Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: tgA5Ye05NG6FQbO1BhNnkFl1bQtLdq0InbwSze0a1Iw=
Subject key identifier: 2A:0B:63:EF:B5:43:E1:FE:E0:69:7B:99:08:74:48:E3:AD:7F:32:31
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 0197B6A1DE1CF41871E13CAC5AF0F61F8678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0C80
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: AHJf5a+BXPmEMJ7mXR0qNNM23UWU+57BaMPotjiD8PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:de:1c:f4:18:71:e1:3c:ac:5a:f0:f6:1f:86:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=2a0b63efb543e1fee0697b99087448e3ad7f3231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:49:f8:9e:0a:69:7f:b9:33:f3:cc:d9:d9:
72:ad:73:90:38:e2:2a:88:85:5b:da:55:44:a9:3b:
fa:6f:03:90:7b:db:a3:32:f7:4d:77:ac:27:48:24:
0a:2f:4d:79:d5:df:78:52:8e:ab:cd:dc:b7:ce:87:
48:aa:96:bf:6b:73:9d:fd:af:e1:19:3e:36:53:9f:
1c:12:60:37:32:3c:02:36:79:23:bd:4f:92:3d:53:
a3:90:5d:9f:c9:88:2b:59:2f:05:18:7b:e4:bc:e2:
a4:dd:6d:f0:93:46:3f:a6:34:55:e1:0f:bc:34:df:
d2:de:ce:9f:50:d7:93:7c:ba:45:cd:9a:b0:97:05:
79:2b:4a:ec:58:c1:88:17:40:5c:ce:45:87:be:66:
ab:c5:ea:e8:b2:99:63:c2:dd:8f:bd:88:85:6b:87:
39:ae:6c:6b:9f:d4:04:23:69:7a:1d:f9:04:d9:72:
8f:b3:67:43:d1:6e:29:77:8f:b7:ac:1c:cb:c4:c4:
b7:4e:6a:9e:8a:f7:4c:76:4c:d7:34:9f:e8:ff:bb:
6c:72:76:6b:be:3f:86:24:f6:6a:4c:66:0f:3d:69:
70:a6:b1:e5:ff:08:e3:96:3c:89:46:00:f3:40:4b:
bc:81:ee:8a:a1:6e:90:94:9b:0e:6c:f8:b3:66:a1:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:63:EF:B5:43:E1:FE:E0:69:7B:99:08:74:48:E3:AD:7F:32:31
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3b:f8:a8:21:72:18:2c:03:0a:dc:16:fd:31:78:e1:a8:82:
b2:05:ba:e1:96:65:30:e5:c6:d9:55:02:c4:1b:4e:26:79:f1:
d6:67:79:cc:40:6a:5a:02:d4:0f:a0:91:e4:af:72:51:09:e8:
e3:fe:a0:44:dc:6e:4c:f9:d2:9b:00:85:99:3b:20:4c:7f:e5:
fe:86:79:19:4d:5d:6a:a0:06:ba:53:3b:d1:a1:a2:b0:5f:d1:
61:95:48:96:ff:39:b7:f3:1e:0d:0f:1a:63:a9:84:ee:fb:e5:
ba:d7:e1:29:37:35:11:20:ef:9b:45:11:50:f1:5b:eb:ac:28:
0a:77:2f:22:28:6b:d8:db:7b:78:93:b7:12:72:bb:2b:7b:3f:
36:ef:a7:46:88:b2:8a:94:ec:4b:f1:2b:05:92:5a:32:96:06:
29:23:0c:43:d8:90:3b:e4:2e:67:02:7d:98:89:bd:9c:ff:8d:
ca:e3:06:67:23:ea:79:b0:56:f0:f5:69:66:0f:1a:4e:05:c0:
49:6e:e7:57:22:2b:68:97:5b:cf:d5:ee:53:a1:f2:7a:f8:55:
97:d2:5c:8f:4b:f7:c4:64:7c:cc:39:34:b1:40:58:09:f8:65:
de:5a:ef:41:34:33:23:74:70:d3:4e:80:b5:dd:36:a4:dd:1b:
46:1f:3d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:14 2025 by rpki-client