Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: 5zAHPfLC9ra/AgNZITc30rancze9XBjnPTKYggZ+1wM=
Subject key identifier: 94:FA:58:2A:C8:78:10:BE:DE:A8:D4:13:95:DD:D3:1C:6F:A6:54:2E
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 0197B88ECDEC692D75FBB79BAC635977DC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 08BD
Signing time: Sat 28 Jun 2025 22:00:55 +0000
Manifest this update: Sat 28 Jun 2025 22:00:55 +0000
Manifest next update: Sun 29 Jun 2025 22:00:55 +0000
Files and hashes: 1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: yuBuscZJ6mtEbw1iO1Qu6m1+4jZwFwERJJGXJ3O4r+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:cd:ec:69:2d:75:fb:b7:9b:ac:63:59:77:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Jun 28 22:00:55 2025 GMT
Not After : Jun 29 22:00:55 2025 GMT
Subject: CN=94fa582ac87810bedea8d41395ddd31c6fa6542e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:24:5f:66:03:fd:29:9c:05:3d:3d:c1:3d:
d9:03:1d:1f:08:83:88:84:8d:1c:aa:9f:92:8d:30:
db:fd:ce:0e:cb:32:53:79:b4:30:c1:7d:69:d6:07:
c1:68:94:bb:59:c0:75:91:75:c4:89:c6:8b:90:86:
9f:ba:62:f0:7b:b3:bf:6d:64:d9:5e:e1:ed:e9:40:
4f:85:3e:72:6d:4d:c5:77:8a:59:d2:ff:bd:df:82:
1b:15:e8:89:5f:b2:8f:48:f7:5c:9c:09:40:fd:e2:
ef:2b:e3:23:ff:92:1d:c7:31:ed:07:29:34:5f:08:
89:3e:78:5d:89:65:3b:7d:62:5f:29:f9:9f:1a:27:
43:29:4c:30:e5:46:e5:e2:4f:7a:f2:bf:a1:db:0e:
7c:c5:78:f2:31:08:db:65:80:f0:cc:8e:97:30:a4:
2a:bf:03:c6:72:db:86:8a:8f:b5:c5:7c:7d:3c:7b:
fd:73:a9:54:0f:58:41:bd:af:83:5a:b6:b5:ee:3f:
10:83:4c:31:5f:af:02:8d:37:47:da:8e:d9:23:62:
9c:16:cf:51:3d:39:98:d1:b4:2c:79:b0:73:7b:f2:
63:cb:36:02:90:2e:82:f1:6d:c4:a7:98:a2:67:72:
90:31:89:76:24:25:7b:9a:6a:76:8f:11:9f:de:aa:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:58:2A:C8:78:10:BE:DE:A8:D4:13:95:DD:D3:1C:6F:A6:54:2E
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:01:94:a4:9a:00:b3:b1:1d:e7:65:22:cf:e3:1e:63:e7:
f9:ca:5a:e3:55:25:d9:53:35:d6:95:42:82:1d:f4:68:f5:52:
7b:aa:0d:07:aa:ef:27:c7:27:30:a1:a5:d8:55:69:e0:66:71:
95:ad:1d:c5:b8:85:84:36:fe:cd:b2:7a:3a:00:a1:65:11:f1:
a7:e4:58:95:23:e1:48:b4:e9:02:bf:e6:3f:3a:85:fa:e8:5e:
ce:70:a8:d7:32:26:f4:7f:d4:0d:f2:05:64:4d:d5:41:b5:32:
1e:cc:c5:1b:da:d1:50:fb:51:be:e3:04:68:9a:31:ee:1a:1e:
aa:41:78:3e:1b:8e:31:23:b9:12:75:ac:86:ca:74:e1:86:ec:
74:47:56:65:0e:18:aa:4a:f7:66:12:09:ed:60:a6:f4:48:d3:
fa:39:f2:4e:94:d9:57:94:47:9d:25:b3:76:b1:8a:db:0b:10:
29:e8:de:ef:e4:84:4c:ec:41:86:7a:f8:3d:fe:91:f1:b6:8c:
b8:cb:fa:ef:fc:53:41:5e:b7:c0:e4:33:60:74:d4:49:75:7e:
e7:a2:98:e5:02:55:df:e8:3b:8a:af:00:3d:d0:b8:1d:52:0d:
d2:12:96:46:ae:e5:9f:2f:7c:87:da:a2:49:be:a1:db:8b:2d:
37:8a:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:41 2025 by rpki-client