Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
File: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft (raw, json)
Hash identifier: RQzzRokw6LNKOyEoGSoz4omWXhBYbFGCflCNZ+uosmg=
Subject key identifier: 71:03:94:68:01:9A:D0:4A:7D:5E:1B:37:95:D5:7A:74:66:34:B3:4A
Authority key identifier: F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
Certificate issuer: /CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Certificate serial: 0197B70F51E1E36161246626D32E61EE2BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
Manifest number: 0437
Signing time: Sat 28 Jun 2025 15:02:03 +0000
Manifest this update: Sat 28 Jun 2025 15:02:03 +0000
Manifest next update: Sun 29 Jun 2025 15:02:03 +0000
Files and hashes: 1: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl (hash: P70y6u8Ko6+ZCd9hfhqsw4v31x2v5rqERHcgl1aVqyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:51:e1:e3:61:61:24:66:26:d3:2e:61:ee:2b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Validity
Not Before: Jun 28 15:02:03 2025 GMT
Not After : Jun 29 15:02:03 2025 GMT
Subject: CN=71039468019ad04a7d5e1b3795d57a746634b34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:03:32:1e:26:57:69:36:39:d2:b0:e7:1a:
7f:52:bf:37:88:0e:00:87:ec:fc:98:a4:5d:d1:e9:
eb:51:9f:92:2a:23:69:e6:0b:ae:b1:c7:fa:67:79:
71:1c:ec:3f:07:69:d8:36:65:60:2d:68:fb:1e:58:
9e:b6:0f:15:b3:cd:a5:ac:50:c4:9b:40:93:78:d0:
da:37:b0:29:37:52:69:8f:57:73:82:a7:de:41:43:
b0:63:a3:57:9a:80:e0:e5:4a:cf:84:4f:df:e3:c7:
70:78:d2:33:0f:fa:c4:c2:08:e9:77:59:72:aa:67:
70:d7:df:2a:04:a0:90:bf:45:b8:c3:44:2f:d5:56:
96:12:80:3f:1a:cf:fc:d8:7f:38:71:b3:74:6d:96:
73:e8:2b:48:57:ff:ff:c1:17:0e:74:e0:ab:60:06:
c8:2e:a7:85:c6:75:d6:3e:86:9a:9f:04:1f:7e:a9:
51:4a:da:d9:e8:1b:00:55:38:70:79:7f:ec:ee:29:
e7:67:76:b1:88:46:7a:c8:72:a5:8d:d6:d5:57:91:
32:c5:31:12:81:f2:52:90:69:af:ee:55:40:33:1f:
95:c5:44:7d:b6:1f:4f:af:36:99:2a:d1:17:50:15:
68:49:e1:0f:74:93:2f:5d:f2:ae:e7:a2:19:ab:9f:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:94:68:01:9A:D0:4A:7D:5E:1B:37:95:D5:7A:74:66:34:B3:4A
X509v3 Authority Key Identifier:
keyid:F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:98:37:41:ae:ae:9d:d6:a2:e7:1d:74:f1:ad:59:47:5d:7a:
82:52:ac:d9:d7:3f:ab:59:8d:0b:56:4c:a2:2e:a4:18:be:9d:
58:64:f0:93:fd:88:58:b6:5a:cf:cf:ec:9f:5d:7f:ec:5c:90:
60:54:f0:00:2b:26:a8:df:b9:a4:e4:86:04:25:a4:ba:ae:60:
43:02:ef:ee:88:04:62:4e:c0:76:01:31:c5:36:d9:6f:1c:bf:
7a:e1:28:3e:e6:89:8b:f5:1c:25:3c:9e:d0:4c:89:bb:ca:a5:
d2:12:ea:0b:40:0e:6f:d3:d0:b4:9b:7a:9e:90:61:55:46:57:
d2:6d:ab:8b:9c:d0:2b:02:91:ce:a4:40:96:70:af:c9:d7:ef:
5a:cc:08:d0:31:fe:d9:17:08:51:77:0b:96:87:29:dd:c7:7b:
e5:be:44:99:87:3f:bd:1d:79:1f:e0:56:46:64:c1:62:f2:38:
be:95:4b:63:fa:ed:dc:85:87:68:01:fc:db:00:a5:df:6d:c5:
ff:8f:26:c5:e0:ed:6a:4f:54:2a:49:a6:02:4e:cb:2d:8f:b0:
20:d5:70:92:35:e0:3e:fe:0f:ae:58:0b:80:5b:fa:1d:e5:68:
1d:3c:ff:0d:dc:b9:02:a1:28:43:ec:4c:a9:11:fc:68:f1:14:
0f:ca:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:21 2025 by rpki-client