Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json)
Hash identifier: YwwXDPS92xfFs5TL1jRBx+ITT2lSbRg1tHQshdF/9eo=
Subject key identifier: 61:09:CC:E4:C1:87:D0:D6:75:58:05:DA:3E:88:F8:53:AD:47:F7:B8
Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Certificate issuer: /CN=258906554d8c8b428ede8cb35026860d3d7771df
Certificate serial: 0197B70F3CEEB61A5DEC7B38089C92924710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
Manifest number: 0C95
Signing time: Sat 28 Jun 2025 15:01:58 +0000
Manifest this update: Sat 28 Jun 2025 15:01:58 +0000
Manifest next update: Sun 29 Jun 2025 15:01:58 +0000
Files and hashes: 1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: VB7UrWwnx6QtHhDS+svCOvzWRnvioANUphEUHeQjw9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3c:ee:b6:1a:5d:ec:7b:38:08:9c:92:92:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df
Validity
Not Before: Jun 28 15:01:58 2025 GMT
Not After : Jun 29 15:01:58 2025 GMT
Subject: CN=6109cce4c187d0d6755805da3e88f853ad47f7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:0f:e8:a0:6d:d3:e0:60:ee:d5:41:fc:80:
f8:40:e4:b8:9f:63:38:7a:87:76:64:c4:26:79:95:
6f:c5:e0:21:94:39:c3:7b:af:e5:1e:47:cd:c5:db:
ca:02:3c:ae:00:ae:5f:df:84:d4:22:55:d2:d9:ba:
59:18:36:4d:0f:05:07:fa:14:c0:15:4d:7c:46:d9:
f4:e6:7f:84:ab:fb:f8:25:d6:56:ae:ea:9c:1c:70:
61:62:52:3b:b9:3e:d1:13:cd:dd:c9:df:58:d8:a5:
b8:ad:df:30:b5:ff:b8:cf:cd:2a:ef:cb:5b:8c:db:
3a:e4:4c:d0:d9:94:fe:d8:ef:c0:91:d1:73:62:36:
77:6a:93:92:ea:a1:26:f5:be:ac:0b:c6:34:9e:50:
e9:44:ea:af:1c:79:27:d0:ae:fb:a6:37:80:e3:49:
d7:84:a1:16:80:ef:d0:5e:78:f3:a6:f6:30:2b:6f:
8f:5c:36:44:d6:cf:e0:db:2f:5d:09:84:46:19:35:
0f:c5:66:5a:37:35:f1:97:83:2b:81:d9:b0:b7:18:
f4:33:9e:eb:7e:ed:96:6f:03:55:c5:dc:84:d2:05:
96:55:e7:03:44:a3:ba:1b:33:ac:48:38:3e:e8:84:
93:2c:06:17:ca:bf:42:18:0b:f0:e1:af:9e:64:04:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:CC:E4:C1:87:D0:D6:75:58:05:DA:3E:88:F8:53:AD:47:F7:B8
X509v3 Authority Key Identifier:
keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1d:f4:4c:62:45:06:00:99:7e:bb:18:3a:a6:8c:a2:08:52:
b8:28:94:a0:69:4c:be:7b:51:80:7d:67:92:57:0f:39:a8:a4:
2c:5e:69:85:d2:c7:90:65:13:0b:16:0f:eb:83:90:74:32:29:
ea:ea:9d:95:12:91:e9:3d:3d:50:4a:d5:72:de:a6:79:6f:d3:
19:bf:70:00:af:72:09:43:ce:37:3e:90:ac:ac:14:54:e0:29:
cb:3f:5b:cb:12:6f:4e:46:09:20:da:7e:88:54:b5:0e:d0:7a:
2e:a1:07:fc:30:fc:fe:80:b5:4c:6b:fd:02:de:94:95:47:76:
24:00:49:b1:9a:15:71:b6:a7:99:76:8f:17:ee:8a:a5:49:1e:
44:11:b0:89:cc:41:d3:4b:61:65:bf:96:d4:a3:2e:4d:8c:e8:
a5:03:93:14:33:a8:5f:c8:5a:63:b8:d7:1b:27:d3:69:dd:33:
cc:34:a7:e8:85:d7:33:53:36:68:2b:32:ad:4b:6b:1f:99:28:
b4:28:5c:00:81:72:83:48:36:6d:e9:9f:8a:50:07:0b:98:f6:
f1:c4:fa:21:a9:27:94:7b:45:a2:81:20:e3:e2:92:aa:e9:a0:
90:47:dc:51:71:dd:3b:17:58:10:77:c2:7a:5f:98:05:8a:14:
67:f1:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:40 2025 by rpki-client