Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json)
Hash identifier: Czk8fkFOqlpJiV9oORJBrRbFaniJMMeOqmUKewqRRs0=
Subject key identifier: DB:B7:DC:74:45:C1:1F:C3:A8:CD:5C:3F:E3:82:50:E2:C6:C9:6C:FB
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 0197B70E56302D78116B7CFA8ADEDAB5EE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
Manifest number: 026F
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: pHW0nTySTGz2nuLbxVcr77V/NS34WueWofUARU+dtco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:56:30:2d:78:11:6b:7c:fa:8a:de:da:b5:ee:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=dbb7dc7445c11fc3a8cd5c3fe38250e2c6c96cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:16:f0:8f:c0:52:0b:2b:06:30:94:dd:b6:
89:30:c5:db:ff:7d:4c:b7:7a:22:8f:e3:e0:e4:73:
05:9b:69:6f:ec:4e:47:ca:85:39:81:fb:1b:c3:6c:
02:10:b5:a9:49:12:7f:19:d2:39:05:39:18:33:a3:
81:62:85:1d:b4:07:77:b3:3e:3f:5a:a2:64:6b:7a:
4d:42:6c:e3:8d:fa:e3:1e:a8:98:74:1f:b2:0b:61:
38:df:a8:55:15:d6:2e:34:37:21:a1:28:14:d4:ae:
a5:bf:a8:14:0a:a7:da:87:02:94:d0:70:3b:bc:cd:
c8:07:7f:77:58:18:ee:c8:50:fd:14:ae:a1:6d:3d:
5a:f4:59:5a:7d:91:61:93:bb:13:90:f9:35:4f:2f:
75:44:6e:8d:91:1c:2b:bd:d3:88:30:7e:71:a7:8c:
33:ac:03:e1:64:60:7d:58:84:1c:a7:31:54:76:b4:
26:c3:47:37:4c:b3:de:f5:8f:a5:c1:6b:7a:d7:bd:
dc:ed:92:f3:f5:84:7a:3f:2b:1c:b5:c0:49:c5:73:
b3:5f:59:2f:17:ce:13:c7:75:9b:f4:52:df:d7:9a:
ec:41:b5:a5:5a:70:bd:6c:a2:83:4d:ac:08:84:3c:
a7:b4:8b:00:aa:89:f4:f0:53:09:de:a8:ce:3a:5a:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:DC:74:45:C1:1F:C3:A8:CD:5C:3F:E3:82:50:E2:C6:C9:6C:FB
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:bf:93:a1:97:07:c3:c3:2e:c5:e3:6e:a3:ba:94:af:be:
39:44:99:6e:40:3c:84:8d:dd:61:67:1b:a3:f6:2b:c4:cc:ac:
ea:b4:25:28:fc:35:b6:40:f1:c0:f7:da:41:cf:5d:d9:57:39:
57:01:c9:82:b0:bf:ab:6d:f4:87:9d:c1:dc:51:31:d4:5d:12:
8c:f4:99:53:68:47:d5:16:0f:06:1c:bd:4a:e9:bb:3c:d2:9c:
a2:5c:c3:06:f3:22:24:a2:68:7c:1a:3d:35:83:92:b0:36:e7:
5d:cd:7a:f6:38:cd:c1:70:d4:47:03:60:8c:2d:f3:28:e2:43:
38:fa:93:15:61:ea:69:4b:a2:01:52:94:7a:2b:bb:e8:15:f8:
d7:bc:ac:56:4f:e6:c1:9e:e6:43:a1:5c:0f:a4:13:dc:89:11:
2e:d3:88:16:86:64:cb:73:bd:b0:f9:4f:f8:0b:0a:dc:77:39:
2f:09:36:b3:ef:40:8c:63:25:f3:bd:af:fe:a4:08:98:55:59:
3c:2b:74:0b:c9:79:b4:e1:e3:97:8b:75:7a:b4:35:af:c1:4c:
97:2e:27:76:9f:9c:a0:0d:29:71:e1:bf:f4:67:a8:7c:41:06:
be:e8:5b:df:29:75:14:fc:17:09:4e:fe:fe:5c:ed:40:b9:ea:
29:0b:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:53 2025 by rpki-client