Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: LpSF0rM57x0lGVDtEYIgR1Vw1qPi3Zqj9oldJ0TZt7E=
Subject key identifier: 90:CD:FB:77:CE:A0:4E:A1:76:76:F1:24:F3:E8:36:A5:86:35:E8:87
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 0197B93378D0FD446AC08E93ABC343D2C253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 0F35
Signing time: Sun 29 Jun 2025 01:00:47 +0000
Manifest this update: Sun 29 Jun 2025 01:00:47 +0000
Manifest next update: Mon 30 Jun 2025 01:00:47 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: Aq5We1GD8K5Xp4di/TbZ4bZGYlTqwn2pmLqoQuZIze4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:78:d0:fd:44:6a:c0:8e:93:ab:c3:43:d2:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Jun 29 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=90cdfb77cea04ea17676f124f3e836a58635e887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:63:f2:43:26:4e:d0:48:38:27:d8:db:ac:
5a:b8:d3:27:15:89:34:d6:ac:ef:a0:01:bf:36:06:
aa:e5:43:7d:8d:dd:23:09:b7:da:e0:ce:3e:5b:24:
c7:30:9f:74:3a:30:73:91:94:33:e6:9e:af:52:74:
a3:2c:fa:79:0a:3f:52:2f:87:33:c6:87:f0:39:e6:
f2:18:d2:42:59:ca:6a:3f:84:de:67:82:08:f7:17:
88:12:56:5f:c8:9d:0c:24:28:db:dc:bf:57:f0:14:
52:61:21:48:ec:3a:74:ae:bf:97:c1:b5:8e:ed:2f:
87:99:a2:53:6d:d5:9d:97:53:eb:a7:0b:ea:6b:4e:
ff:e2:07:2c:df:56:62:a7:ae:1e:e8:24:35:d1:d9:
29:11:3f:3f:2d:e9:f4:4b:76:10:7f:16:b0:69:aa:
99:0d:b5:8f:d9:e0:72:07:f5:c8:bd:18:67:2c:f4:
bf:db:65:e9:5d:1f:6e:fd:ea:9d:b7:d0:84:cb:96:
8f:88:50:e2:5c:de:44:b8:80:55:47:84:74:b0:0a:
9c:0c:0b:6d:9f:44:e5:e3:0d:e4:7a:dc:64:01:32:
59:30:f9:93:76:ae:95:27:14:09:36:a1:67:65:03:
b0:6e:5d:ea:56:36:58:2c:5c:52:20:00:42:a4:a1:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:FB:77:CE:A0:4E:A1:76:76:F1:24:F3:E8:36:A5:86:35:E8:87
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0b:2e:1d:9a:af:12:03:a3:c1:81:0a:dd:1c:d7:d2:57:ed:
26:06:ab:7b:47:9e:b5:07:a5:6e:60:9c:fe:1b:61:ae:5a:e2:
01:6f:88:39:37:4f:8c:4c:61:57:77:6d:95:06:9c:0f:d1:7e:
ec:db:08:a0:58:ec:cc:23:0e:b8:84:e7:e8:15:ea:a0:df:cc:
3d:1c:dd:b6:73:85:19:23:29:23:02:9f:36:8c:2a:9f:c1:12:
1d:39:71:38:09:85:5d:5d:03:e5:67:c7:0a:0f:ff:a1:f7:21:
bd:54:4b:5c:98:59:64:39:51:ad:88:36:af:1d:81:b8:c3:d9:
76:fe:fa:91:bb:d1:71:e3:0f:38:49:12:26:bc:6f:d4:90:42:
c3:87:78:92:84:ad:04:e9:71:6c:88:41:ba:88:bc:c7:f3:70:
61:51:d5:4a:4c:f7:c8:be:59:69:de:07:ff:b7:7a:81:f9:cf:
94:b4:bd:58:27:00:3c:43:eb:c9:1d:ab:45:62:dd:e9:63:a1:
55:f4:f0:3b:d9:b7:88:92:03:94:c8:e7:7f:d8:d4:90:ca:3f:
93:7b:a7:6c:55:36:df:b0:80:22:39:b6:71:20:3c:2c:35:54:
87:41:53:c3:28:47:ac:46:ba:ba:af:2a:c9:2f:0f:f9:7c:9c:
f2:b9:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:37 2025 by rpki-client