Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: uJDscK8sN4sX0FfP5N8G3wQI0rY5pCGKC3K0jNS903Y=
Subject key identifier: 0C:7E:BD:19:C2:DE:D0:F9:31:15:B9:7C:F5:6D:AD:60:EF:E0:3A:7D
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 0197B6A1C6E2018F2034B068F2595348FD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 0D8B
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: 7gLvOmfescPqCL8scZWOfOR1QksyOKUx5XL7w+ij01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c6:e2:01:8f:20:34:b0:68:f2:59:53:48:fd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=0c7ebd19c2ded0f93115b97cf56dad60efe03a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:71:d6:2b:59:45:d0:23:ad:e5:a7:ed:bc:
1e:27:ec:1c:2b:3b:16:6b:15:dc:67:b7:10:02:85:
db:b9:0e:72:93:de:dd:b2:e8:13:2e:14:7f:8a:1f:
81:a4:35:c9:76:dc:53:9d:82:58:f7:6d:3c:a0:db:
10:85:98:b7:ff:18:f6:cb:8f:64:56:2a:5f:5f:bf:
85:06:05:7f:f3:17:f6:71:58:c5:4f:dc:cf:8f:3a:
24:d6:c0:87:cc:0c:01:19:0e:e0:b1:e4:e8:58:53:
7d:b6:76:a8:68:9a:04:9d:d8:b4:b7:cb:80:09:87:
af:0c:db:cf:14:75:3f:48:9c:27:1a:a8:35:bd:2e:
35:3c:1c:50:db:08:27:ac:f5:e5:97:9f:86:e3:28:
c8:78:1e:6e:1e:0f:b5:c7:3f:89:e0:8d:5f:ea:3e:
6c:14:e0:ee:3c:7c:5f:94:23:32:4c:9c:da:58:df:
e8:56:5d:5a:c2:39:31:bc:82:a5:d0:14:2f:94:59:
c0:dd:1f:80:38:00:0b:d6:37:d9:9a:eb:1f:5b:7e:
64:23:9c:83:7b:32:b2:4a:94:42:7b:b6:63:c8:f3:
94:44:cc:56:f1:2c:cc:a1:03:34:ab:64:56:75:da:
4c:84:f5:0d:86:6a:49:f5:a5:4c:88:e4:bd:36:8a:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:BD:19:C2:DE:D0:F9:31:15:B9:7C:F5:6D:AD:60:EF:E0:3A:7D
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:05:2d:0d:aa:e5:37:41:d1:bd:a3:36:b3:d7:a9:57:1d:b1:
7c:0e:83:e6:a7:0f:e8:b6:e4:e5:9b:2e:54:28:ac:c7:9b:d6:
3a:77:22:1d:50:ee:74:68:dd:11:72:e1:8d:7c:9f:95:9d:c2:
88:c9:78:98:b3:78:8d:9a:81:41:f5:61:70:ea:35:f2:d4:35:
38:5d:59:a3:51:9d:45:21:a0:83:0d:f3:f0:44:61:ff:87:df:
63:03:c5:5a:fb:0d:95:43:fe:01:dd:a7:52:f9:19:0d:67:0b:
bc:a2:3f:a7:7a:54:78:46:4d:f8:87:f4:2d:30:31:6a:0c:d9:
03:82:90:0b:91:46:9a:f7:89:2c:40:5c:54:d0:86:08:27:b6:
8b:09:44:05:5e:95:7e:e4:63:1b:81:06:b0:86:86:26:c4:24:
be:69:b5:27:6a:b4:96:02:9e:ab:5f:61:22:7c:d1:78:30:5f:
6a:27:01:fe:df:49:30:08:05:55:4a:cc:aa:bc:06:5d:34:5d:
ac:8b:a7:e0:fb:85:63:f2:96:1f:d7:bc:60:fb:b8:a5:7f:d8:
5e:fe:35:49:19:ec:a7:e0:42:22:d6:ed:ed:6e:f5:b3:14:5d:
dc:b2:a5:c5:dd:53:7e:14:ee:2d:3c:74:88:27:90:33:2a:27:
d0:9b:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:08 2025 by rpki-client