Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
File: Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json)
Hash identifier: oLHhxAUawhcEU4mUv13warjee21oAeT0c4LUYvHMcQw=
Subject key identifier: D0:08:F8:A9:AA:CC:35:92:BA:B4:A9:00:51:B6:0E:CE:D8:45:2A:6A
Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
Certificate issuer: /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Certificate serial: 0197B6A1C25AAE1D7369BE0D85D3F341186C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
Manifest number: 090B
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: yogD5/bfvKqELO6BOGVnNE2zfcGbQPsJsZKJW+Ri4iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c2:5a:ae:1d:73:69:be:0d:85:d3:f3:41:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=d008f8a9aacc3592bab4a90051b60eced8452a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:ad:3e:13:5c:de:20:68:7f:4d:f4:42:53:
69:f9:b6:ef:63:9a:41:fa:dd:4b:01:cb:f3:24:dc:
0f:79:0d:90:d9:53:f3:3e:27:d5:74:08:55:9d:2f:
ad:25:54:8c:c3:0b:dd:39:1f:30:08:01:71:52:98:
d4:80:6f:a6:13:8c:10:b3:81:d8:e2:e3:1c:73:2b:
88:f1:a8:46:77:90:7b:2d:21:b6:89:8e:2a:7e:04:
d9:d3:9b:2a:5a:07:87:b2:d7:e5:af:c3:e0:c6:72:
7e:4d:92:93:25:c6:1e:e0:b6:94:ef:28:3b:a7:42:
6b:a6:b0:7a:2c:62:5e:67:2c:7c:51:6d:00:cd:04:
3f:45:bf:c4:df:b5:08:19:0f:d1:d1:4c:c7:d5:03:
28:37:ac:82:eb:3c:5b:ff:c6:ac:b9:92:4a:b1:ca:
af:c4:82:aa:ab:2b:50:ee:de:d5:24:67:89:5a:f3:
4b:f3:21:f6:0b:79:3c:cf:4c:f1:a2:f6:15:17:e4:
5b:70:23:41:6c:5f:26:a8:a5:87:73:66:6c:86:58:
4c:52:7a:23:f9:6c:09:33:e2:a8:ac:1c:e9:7a:3f:
cc:df:99:bf:cf:7e:a2:52:35:87:d7:0d:4b:dd:bd:
62:87:34:f5:b1:0d:6c:c0:64:f2:c3:23:db:c0:b3:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:F8:A9:AA:CC:35:92:BA:B4:A9:00:51:B6:0E:CE:D8:45:2A:6A
X509v3 Authority Key Identifier:
keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:7b:e2:c1:19:f6:16:6a:16:1b:60:ff:ac:4e:b8:5a:90:
e8:f6:c0:2c:66:5b:33:a6:99:65:1a:d5:6b:e0:9b:f3:14:be:
a5:20:0a:ab:28:ae:43:d3:43:44:84:c8:3a:d0:38:a7:91:c9:
78:90:96:78:e9:39:46:17:6e:c5:43:dc:be:6c:34:1a:50:04:
38:31:3e:3b:a3:df:6c:e0:19:6c:e1:51:e4:91:ef:ef:ec:74:
fb:41:43:57:2f:f8:e2:41:19:4e:8f:1b:6b:f7:d3:80:c0:22:
7f:08:34:c0:92:3f:f6:de:46:05:6f:7f:bd:54:ef:ab:25:29:
72:06:ea:06:e9:4a:74:09:e8:66:8c:93:dd:be:fe:9d:fe:08:
37:5a:f5:22:05:99:8f:48:81:c3:4b:5b:25:ef:e7:f9:1a:46:
a0:a0:15:71:5c:b5:f2:56:65:6e:ad:bb:ed:53:97:6c:de:53:
06:86:db:48:70:01:fb:48:b5:19:a1:f4:00:95:b7:e3:1e:01:
7d:fb:c5:d7:64:ac:bf:90:af:72:f3:81:6d:bb:32:07:5b:65:
10:10:aa:39:3a:72:7f:3b:e3:37:e8:25:6d:e7:e0:4a:d8:b7:
31:2a:eb:9d:0a:4c:2c:db:2c:e2:8b:a5:41:a4:b0:b8:66:93:
45:af:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:13 2025 by rpki-client