Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
File: Yefv0ZrydUeUJswZJcW8Ls7ums4.mft (raw, json)
Hash identifier: zXvRwL50mSl+u5qCXIIQYcSNPWwDvgIWgs5eHHz/Yvc=
Subject key identifier: 46:20:81:92:8E:DC:3C:90:B4:2C:EB:09:66:A8:4C:ED:69:EB:1C:31
Authority key identifier: 61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE
Certificate issuer: /CN=61e7efd19af275479426cc1925c5bc2eceee9ace
Certificate serial: 0197B7EA141070D53829116AE1F29623F34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
Manifest number: 14C7
Signing time: Sat 28 Jun 2025 19:01:00 +0000
Manifest this update: Sat 28 Jun 2025 19:01:00 +0000
Manifest next update: Sun 29 Jun 2025 19:01:00 +0000
Files and hashes: 1: Yefv0ZrydUeUJswZJcW8Ls7ums4.crl (hash: EDzUS/0khMwpYME9NoqdOC/G7l74ejcWiBlL655O3xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:14:10:70:d5:38:29:11:6a:e1:f2:96:23:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7efd19af275479426cc1925c5bc2eceee9ace
Validity
Not Before: Jun 28 19:01:00 2025 GMT
Not After : Jun 29 19:01:00 2025 GMT
Subject: CN=462081928edc3c90b42ceb0966a84ced69eb1c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:83:a8:96:00:66:52:30:a2:8a:20:05:9e:
46:ae:58:d7:50:1e:40:83:e7:85:d3:9c:63:79:c3:
60:a0:1d:82:49:0e:34:66:b9:65:dd:a7:97:24:ff:
a7:40:7d:4e:5b:1d:e0:cb:98:7c:5c:ad:a7:23:0d:
62:1c:df:22:ca:6e:c3:78:15:e0:a3:85:4a:96:bf:
09:9b:e6:ba:83:1a:3d:68:fc:3d:49:7a:ca:b7:49:
54:ef:c7:fa:6f:d4:08:9c:21:52:b6:0d:a2:52:c9:
89:f9:b3:f5:94:7a:a6:32:20:ff:db:7b:74:94:c1:
79:f8:10:7a:59:75:71:92:ae:18:b9:f0:8b:b1:1c:
cb:e6:08:4a:22:b3:00:e4:78:5b:ae:3a:35:83:f1:
0d:80:71:16:b0:14:da:68:d2:08:c0:90:8c:e5:18:
26:af:1b:e6:95:f5:b5:eb:8f:41:43:a2:e7:e8:89:
18:97:d9:1e:f4:b3:06:db:bd:20:78:29:65:d2:6b:
a6:d3:83:7d:52:6b:48:83:e5:a9:39:a9:45:5e:2c:
38:d0:ca:7d:4d:03:c3:10:c6:06:3d:42:94:6f:8c:
37:f5:76:69:0d:f4:b1:70:02:7a:33:01:3f:a1:db:
07:f4:7b:d1:4b:19:a3:37:10:2c:b8:30:d3:2b:2d:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:81:92:8E:DC:3C:90:B4:2C:EB:09:66:A8:4C:ED:69:EB:1C:31
X509v3 Authority Key Identifier:
keyid:61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:38:f0:a2:3d:cb:5a:8d:40:e4:d8:34:3d:1d:f5:9d:72:
36:6e:34:63:77:93:67:1c:27:59:6a:57:43:25:6e:e6:0e:09:
9d:fb:89:08:61:7d:90:b0:47:47:84:a1:a9:4e:00:17:41:cf:
e7:bc:52:ab:13:0c:2f:5f:1a:3f:8b:54:f2:96:e4:e0:d6:d4:
76:64:f8:c2:b0:b4:f0:b7:b2:ba:fa:82:18:e7:0e:62:b3:6f:
90:53:d9:1b:bd:80:64:34:6c:f1:1e:1d:eb:65:a2:bd:9c:b4:
37:d5:0e:83:2f:d1:60:74:fa:5a:26:f2:8d:79:50:1c:d1:e1:
6b:59:7f:35:a5:0c:71:0d:60:08:3c:2f:6b:dd:f4:35:18:ee:
81:19:b1:f5:f9:48:1e:64:54:09:c7:d1:aa:98:b3:b4:16:9a:
49:41:45:e7:b0:f6:02:05:e9:be:cc:09:2c:76:60:ec:94:6c:
38:68:0c:00:96:30:f3:f5:b8:0f:31:bb:d8:3e:cf:84:10:34:
f6:1f:53:ca:c3:8c:15:f1:0d:22:69:10:5f:28:de:27:8b:7a:
ff:b2:c9:8a:6a:b1:7b:44:d5:88:52:c3:af:ad:8a:47:76:0d:
04:a0:59:a5:bc:d2:0b:a0:c0:14:0a:95:0f:90:5e:66:9d:f2:
06:76:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:06 2025 by rpki-client