Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier: 8xc3WvcefTi4RC1jHbbgW8C7RQZ/bwerm52IYHOYrAA=
Subject key identifier: F1:E2:0E:B3:48:54:21:A6:42:0D:D4:EE:55:33:96:8D:75:ED:2D:56
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial: 0197C6EF6375544F9AA885BF4F4B189D15EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number: 154C
Signing time: Tue 01 Jul 2025 17:01:06 +0000
Manifest this update: Tue 01 Jul 2025 17:01:06 +0000
Manifest next update: Wed 02 Jul 2025 17:01:06 +0000
Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: Ch3Be/RciM5bXoECvBoYWZ9GKAwR+I69Erx+lSLx5JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:63:75:54:4f:9a:a8:85:bf:4f:4b:18:9d:15:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Validity
Not Before: Jul 1 17:01:06 2025 GMT
Not After : Jul 2 17:01:06 2025 GMT
Subject: CN=f1e20eb3485421a6420dd4ee5533968d75ed2d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:9b:15:46:87:82:15:d4:b1:f4:b4:e5:ab:
8d:5f:e9:e2:d1:99:df:7c:95:fc:cd:ae:a0:e8:f4:
6a:16:90:ee:2d:e0:6e:1d:e5:dd:47:63:5a:49:10:
75:97:58:a1:71:f7:fa:6a:d7:79:a5:21:ea:86:e9:
d2:9d:e3:d8:52:d8:23:f5:6d:36:00:c4:80:68:3f:
5b:4d:75:ac:0f:6b:14:13:93:17:ed:d6:1e:67:a2:
d8:a5:b2:ab:d5:11:de:e6:da:04:27:53:67:ed:90:
76:6d:63:4a:93:49:c4:0d:1e:33:30:d2:ce:2a:45:
9d:70:c4:f5:a0:5a:f3:5e:02:5f:77:90:65:1a:83:
2f:2f:97:bb:1f:48:fc:69:50:a0:6d:5a:6c:33:f0:
94:91:51:3d:80:27:ae:a7:76:7b:44:cc:e2:38:c6:
f1:a6:f5:1f:79:6c:bc:c9:40:9c:9f:aa:f9:70:9c:
b8:71:ae:8d:17:59:38:88:91:62:72:b3:10:25:d3:
b1:31:59:4b:31:3d:46:da:65:1c:06:47:1a:88:eb:
f3:f8:2b:51:3d:cd:ff:3f:45:0f:85:7d:e7:bb:1b:
3f:e9:fc:d6:6d:80:28:28:8b:d0:37:58:79:b6:fc:
76:53:04:46:4f:e7:66:0e:93:d6:e4:ef:9e:cf:f6:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:0E:B3:48:54:21:A6:42:0D:D4:EE:55:33:96:8D:75:ED:2D:56
X509v3 Authority Key Identifier:
keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ff:bf:d2:39:e1:56:65:ed:0c:19:52:77:03:01:8c:58:cb:
e9:bd:22:71:76:0c:46:dd:76:b0:6b:08:09:19:b6:46:9b:24:
c1:03:ea:e8:72:c8:31:21:1b:b3:21:3e:b6:af:9b:ec:73:36:
7b:e3:78:7f:d9:58:c7:a7:a3:5f:3e:47:e1:33:3c:a7:6e:ed:
05:94:3f:ab:03:37:56:3c:7e:a5:fe:e9:b3:a1:71:1a:37:ea:
95:20:fe:bf:3e:55:12:d4:df:70:6b:84:ee:15:c8:c2:e6:61:
13:5e:31:0d:d8:ff:2f:b2:7b:e2:6a:c6:fa:e5:65:6b:1a:6f:
50:30:36:97:34:ed:7a:99:b1:e5:6f:8f:fc:ce:b2:20:04:77:
8d:03:6e:e2:90:4f:2c:b6:64:60:14:d7:a8:12:f6:23:3f:02:
0b:ca:54:91:db:38:4a:43:32:41:ab:cc:ae:92:f8:9a:ca:a5:
be:26:83:d1:41:4c:04:fe:d2:70:68:57:94:e0:e5:9b:9d:1c:
2e:c9:25:97:e2:38:2a:bd:2d:c4:b0:d6:38:c9:0a:ba:e6:7d:
59:8f:bf:9c:92:8f:15:14:b4:61:e5:81:d8:a7:59:cf:57:bf:
b5:bb:0a:4b:b9:f6:1e:e2:87:2f:4e:67:fb:b9:1f:a0:fa:70:
db:ac:86:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:46:11 2025 by rpki-client