Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: +A3miNUrqNxv4iNXyShlvCslbTqLf0RFnL9hvBwGmsQ=
Subject key identifier: 15:A7:A7:BF:F8:07:9C:6E:43:08:A8:96:C7:5F:F2:16:67:B6:6A:6A
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 0197B7459370C292EEAB17E4ED6A64686101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0CA9
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: uCgOfv8S1vreRtuIdh+WDoXnGnU+vy8sie3849twaM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:93:70:c2:92:ee:ab:17:e4:ed:6a:64:68:61:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=15a7a7bff8079c6e4308a896c75ff21667b66a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:43:30:02:74:e3:e0:b3:36:57:c1:1d:77:
89:cd:7a:36:76:68:be:67:83:80:0a:5f:32:8d:5f:
b2:a5:91:1e:e9:5f:a5:6b:e7:86:d2:89:5f:de:f1:
51:6d:17:3c:01:7d:7a:64:d3:cc:e9:c0:94:bd:b4:
5a:be:f9:78:bc:e0:37:74:e4:57:10:31:a9:13:26:
8a:82:69:be:16:e8:19:97:5a:35:a9:a9:ba:98:11:
b0:49:80:9b:d5:f7:ff:fb:8b:95:de:02:61:f3:a8:
af:48:dc:dc:bf:40:61:cc:79:a7:f5:fb:e5:8f:28:
8a:97:0c:9d:d5:1c:94:82:5a:ed:89:4e:74:d0:13:
01:28:e4:f6:93:1a:9c:36:ed:f6:0b:92:d4:62:31:
a9:0a:e3:7d:67:4f:27:21:64:f5:fb:b0:16:c8:7f:
0e:b5:d1:67:75:6a:db:08:ae:af:74:db:87:4e:d9:
fa:56:16:a1:7b:1b:49:d6:7e:3b:9a:2e:ab:81:df:
ee:92:fa:06:50:c6:9c:42:11:33:b3:fa:5b:04:a4:
e7:83:97:19:60:34:96:cf:03:e4:bf:8e:20:e0:59:
a0:77:e1:0f:67:18:2d:15:2b:56:ce:41:b7:5d:b8:
55:ce:7a:0c:ea:50:61:a0:4c:9f:90:1f:9a:62:75:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:A7:BF:F8:07:9C:6E:43:08:A8:96:C7:5F:F2:16:67:B6:6A:6A
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:bc:a7:4b:79:35:e1:e5:9d:87:87:d6:fa:36:25:41:53:
e2:f6:ec:dc:5c:1f:26:f7:25:21:51:f4:89:54:3a:97:af:f3:
48:36:dd:b6:bb:6c:a4:c4:fb:8c:6d:3f:51:e6:62:9c:c1:6f:
f0:9e:13:73:42:96:be:5b:a2:63:ba:80:1c:a0:ba:05:d2:f1:
ee:56:d3:f1:f0:5e:d9:ac:64:1b:10:2b:90:a6:93:d1:36:14:
15:7b:5b:0c:ae:a1:79:1d:67:e9:ca:de:90:36:12:16:7d:cb:
ea:22:9f:98:cb:5f:63:28:91:29:e2:a8:90:a4:65:27:c2:8e:
cb:18:f6:6b:ab:46:b9:28:63:3f:2d:80:86:58:9d:94:69:3f:
bb:da:c9:95:9e:01:2a:b6:84:8a:df:c3:67:29:a4:74:68:86:
9b:58:4c:2f:3c:ed:6f:fa:55:0d:bf:4a:36:d2:e4:03:ea:84:
f0:48:f3:30:08:56:c1:17:d7:bd:fd:a1:da:16:9e:04:18:fd:
db:08:14:bc:e4:54:c8:1b:07:97:86:02:34:6a:50:79:21:38:
6f:e2:08:46:a6:f6:d1:b2:f5:b5:c7:eb:9b:ba:2e:d0:d7:6b:
47:8b:77:9d:f2:9b:21:60:40:3c:49:8b:8f:16:b7:35:b6:54:
58:fb:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:13 2025 by rpki-client