:35:1f:53:83:0b:8a:ca:27:c9:8a:45:30:2b:
8b:5c:4e:0c:a8:19:0c:bb:18:06:bb:15:75:cb:e3:44:a2:b0:
d0:6c:b3:23:2d:2e:e0:af:9d:2b:83:c3:04:e7:b0:fd:81:4e:
42:d2:78:b6:18:44:7f:83:e2:44:d5:6f:13:93:9e:68:4b:d3:
6c:f1:1a:72:c4:57:db:32:84:8c:f8:0d:0b:49:12:7b:ee:25:
4f:72:95:06:71:09:92:c4:cf:b4:0a:39:6b:4d:a8:3b:16:4e:
44:e9:e2:89:69:4e:61:41:95:7b:af:d9:7f:f0:a8:ce:8f:7a:
84:a0:af:c5:be:c4:f0:0f:0e:f8:fe:59:9b:8f:14:e8:77:e4:
f8:77:41:ba:8d:ac:d8:ea:1c:8a:36:2d:1f:e9:28:49:85:30:
c7:d1:43:19:e2:e2:c2:a0:bf:c6:0e:ee:4a:9a:93:a0:8b:4d:
72:15:bf:61:01:2d:f7:e2:32:6d:d6:e9:c2:a2:26:a9:e0:c4:
74:6b:1f:16:e7:0e:c6:43:51:5c:4f:08:fd:dd:1b:e0:74:4f:
49:ff:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:10:00 2025 by rpki-client