Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier: J7IgtMqvEzKJV/ybH4Zn68iLxGRmv6cgcVvuJBwaWGA=
Subject key identifier: 23:D3:B1:5A:58:45:D8:6B:06:8D:36:55:93:28:84:FF:B6:CC:4C:93
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial: 0197B7450A322E3DE900495C7C1AF7F99474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: GI6F+7ZL9/ZDYQVua+xqzLroUQJYfnNqj41i9ONJGbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0a:32:2e:3d:e9:00:49:5c:7c:1a:f7:f9:94:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=23d3b15a5845d86b068d3655932884ffb6cc4c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:a3:06:8d:50:30:52:9b:7f:b3:82:87:03:
1e:49:6f:eb:f1:5a:53:2b:1d:db:e6:2d:7a:5b:3f:
c2:2d:39:48:e2:85:53:8d:08:8f:1a:b2:59:ea:cc:
c7:77:24:ff:0c:53:17:bb:20:40:41:de:b9:94:7f:
3a:a2:64:87:2b:e5:f1:9e:48:af:70:50:de:fc:a5:
a9:08:a3:40:3f:68:e6:39:7f:1c:0b:5b:ab:b2:7f:
10:6b:57:f3:05:d0:3f:6e:39:09:4d:65:a4:d0:0e:
b0:d5:76:15:af:fd:c6:1b:99:11:25:78:d6:3e:94:
05:1e:b9:a1:31:be:d0:1b:5b:28:8d:db:11:fa:fe:
c0:b2:15:18:77:b8:66:6f:49:ab:2f:98:e3:7b:96:
a2:cf:72:7c:01:a1:d8:3f:a2:d6:cc:39:7c:8d:8e:
50:04:64:85:e6:57:e3:a7:b2:02:63:0f:98:64:80:
23:a8:b0:d0:b7:44:48:19:9a:65:a4:2d:7f:36:a1:
81:1d:04:7f:be:37:4f:f3:62:e7:3e:54:dc:59:05:
2b:46:31:6a:d2:30:cf:af:e1:cd:7f:7b:c4:6d:3d:
0f:1b:f9:5f:1c:9b:19:ae:ae:a5:ab:52:85:81:79:
8d:19:66:e6:a3:9a:2e:ef:1f:51:07:fc:b8:e5:ea:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:B1:5A:58:45:D8:6B:06:8D:36:55:93:28:84:FF:B6:CC:4C:93
X509v3 Authority Key Identifier:
keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:36:84:e1:34:5d:e6:c3:04:e4:8f:41:95:84:a3:15:93:84:
ba:29:1d:11:9f:c2:16:5d:eb:31:e8:1a:e6:e9:57:95:26:4b:
43:e5:ff:f9:05:d8:51:25:c2:5d:78:a6:40:64:e3:7d:ea:8c:
0f:e4:35:22:5a:ff:d4:06:ef:c7:0e:c5:0f:e6:ef:76:87:f0:
02:98:8c:25:06:c1:55:29:6a:dc:86:9f:ec:7a:4c:88:c0:fd:
0b:af:47:e7:76:37:be:02:e1:74:ec:52:d7:ef:b4:f4:07:17:
4a:5f:e0:65:e4:74:9f:73:52:94:08:ca:d3:74:57:c9:d6:71:
26:22:ca:6f:00:fe:ba:b6:d7:fb:10:fe:a2:d9:a7:4f:d6:9d:
18:fc:b6:73:37:89:b8:2c:00:66:67:5c:a2:e8:8c:46:58:e4:
ae:56:48:0c:a9:a2:56:c2:29:be:fc:6d:82:0d:74:db:64:a1:
3f:54:f2:d7:d3:b6:a9:f5:6a:6a:21:47:c5:ec:6f:d3:b4:a6:
d0:32:62:ec:36:ae:ff:2f:13:e7:17:3d:9a:98:46:ca:fa:8f:
d4:f4:72:ec:70:54:c4:86:79:b0:45:7f:e0:aa:81:6c:37:c3:
5a:33:6f:29:c1:8d:82:c5:05:c5:28:4c:55:22:a8:4e:d1:82:
31:40:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:37 2025 by rpki-client