Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
File: YzMz1xUm9TOxwc8L6fwyG2IzltM.mft (raw, json)
Hash identifier: bE5iAi+7kk1UZQdjD2/ktyEvtdwgwuOYlTtCVTrOjdo=
Subject key identifier: AA:BA:04:EA:2D:46:9F:0B:40:42:56:CD:87:6C:4B:55:75:6F:A8:0B
Authority key identifier: 63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
Certificate issuer: /CN=633333d71526f533b1c1cf0be9fc321b623396d3
Certificate serial: 0197B745938A9F9E3AC8EAD5E22318226A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
Manifest number: 064A
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: YzMz1xUm9TOxwc8L6fwyG2IzltM.crl (hash: DDjlIW+phMQBqTzvN3brifWOs8qnXPM1dv0hNz5r8hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:93:8a:9f:9e:3a:c8:ea:d5:e2:23:18:22:6a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633333d71526f533b1c1cf0be9fc321b623396d3
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=aaba04ea2d469f0b404256cd876c4b55756fa80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bd:ff:a9:69:38:f3:3e:53:83:d8:88:00:7e:
ff:01:d8:5f:c6:e7:18:e5:1b:8c:66:3e:05:d4:df:
d3:73:92:1c:c5:18:63:63:ba:67:82:ef:de:b9:ae:
66:23:17:0c:c0:03:70:a7:4e:30:44:93:b1:d0:55:
0b:4c:1a:d3:36:10:d9:35:a3:d5:a7:2e:09:d0:a9:
89:23:3c:6a:b8:d9:ce:39:1d:d1:87:0e:c5:a8:47:
ab:65:4e:ad:a5:a8:fc:7d:d2:2c:fb:31:50:72:cf:
d9:8e:87:f3:35:c3:69:3f:02:a9:2f:9a:b1:c6:47:
c3:61:14:70:c7:1a:00:84:f1:39:0e:c3:d2:ca:68:
91:58:f6:6f:1a:33:a1:e8:6e:ed:fe:5f:df:45:39:
e1:57:ab:25:1a:6d:8b:ba:96:2b:16:09:8a:10:c8:
ac:2d:25:e9:93:11:7c:72:05:6d:72:9f:89:78:e5:
27:57:38:b8:b8:67:96:3f:0f:b5:8a:9f:e1:a1:5e:
32:42:9d:31:e5:d3:81:47:ef:30:79:3c:3e:14:e6:
cd:67:19:87:60:51:d2:15:53:8a:41:2b:7e:a0:a1:
80:5e:da:74:72:69:27:79:bf:ff:78:03:56:3e:a3:
45:0e:33:6b:3e:b3:a4:35:aa:77:a7:b9:cf:cd:af:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:04:EA:2D:46:9F:0B:40:42:56:CD:87:6C:4B:55:75:6F:A8:0B
X509v3 Authority Key Identifier:
keyid:63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:36:1b:21:72:af:15:1a:1a:0a:bd:88:6f:b9:a8:78:a6:
93:ed:d5:97:e1:9b:21:43:43:07:68:91:eb:d3:e0:9d:13:60:
14:c0:9c:80:81:0f:c5:c4:b6:36:13:fd:8e:22:30:9c:26:5a:
44:27:80:58:93:0f:56:09:0f:9d:a1:f5:bb:b3:b7:9f:21:91:
a1:c5:6e:d3:9b:cc:81:99:48:1b:54:dd:a3:ec:00:8a:a2:3e:
05:78:28:83:ea:7a:f4:b8:1b:07:d8:f8:b7:ac:40:3d:81:e1:
e0:36:ca:ea:7a:35:13:0d:39:22:d4:b4:c8:5e:ed:c2:ac:0c:
7e:71:9c:64:8d:5c:78:9b:26:7c:87:f9:1b:82:db:70:0f:18:
fb:ab:7a:f1:75:72:bf:a0:27:43:f0:63:97:67:de:da:ee:b3:
75:5b:45:9d:bd:1f:d3:f3:b0:19:9c:c7:46:0e:cd:1b:a2:b6:
60:fa:f1:5e:8f:22:64:fc:54:bd:2f:6d:1d:ca:67:e5:08:8e:
0a:ff:8a:73:0a:ee:16:db:31:31:e8:3b:b9:bb:14:ad:85:d6:
b4:a7:fd:7e:1f:7b:29:26:5b:8e:35:56:d5:13:be:42:83:22:
65:f3:40:01:1d:19:e6:f7:46:2c:57:94:b3:54:4d:58:7b:d5:
15:50:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:49 2025 by rpki-client