Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
File: Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft (raw, json)
Hash identifier: zG5q1Ck7f+bxq8ADidFPXdIb863fiYpcnj3G4JhM9A4=
Subject key identifier: C1:A0:06:80:62:ED:A0:44:F2:26:DF:37:C0:DF:21:4F:0B:D6:D5:B3
Authority key identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
Certificate issuer: /CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Certificate serial: 0196D7400D62DE17D6A745DF3F7C62794910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
Manifest number: 06CC
Signing time: Fri 16 May 2025 04:00:21 +0000
Manifest this update: Fri 16 May 2025 04:00:21 +0000
Manifest next update: Sat 17 May 2025 04:00:21 +0000
Files and hashes: 1: Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl (hash: bFJxRYhsYPvMFzwldMXQELkgJB5CBWoV1ru8GRsLqTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:40:0d:62:de:17:d6:a7:45:df:3f:7c:62:79:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Validity
Not Before: May 16 04:00:21 2025 GMT
Not After : May 17 04:00:21 2025 GMT
Subject: CN=c1a0068062eda044f226df37c0df214f0bd6d5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:02:2b:cc:55:d0:91:ca:e6:d3:a5:ac:97:
54:9c:8b:e2:ea:ec:0d:6e:a9:cf:a4:ab:a6:89:ef:
8c:5e:7e:1e:3a:e4:49:cf:e0:c5:a4:b1:61:08:f1:
be:50:8b:19:67:2c:f5:47:9a:78:df:ad:b8:7a:d6:
fa:22:a0:0b:94:19:97:6f:ff:c8:ce:14:98:d2:bd:
36:5d:f6:77:8b:a8:9e:50:97:5a:33:ce:68:df:2b:
1a:92:d8:04:c8:7f:14:bb:77:cf:bf:31:09:50:90:
6f:b1:55:45:a4:9f:7f:37:04:77:80:95:df:dc:6d:
0d:01:64:76:9a:1e:aa:6c:8e:01:5a:dd:1e:c0:c1:
9d:ef:25:fe:4a:ae:19:aa:35:1c:04:39:4d:8a:cc:
24:30:4a:05:7e:96:2c:5e:42:ac:43:bb:f7:ac:b1:
f2:16:5a:aa:7b:16:30:9f:6d:76:4a:a6:ff:1e:23:
c3:46:47:8b:61:ae:46:2f:0b:bc:46:19:7f:70:b2:
6c:84:b2:b0:0f:d7:5b:df:77:f7:aa:ac:c8:0e:ee:
2a:38:82:2d:64:b4:46:72:5c:69:06:e6:7c:e5:67:
98:bc:87:24:76:0a:86:3f:b4:2f:43:c5:8c:d6:2a:
ad:a1:f6:0e:14:35:a7:bd:4b:46:ef:f6:9e:1f:7e:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:06:80:62:ED:A0:44:F2:26:DF:37:C0:DF:21:4F:0B:D6:D5:B3
X509v3 Authority Key Identifier:
keyid:63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:ae:75:2a:68:66:79:c7:2e:23:b7:7a:d6:66:71:a4:9a:
28:2f:19:08:ed:2b:52:1c:32:ec:a3:e3:5c:a5:ca:a3:79:06:
5b:75:79:da:85:74:7c:69:a3:41:a0:c8:3b:72:05:dc:bc:f6:
c2:f4:99:f1:0b:ce:37:e7:b3:14:f6:98:a2:d8:9d:c5:df:1a:
e7:f0:28:24:9d:0c:aa:54:82:0f:c6:68:9f:ee:a9:0d:8e:be:
e8:6e:f9:75:1d:68:0c:0f:77:90:a8:65:2b:c3:9f:0f:f6:6a:
f7:95:ca:a3:f5:01:a0:9d:c6:48:9c:0a:14:ec:1b:e0:b1:78:
8b:0b:76:f7:6f:8b:dc:9d:cc:f2:a9:43:42:22:d2:51:12:54:
d6:4c:6d:34:1c:ab:14:99:f3:11:70:bd:8b:34:d1:40:b6:66:
3b:f5:28:27:46:c3:3c:b5:40:7e:b2:04:56:62:85:c9:cb:1f:
db:44:09:e1:69:31:b3:a4:64:9a:b3:82:cf:de:ab:93:d4:f2:
a6:b0:a0:d3:2b:ed:39:16:33:15:d8:f9:79:54:4a:43:8c:70:
8b:30:10:b2:c6:db:3f:cf:53:66:7d:06:80:47:89:87:ff:83:
dc:44:e2:a5:a0:be:5b:72:a7:88:8b:15:cf:03:9e:90:ae:ec:
05:f6:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:12:58 2025 by rpki-client