Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
File: Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft (raw, json)
Hash identifier: eVOEvlOe8peBBhqkQDr9TaxtYV3LdqpR37wgLJPV+tk=
Subject key identifier: 42:1F:5C:D7:4D:4B:19:A7:92:F2:E6:DF:CE:E8:6E:B6:AE:20:2E:76
Authority key identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
Certificate issuer: /CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Certificate serial: 0197B7B36230AD9B351F7BE7B60E094707E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
Manifest number: 0C
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl (hash: XEd13DUYA/XTpfQDOfV2rPZy7yq8/owdi9BqfO5QUms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:62:30:ad:9b:35:1f:7b:e7:b6:0e:09:47:07:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=421f5cd74d4b19a792f2e6dfcee86eb6ae202e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:c8:04:9e:f2:bf:76:5d:2d:73:3e:d6:c0:
e6:af:ac:47:d6:b8:80:59:0b:df:06:8b:59:19:e9:
24:97:78:e6:17:9d:0c:c3:10:34:0b:8f:da:d7:f2:
4a:45:00:3a:45:7a:60:4e:b4:fb:29:a2:f7:92:88:
8e:96:5e:01:29:91:1a:b2:eb:c2:16:59:2a:54:8f:
cd:c3:7b:95:32:23:fe:35:ec:41:4d:fc:52:b0:6b:
a5:db:b8:9a:be:45:6d:93:98:c6:2c:2c:26:02:32:
90:3c:3f:c9:f2:d1:ca:22:b3:ef:76:71:22:5e:d6:
30:f9:46:f8:5d:96:7b:c7:8f:b4:1f:dc:dc:77:f9:
84:5d:f1:1b:0a:8c:76:2c:22:45:d4:d3:3c:db:1c:
4a:24:1f:45:e7:d3:b4:b8:08:27:df:8b:13:9a:f9:
8a:41:38:ae:09:b9:10:3f:c4:20:b8:61:ca:49:90:
4a:be:fe:1e:f3:b9:78:f7:65:22:0b:aa:c3:e3:ea:
83:0c:d3:93:d1:cf:43:91:34:0a:cb:19:db:84:b3:
94:89:f9:ef:76:08:70:9e:1a:cf:d6:32:ff:72:59:
dd:71:1b:af:8c:7b:fa:7c:18:3d:46:c3:9f:bd:60:
86:9f:a6:74:01:3d:4d:77:32:4c:35:c1:68:55:bd:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:5C:D7:4D:4B:19:A7:92:F2:E6:DF:CE:E8:6E:B6:AE:20:2E:76
X509v3 Authority Key Identifier:
keyid:62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:73:cf:a1:da:51:ad:4c:09:b4:e5:64:7a:dd:b6:b4:67:38:
08:84:15:6d:90:0b:e4:8a:bb:0a:00:e4:3e:fd:08:55:80:0e:
30:1a:a4:08:16:c1:96:fe:be:79:07:80:01:c7:b4:1b:52:8c:
93:e4:39:b4:55:a6:aa:28:9d:a7:a3:4d:3f:78:40:9a:f4:16:
24:6f:d5:ad:63:72:fb:da:d6:74:e0:c4:1f:e3:54:92:80:33:
1c:00:8d:97:d4:5d:c9:10:5e:6e:6b:8c:20:d1:77:55:b8:45:
2d:db:58:56:84:17:76:1e:1c:69:33:de:ad:06:d7:d0:da:9a:
62:9b:08:2d:2a:e9:23:ad:97:b8:b5:f5:e3:fd:b6:75:e7:25:
69:12:16:bf:36:c1:fd:a5:6e:f0:d2:7e:4f:7c:2e:7c:63:79:
dc:87:1d:74:ca:11:2c:ba:54:91:b3:38:54:15:5d:a5:0a:2c:
a7:64:47:ba:a4:c6:e9:51:3e:49:2e:2a:5f:51:27:25:cd:97:
74:a7:22:9e:10:d9:2d:3f:a8:e8:c7:fd:40:7a:b5:cc:d5:cf:
b3:57:6c:92:9f:5b:bf:5d:04:54:56:a3:9d:79:1e:b8:0d:f5:
b0:45:d9:35:21:0e:46:91:39:3f:e0:e8:5d:da:00:70:bd:69:
d0:c8:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:17 2025 by rpki-client