Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: zeBtQQBJLa7CuSH4FlRrXlWV5fFXy0hEPxizubx7Bs8=
Subject key identifier: 67:FF:8A:51:14:A0:7E:D0:B3:14:21:2C:49:0B:98:2F:CE:BA:AD:75
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 0197BBC6D7BA6BC8124929C4818B2EBF1079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0D25
Signing time: Sun 29 Jun 2025 13:01:00 +0000
Manifest this update: Sun 29 Jun 2025 13:01:00 +0000
Manifest next update: Mon 30 Jun 2025 13:01:00 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: thn0Re8rySIsAbgZjC9jZupeIonKsFrzMjUz57SWM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c6:d7:ba:6b:c8:12:49:29:c4:81:8b:2e:bf:10:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Jun 29 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=67ff8a5114a07ed0b314212c490b982fcebaad75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:3b:6a:46:94:a4:68:bd:2c:b2:13:a1:a8:
49:99:3d:3e:bf:00:5e:87:44:a2:76:44:6e:83:d5:
47:86:e3:19:2f:16:d6:ec:db:b9:9d:7e:39:ea:38:
59:c0:b2:5f:92:5d:36:54:5d:bb:c7:96:97:e1:5c:
e8:82:43:06:87:2b:29:e1:8a:4a:f8:da:6a:7e:5d:
13:08:3e:94:0e:0b:e8:56:6c:e6:81:2f:6d:ec:33:
48:6f:71:33:a2:2d:cd:90:ce:39:92:63:c8:84:ca:
62:a8:94:08:ac:82:63:7c:ae:0b:0b:ef:6e:28:f7:
99:cd:a5:b8:a5:f2:74:46:b8:c5:fb:23:ce:a8:7e:
97:d2:8c:a0:0b:33:fc:f5:3a:02:37:79:8b:57:1d:
e8:d3:c7:e4:9e:a3:dd:38:7a:f0:48:c5:6b:c1:e6:
82:ea:14:3c:b5:ef:4d:3f:46:5e:92:ff:6c:c0:5d:
9f:08:b3:3d:59:27:3c:79:93:db:81:12:28:91:a5:
a6:ca:8f:12:4b:23:c0:cb:69:0c:bc:12:f1:76:9f:
b0:3a:0d:1a:1c:88:07:d4:a1:16:13:48:37:88:e0:
df:a4:19:e3:ac:36:b0:5f:c3:57:10:a5:00:54:b1:
44:61:e5:81:a9:06:65:e0:74:c6:ad:bc:69:13:b0:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:8A:51:14:A0:7E:D0:B3:14:21:2C:49:0B:98:2F:CE:BA:AD:75
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e4:f3:52:56:c5:1f:48:a1:5f:d0:f1:06:ea:4e:a5:80:32:
fa:8b:25:be:4e:16:16:a2:de:c8:a9:35:4a:fc:a4:79:37:eb:
10:3c:c4:c0:fc:21:97:a7:f5:b2:11:ac:b7:a5:f2:24:70:74:
85:a0:53:a9:5d:15:41:22:a0:63:3e:09:20:24:ac:7c:11:6d:
a7:20:53:4b:a6:5d:8c:f8:42:a1:76:ff:42:98:f7:ee:ea:86:
a5:5a:d9:e1:a4:b6:b1:c9:19:fc:de:41:76:bd:ba:b3:62:54:
1b:25:ea:cc:b4:de:24:a7:11:57:20:34:15:85:55:c1:59:b0:
6a:ae:4d:57:a4:78:b7:2b:2f:12:c8:ea:eb:0e:84:a8:fe:c7:
d1:2c:53:48:46:96:4c:bf:ee:ef:22:3d:2c:68:1a:2d:e5:bf:
29:b7:d9:e4:7a:4d:2f:25:c5:1d:ed:e9:bc:8c:f0:e0:41:dd:
d2:bb:a8:d4:82:01:cb:0a:36:d2:57:fb:71:b8:88:ed:31:a0:
e7:ac:1a:41:0f:2e:b6:57:4a:29:d2:fa:f7:70:25:5c:bf:13:
26:da:1e:86:18:52:0a:fa:7c:7b:e0:34:47:8f:e1:d9:47:d5:
71:00:92:49:2b:2a:1a:3c:02:6a:13:e8:eb:68:c9:41:a8:90:
45:16:00:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:21 2025 by rpki-client