Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: SBr1jfnR33MMHlv+bZUBLdx9rKyvchWBVu2xQwLuFpo=
Subject key identifier: 77:C9:27:E4:B1:6F:09:8E:8D:1B:C7:60:2E:2A:82:01:96:57:46:2C
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 0197BA7D9582E659C4ACA4FA1302509B3A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 065E
Signing time: Sun 29 Jun 2025 07:01:21 +0000
Manifest this update: Sun 29 Jun 2025 07:01:21 +0000
Manifest next update: Mon 30 Jun 2025 07:01:21 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: T1MCGyYIOEV5+AlKjC5f3NAQH0Ch9Ln48wibiRsbYGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:95:82:e6:59:c4:ac:a4:fa:13:02:50:9b:3a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Jun 29 07:01:21 2025 GMT
Not After : Jun 30 07:01:21 2025 GMT
Subject: CN=77c927e4b16f098e8d1bc7602e2a82019657462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:11:97:2f:40:90:77:e9:af:31:95:40:04:
6b:51:c9:68:76:1d:14:9c:c4:ed:40:2a:c3:6b:23:
87:22:0e:0d:29:ba:f2:5b:cb:93:de:5e:20:6f:76:
b4:0b:0c:8b:8b:ce:ae:7f:e2:9a:a9:b9:b4:2d:b6:
81:0b:03:70:bb:59:3b:49:fa:50:9f:e6:62:a0:b7:
aa:51:8d:bb:08:ed:87:fa:46:f1:90:e8:c7:cd:cc:
27:54:a7:9e:fb:34:9b:be:9b:a2:b9:34:03:95:3c:
6f:cf:dc:1c:36:8e:92:91:83:c1:de:73:3c:46:c2:
7d:15:77:04:d2:f6:b7:4c:33:38:23:dc:88:82:53:
bc:be:96:3d:a0:0c:d6:54:8c:26:d4:91:c3:e2:b8:
83:be:53:4d:73:7d:68:dd:b8:54:fb:96:38:14:c1:
d5:1e:8f:72:b3:8d:05:66:56:77:2f:aa:40:3b:8e:
9f:d9:4c:5f:7e:25:81:a8:94:ff:c5:83:c2:a3:6e:
d8:a3:92:38:2e:20:9d:15:ff:a4:af:81:13:b4:cf:
70:12:25:f5:0e:d8:94:a1:8a:e2:74:29:a0:da:73:
56:49:71:89:40:f8:e0:55:04:46:ad:73:72:46:3c:
23:55:66:4d:73:e6:f8:09:a6:d3:2f:07:6c:b9:23:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:27:E4:B1:6F:09:8E:8D:1B:C7:60:2E:2A:82:01:96:57:46:2C
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5c:ba:72:a5:ff:5c:42:a7:2f:dc:a8:bb:e4:5e:5c:9f:b2:
c4:74:b9:e7:d5:6c:ba:af:b3:8c:eb:4a:01:67:fd:dc:e4:63:
6c:a5:cb:21:b7:5d:a0:24:57:2c:64:12:bc:43:db:51:87:0b:
a5:50:7c:84:98:41:0f:5e:0f:a7:9d:a3:f7:12:9f:54:9b:9c:
ba:c8:4d:04:a2:47:50:04:96:e1:4d:a8:4d:72:71:0f:54:18:
46:33:62:82:64:a3:36:83:e7:7d:3c:6a:f8:9b:ce:cf:90:48:
c7:e7:46:0e:37:dc:a7:af:06:65:3a:90:8c:df:de:a5:05:a5:
06:86:60:de:36:85:1c:f2:59:bb:57:66:de:b2:83:02:05:ad:
cc:9c:4d:a9:3b:4b:d7:54:b0:71:49:dd:d0:ac:52:93:b4:82:
6e:87:4b:fd:9f:e6:88:ff:0d:36:2c:e9:80:2f:3a:d7:90:c3:
19:5f:43:ca:58:ee:67:2e:b3:43:57:e0:14:26:52:af:16:bc:
1a:de:a7:ec:1f:46:10:0f:48:18:06:5c:b3:b1:2e:b7:ab:61:
41:ac:6a:dd:6c:bd:c8:c9:03:10:b5:35:a2:ea:e4:59:8d:cb:
ef:4e:6a:07:6c:9e:e3:1e:01:83:aa:3d:5d:79:95:e8:25:ec:
5a:ec:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:07:42 2025 by rpki-client