Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: IaORefG4OmSu10iTwwWkUA1bGUlfiffrifCoo3ERJXQ=
Subject key identifier: 1B:85:F6:D0:B3:77:CC:72:D1:DE:5D:1F:0F:09:DA:52:E2:FE:21:28
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 0197B6A06B7454E1F8D490C8E22068916887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 097A
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: vLGoELDbiaFUDTOleJA5CSkDGr0FCLfFjvac12fPeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6b:74:54:e1:f8:d4:90:c8:e2:20:68:91:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=1b85f6d0b377cc72d1de5d1f0f09da52e2fe2128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:b7:70:18:4c:52:f9:95:fb:fd:e8:0f:58:
43:3a:ac:4e:62:7b:11:e5:26:09:c4:24:f0:3f:13:
44:56:b1:58:d4:b1:15:6f:ac:29:7c:d5:07:4b:ce:
df:91:ce:6c:14:3c:77:d9:28:9d:03:4b:c6:8f:7a:
31:3a:f7:04:57:8c:4c:66:6b:b2:d8:d1:fa:ef:c3:
9d:2e:ee:77:8b:4c:8e:5c:41:f4:b8:c4:09:3c:c0:
cb:12:32:c6:81:8e:09:71:d1:fd:3d:55:cd:22:e0:
62:93:07:da:ac:65:a0:9a:0f:c7:d1:ba:bb:14:b8:
96:ab:f2:31:f4:95:de:29:63:1a:03:3e:c5:be:2f:
69:b0:8c:c5:12:47:d3:d6:17:03:b3:85:37:f3:dd:
de:ec:5a:cf:49:1e:7e:9c:93:b6:97:1e:e8:f8:0c:
9a:d4:36:1f:e0:71:0c:36:19:9e:71:a1:f2:1d:fe:
4a:63:6f:2d:85:a3:b3:8d:d6:e9:52:f0:88:a6:f3:
40:a3:e1:4b:54:b5:40:40:e1:d5:6e:90:6e:1a:ea:
3d:16:45:1f:f6:af:f5:64:86:3c:ff:4e:93:fc:95:
c3:1c:1e:74:34:2a:92:b9:7a:36:2f:72:15:f3:8c:
30:39:11:97:87:f7:9d:35:85:6c:cb:8d:6a:6e:89:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:F6:D0:B3:77:CC:72:D1:DE:5D:1F:0F:09:DA:52:E2:FE:21:28
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:56:2a:d0:bd:78:5b:b5:9a:76:37:f5:8e:a7:b6:68:d2:
34:b8:0a:35:9b:7b:0c:3f:8f:08:5c:6c:5a:1d:d6:81:fa:db:
8d:65:1b:6e:30:98:41:db:e3:35:8c:7f:79:f0:bf:2a:6f:84:
20:8b:54:1b:4a:d1:ff:51:b2:51:87:45:97:bf:3f:5e:58:1e:
0c:e4:98:89:1a:af:17:8e:23:53:99:b9:7d:05:d5:54:84:5f:
04:11:22:7f:cc:7f:2e:1c:5b:52:09:0c:c8:37:a7:73:d6:ac:
75:72:36:a1:a6:40:be:4e:47:c9:16:6a:ec:d5:79:ce:48:b2:
0b:e8:81:91:35:1d:01:08:90:58:65:83:ff:b9:bb:89:a4:1f:
e5:6e:64:00:fa:82:59:80:65:49:5f:bc:b6:bb:27:63:49:5e:
63:31:88:87:68:4d:d3:a0:c6:df:28:56:61:56:23:45:c9:95:
3f:86:68:a3:76:e7:fb:2e:20:24:5f:34:46:5b:63:25:4e:6e:
f1:19:97:ca:87:92:a9:67:60:e7:9d:e1:7d:27:f3:bb:7c:8b:
88:f9:98:c7:81:eb:0e:89:c2:00:34:2e:91:a8:61:27:74:85:
83:f6:59:41:12:ef:a1:26:74:08:72:0d:21:e0:ba:39:d5:da:
2d:a2:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:23 2025 by rpki-client