Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: vxZslp2EofkV8PU543dVGaDrwsbCPmb37gPNgm70h9Q=
Subject key identifier: 37:C4:0F:84:26:5A:F5:EF:DD:9A:EE:5B:67:3C:06:A4:9D:CE:09:D6
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 0197B77CB1C743899C52CBEDDE20C2E687D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 05DF
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: FU3J++5ZQ/775K2mXxSYzS8BZQPkbqwugv9zonHhZMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b1:c7:43:89:9c:52:cb:ed:de:20:c2:e6:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=37c40f84265af5efdd9aee5b673c06a49dce09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:0e:f6:15:4b:c2:67:92:5b:1a:ca:b3:7e:
b3:38:47:b2:f7:67:c2:f3:b7:3e:8b:4b:30:ec:41:
0d:b3:61:65:09:ca:9b:f7:57:54:1a:3a:ad:b0:04:
16:21:f3:57:74:21:be:5c:ae:65:74:23:b1:0e:0c:
44:a2:2d:3d:86:8d:cd:c5:b5:d7:82:21:40:e3:68:
d9:7d:21:d8:d2:03:0e:e7:8a:cb:2e:5e:0c:6f:92:
c9:4d:b3:03:7d:5c:6a:67:71:00:13:bf:9f:c1:86:
d5:5d:6d:e4:49:9c:be:fe:a0:ed:cd:23:cd:ad:65:
37:d1:4d:d2:a3:22:c3:47:8f:0a:c5:1e:19:cb:85:
22:2e:fb:0f:a3:fb:55:66:55:f4:b5:24:c4:f3:4e:
f8:a2:8b:32:bb:08:f1:d7:56:e8:76:a4:c3:b0:af:
73:9d:f0:9f:4e:6a:73:72:c3:c3:f4:57:16:b3:bd:
92:76:74:04:f1:11:b1:ed:7e:d6:c2:ba:56:99:e8:
1d:48:71:9a:b6:c5:ce:57:91:e6:af:80:c9:ce:7d:
36:79:43:1f:e4:62:c0:21:f1:05:f3:d4:70:02:32:
bf:ee:70:5c:91:b5:41:dd:49:1b:e7:15:9e:e7:36:
98:0a:d3:73:a9:76:33:03:95:a9:82:e4:2c:b6:75:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:0F:84:26:5A:F5:EF:DD:9A:EE:5B:67:3C:06:A4:9D:CE:09:D6
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0d:55:71:24:7f:86:be:7e:8a:8c:15:0a:c2:2d:cc:20:b8:
c4:cd:f2:12:dd:49:70:5a:94:bf:31:dc:28:40:a6:5f:fe:e1:
1d:d9:08:09:9a:73:c6:ec:49:db:0c:7b:c5:df:5a:32:99:d4:
57:eb:9d:b5:c0:12:25:cc:ad:6a:b0:5b:4e:e8:82:bd:92:44:
d2:0f:01:14:c2:2e:c0:a9:35:b5:e5:61:79:fc:9f:73:c8:be:
7a:1e:44:08:93:8e:f8:67:b7:02:cd:bb:e8:45:2a:b8:56:48:
95:f1:c1:3a:fa:9c:1c:f3:5a:25:65:59:92:0b:98:2c:8b:76:
5d:6e:2a:3e:af:ed:d1:1d:13:6a:45:ef:ab:88:dc:59:90:3c:
a3:0a:8b:6a:f0:0d:86:73:92:01:11:78:56:2d:bf:42:b6:c7:
31:0e:0b:9e:db:4e:22:41:c1:77:54:02:4c:04:77:5c:7c:0d:
2b:5a:3a:be:ec:ff:d4:ab:1c:75:b2:1b:db:fb:fd:8e:81:15:
ab:9e:05:7c:5e:1c:0a:03:d3:5b:61:65:89:71:82:f0:11:da:
15:a1:35:1b:6c:42:1b:be:d9:56:46:a1:e5:2e:32:26:e6:b0:
66:6c:11:88:65:b4:a6:d8:23:9d:44:97:43:1e:ee:28:3c:df:
17:3e:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:54 2025 by rpki-client