Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: MEI9quoixnG6l2auE4h4JH3Dz7g1416XLEKvVQr2j+w=
Subject key identifier: 1A:5F:F9:B7:44:D9:51:AD:2D:F6:4F:04:5A:EA:79:A8:CC:1E:97:47
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 0197C1244786646E62259CBBA3BE8A203EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 05A3
Signing time: Mon 30 Jun 2025 14:01:09 +0000
Manifest this update: Mon 30 Jun 2025 14:01:09 +0000
Manifest next update: Tue 01 Jul 2025 14:01:09 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: KARPkEYbjpsd9oIvXsMebY0Ta6PhKRf0TZnqDG2SD2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:47:86:64:6e:62:25:9c:bb:a3:be:8a:20:3e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Jun 30 14:01:09 2025 GMT
Not After : Jul 1 14:01:09 2025 GMT
Subject: CN=1a5ff9b744d951ad2df64f045aea79a8cc1e9747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:1c:b3:68:91:24:d3:8d:27:eb:57:66:9f:
88:41:88:ab:64:5d:29:17:ec:79:40:4c:cf:4b:71:
ae:28:2a:cf:16:4e:fa:d7:de:43:5c:24:82:4d:85:
aa:af:e2:a7:55:3f:91:d6:34:6b:51:19:7d:72:df:
4e:78:2d:c3:ad:af:eb:02:39:22:30:06:7f:c0:ce:
0b:f7:c9:cc:c2:37:d1:6c:f3:87:43:35:05:bc:e9:
e8:ad:22:ef:4e:3b:b2:6a:9a:c9:b2:2c:52:db:87:
82:bd:15:0e:f3:a4:72:2e:e6:65:c4:bd:d4:1b:35:
63:50:53:44:8f:20:d0:31:dd:f1:1d:84:d9:b3:4d:
63:fe:6e:97:89:ae:e7:76:af:cc:ac:29:5c:cd:23:
30:21:50:64:f3:f2:92:5c:d4:44:5d:f1:b2:a0:3d:
41:bb:1d:2e:19:4b:9b:e2:76:f9:e1:1a:6f:a4:fb:
a4:89:ec:8d:77:af:6c:a1:71:54:0f:55:a2:14:f8:
ff:30:94:77:e2:01:32:de:23:3e:57:7d:c6:98:45:
b1:c7:b7:f7:bf:3e:dc:5c:85:27:d8:b2:54:a6:75:
14:50:f5:27:8d:7e:95:cc:50:d6:b8:aa:9c:77:8b:
c5:8a:94:5b:41:ca:76:78:85:3c:18:77:2e:51:38:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5F:F9:B7:44:D9:51:AD:2D:F6:4F:04:5A:EA:79:A8:CC:1E:97:47
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:47:b3:bd:c5:61:8b:be:a3:9f:0f:92:f1:55:95:59:2b:70:
c4:2d:0c:d6:34:53:ea:dc:97:8d:1c:78:fa:a2:6e:7d:fa:99:
22:15:02:93:ff:91:43:4d:d3:6a:33:ad:ff:1c:7d:8b:dc:4f:
cd:50:44:fb:f1:10:0a:22:10:90:39:d0:55:32:69:d8:d0:2d:
80:35:cd:65:9a:c9:85:f3:5d:96:50:9d:35:f2:6a:d1:78:41:
4a:da:ac:73:29:26:03:97:58:1f:23:43:29:cb:de:56:fa:95:
1b:51:36:29:fa:47:2c:6b:5e:1a:06:e4:7c:0b:cc:b7:44:02:
3d:2f:d9:d2:8f:ca:9d:43:0d:5c:d2:33:a2:05:1c:76:63:62:
19:f0:4d:91:b0:20:dd:21:a8:ed:66:cc:11:7d:0a:42:d4:71:
3e:40:29:b6:af:99:f0:1d:3e:13:f4:6c:8a:97:01:a1:2b:de:
9c:f6:02:90:7e:3d:a6:36:9a:65:87:88:5b:09:8a:df:c7:91:
b3:00:05:ad:ae:d6:2e:74:fe:97:f9:b6:62:92:46:2a:86:dd:
83:ad:ba:58:35:22:e4:4b:ed:11:34:cb:24:a8:57:c2:59:9c:
56:6c:22:06:5b:01:8a:b9:62:da:92:d4:fc:8d:d0:c7:48:9c:
bb:0b:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:16:16 2025 by rpki-client