
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: llpbio0v7/kK61eTjDD5gdDfwz4J7/5Iq05esU5XcGo=
Subject key identifier: 48:D4:EF:EF:BD:BE:69:61:A2:25:F2:45:36:66:23:E5:28:8C:08:19
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 0197C0ED2E6544D391F0C397825FCC0C3733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 0885
Signing time: Mon 30 Jun 2025 13:00:58 +0000
Manifest this update: Mon 30 Jun 2025 13:00:58 +0000
Manifest next update: Tue 01 Jul 2025 13:00:58 +0000
Files and hashes: 1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: DRY5SJb9cI03VqUZuBppqlIvO9LXwUEWJ4brrmXs8QQ=)
2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:2e:65:44:d3:91:f0:c3:97:82:5f:cc:0c:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: Jun 30 13:00:58 2025 GMT
Not After : Jul 1 13:00:58 2025 GMT
Subject: CN=48d4efefbdbe6961a225f245366623e5288c0819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:21:84:0c:df:d6:44:4f:d8:14:fe:5c:8f:
3b:e8:03:2b:16:a4:48:49:26:87:e9:3e:9b:78:d1:
56:19:3c:55:a9:d1:e2:67:87:ad:c7:67:94:b2:6a:
6b:c9:c1:ff:fb:cd:f3:91:53:a6:ff:29:08:80:13:
28:e8:f5:01:ac:22:8b:8c:d5:83:9a:54:39:04:dd:
99:3a:2f:9d:7f:81:c9:d1:3f:0e:8e:86:82:00:c4:
13:da:ea:4e:3d:81:6c:99:cf:5f:4d:c9:45:7f:1b:
78:24:1e:b4:05:a8:bc:45:cb:05:f6:94:e7:a8:a2:
2c:e9:09:08:57:25:17:fe:51:ef:9a:39:95:42:d4:
95:02:b9:45:a2:07:b6:16:16:fc:2b:32:71:5f:85:
52:e0:e0:06:57:c8:18:16:d2:54:ea:cf:d2:3b:73:
54:3b:11:1d:ed:0f:dd:23:39:49:95:76:5c:6d:ef:
8b:df:51:4a:89:fb:9a:94:38:f7:46:0f:5a:ef:8d:
7f:7c:4f:df:34:1c:2d:a3:8d:62:82:c8:8c:19:eb:
da:45:94:75:ab:17:d1:5c:58:4c:eb:bd:0c:b0:86:
43:a3:76:7d:be:1b:cd:9d:3c:aa:96:68:3e:3e:86:
de:04:b2:70:bd:03:5a:09:79:2a:e6:87:73:87:2b:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:EF:EF:BD:BE:69:61:A2:25:F2:45:36:66:23:E5:28:8C:08:19
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e7:8b:26:e5:08:b6:2f:22:da:8e:9a:12:0e:61:d8:b2:0d:
5f:a8:5d:28:da:68:b4:6b:f7:8e:c2:59:d8:de:38:91:20:8f:
90:60:6a:9e:69:f7:35:0b:e1:6f:a8:f2:26:bc:aa:06:69:db:
3f:81:bd:cb:d6:a8:b7:78:49:97:08:76:5b:b7:7f:1d:6e:e1:
86:ca:c7:11:ab:8f:bd:0f:8c:2c:64:e2:90:25:0d:70:fa:87:
3d:e3:27:94:76:5b:63:d7:6e:2e:fe:0d:2c:28:29:fc:bf:ca:
f8:3d:62:c7:a5:fe:88:67:e3:08:5b:ed:b8:d7:28:f4:7e:c2:
ab:59:58:a2:ae:1c:c5:8b:2f:23:15:9d:0b:e5:da:a2:c1:a3:
bc:64:57:9d:c9:20:cb:30:7f:04:05:d4:7a:84:f0:30:a3:91:
9d:e3:a2:19:88:14:0b:99:32:e9:e7:4e:c5:67:5b:f8:6d:f8:
31:0c:8b:8f:8d:59:1f:f7:a4:5a:6e:f4:07:12:24:e0:d2:6f:
92:9b:e8:91:dc:45:10:03:87:f0:3f:2b:84:5b:5e:58:ce:2a:
8f:35:4a:1f:9e:74:51:a9:98:de:d3:90:9f:b4:b2:73:95:1f:
15:79:3e:5e:fb:68:b3:b9:0a:b6:73:f6:8f:f2:7c:46:05:a2:
5d:2b:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:39:06 2025 by rpki-client