Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: xwbA4uQzL17i31moZG//PqUWRP9y3v1bVqc8QsttU/Q=
Subject key identifier: 24:CF:B4:40:47:E5:5F:E2:37:C2:51:7E:5B:85:42:F8:69:97:32:41
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 0197B7457657B177A496029DB9E9F7F5C61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: VnCrSOtx17FKGx1vrFRSCYLtbBBQsv1F+B4IHWznLBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:76:57:b1:77:a4:96:02:9d:b9:e9:f7:f5:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=24cfb44047e55fe237c2517e5b8542f869973241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:a4:e8:ce:0a:0a:a9:ec:09:07:34:ce:6f:
4a:f8:52:a3:5d:78:a4:88:7d:c5:89:61:d5:ad:97:
40:e5:b6:00:35:55:a6:d3:f2:7d:e8:02:f8:2f:4f:
35:45:7f:4a:84:f5:ec:db:b8:99:75:f8:31:00:23:
a8:a1:68:44:19:e8:4a:36:71:c6:39:2f:86:8c:cc:
df:c6:81:dd:8c:b5:4d:9a:97:1c:5e:0b:b8:7b:eb:
f5:63:3a:69:f4:d6:08:45:a5:a6:e3:88:ab:c9:6a:
a5:43:60:83:75:d6:9a:1d:47:b5:7b:8c:b4:d2:01:
fc:d0:dc:82:eb:d6:41:3a:d6:04:a5:2a:c0:85:71:
1d:fb:b9:e9:fd:6d:ce:d6:d0:07:b9:db:11:9f:99:
e7:44:ff:f3:c7:16:94:af:ad:26:e1:0a:82:0c:c0:
ad:b5:54:b4:b3:f0:52:a6:31:b1:d4:a9:a3:91:7e:
28:79:9a:52:9b:68:82:ef:73:99:30:fe:e4:b2:3b:
e9:24:0d:10:26:61:10:e2:9b:b9:2e:55:4b:85:3f:
ee:e0:0a:4f:69:34:43:b8:49:ad:ea:aa:b1:f2:4e:
2d:52:84:45:09:63:7c:23:33:2a:ac:38:9d:8f:ca:
c6:b9:6a:cb:dc:1a:22:15:b3:fc:aa:a0:f0:e7:a2:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:B4:40:47:E5:5F:E2:37:C2:51:7E:5B:85:42:F8:69:97:32:41
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dc:8a:70:75:59:89:3d:6d:74:6e:a6:6c:d1:9d:da:15:87:
e7:df:fc:5e:a5:e0:af:27:bd:5d:d1:52:44:9e:15:a2:78:ee:
80:fd:13:78:5c:09:96:dd:96:1f:31:6c:14:0d:8b:42:7f:02:
f4:64:35:42:39:f0:fc:87:7f:cc:8e:b9:99:88:25:28:ac:29:
d2:b0:c5:70:57:c5:32:0b:9a:a7:0b:7f:86:ab:88:1d:0a:cb:
95:b1:95:7c:d5:b7:52:64:51:ad:9f:50:3e:e2:b0:79:8d:d5:
ad:25:5b:05:c9:ee:f7:12:54:d5:47:7e:19:44:c7:1d:1d:79:
71:47:6d:ad:13:94:3f:9d:27:63:d8:dc:88:db:52:7f:01:45:
af:aa:d7:dc:17:3a:d9:9a:8d:2d:a3:02:9c:e5:49:b3:49:d9:
93:4f:58:20:48:8b:b4:44:40:df:13:70:40:74:df:d2:93:b6:
df:fb:3e:09:b8:e7:59:c4:7e:d4:1d:34:63:51:65:0c:a2:1f:
e9:b5:d5:f5:5d:3a:66:79:c8:dd:b9:d1:22:e1:da:c7:1e:51:
0e:a7:5b:1f:f7:60:97:c8:17:7b:95:d2:31:2c:94:e2:c8:64:
53:c7:94:fa:44:f1:6d:60:37:f3:b7:ea:25:70:fb:c4:ba:1b:
57:09:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:56 2025 by rpki-client