Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
File: ys4LZXV7SJmVtfwzShRV5KNfBks.mft (raw, json)
Hash identifier: OIcqNa+q0sLh6ovQc5FLt9WvL5T7eGN0Dqfu58yC3jY=
Subject key identifier: 87:B5:EE:42:2C:F6:A6:9F:AB:BA:B2:FB:71:F5:A0:50:E1:78:D0:85
Authority key identifier: CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
Certificate issuer: /CN=cace0b65757b489995b5fc334a1455e4a35f064b
Certificate serial: 0197B8211C99C006CB15137664F86F2CC781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
Manifest number: 1D
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: ys4LZXV7SJmVtfwzShRV5KNfBks.crl (hash: DPMAKbHczCyh88LBCOilBIEuq4USpwVNnFcnM+GzXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1c:99:c0:06:cb:15:13:76:64:f8:6f:2c:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cace0b65757b489995b5fc334a1455e4a35f064b
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=87b5ee422cf6a69fabbab2fb71f5a050e178d085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:55:43:b8:6c:b5:bb:e6:1b:59:67:db:88:
b9:de:b0:a0:a8:86:e9:0a:a4:21:11:21:ba:96:0c:
fe:bf:8f:dd:4b:a7:5c:44:99:24:99:19:76:ca:7c:
34:d1:7c:74:f7:ed:6e:de:55:70:46:61:f5:9a:84:
1e:11:85:61:63:03:74:f0:59:d8:0d:1e:ec:32:f9:
3d:59:68:63:b2:2a:86:0b:38:ea:7d:0f:38:20:9e:
2a:f7:72:8c:3d:49:69:7b:a4:8d:34:fc:3b:4c:e8:
06:f7:4f:58:0a:91:e2:25:18:06:8b:25:78:e1:ae:
a0:3a:e4:c3:23:1b:4b:73:70:42:6d:99:f5:b7:e7:
d3:32:0e:fd:b6:52:bc:1d:2e:48:b4:c3:75:96:12:
e8:02:17:f4:ad:c5:27:02:42:43:04:39:e0:8e:b5:
50:be:12:c5:e0:cd:4d:6e:28:04:ca:6f:c5:33:07:
27:8a:50:8f:1a:11:37:cb:bb:c3:c3:d3:95:80:56:
bb:72:17:14:b2:34:8e:9b:fb:91:52:c3:00:09:5b:
82:09:80:df:dd:24:d2:3e:51:58:34:92:c0:05:25:
af:07:af:f2:b6:98:1d:a1:0d:53:8f:8d:b6:7b:50:
61:77:00:5a:18:48:a6:4b:0a:a4:81:c3:e7:ec:d0:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:EE:42:2C:F6:A6:9F:AB:BA:B2:FB:71:F5:A0:50:E1:78:D0:85
X509v3 Authority Key Identifier:
keyid:CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:83:78:ef:e8:dc:75:49:6b:d5:ea:9e:34:9f:e3:a8:65:
5c:bb:4f:f0:4c:f2:67:49:29:d5:08:62:8a:2e:b3:4e:8d:1c:
4a:ba:0d:b5:9b:de:4a:f4:0d:6a:6a:16:a7:66:de:1a:30:d2:
7d:fa:0e:05:95:b0:77:97:90:5a:63:7b:92:a8:31:cf:f0:47:
88:06:34:a5:c5:5f:79:02:46:3f:20:22:42:f2:65:59:33:65:
d5:7f:3d:b3:e4:64:21:89:29:01:29:52:c4:36:1e:cc:ff:a4:
9c:9c:2b:49:17:cf:6b:4e:4e:7d:69:c1:02:47:1b:f8:89:c6:
60:74:77:0c:2b:ae:57:68:32:70:06:92:20:aa:d7:26:c0:ee:
e4:2c:83:89:ef:20:6c:ef:5e:ee:73:4d:bd:66:c4:ec:98:74:
3c:ce:66:fe:0f:38:69:e4:c1:fe:1f:ee:40:c7:9a:43:72:f5:
fb:e1:ab:89:0b:73:d8:8a:6e:41:6f:19:40:43:5b:5d:9f:db:
41:dc:8b:db:ac:41:b0:56:04:f3:2f:af:33:d0:5a:d5:3f:03:
30:84:87:a2:c0:8b:63:61:50:21:cf:de:6e:1e:42:75:b0:1e:
c4:7d:a2:80:06:c7:0c:61:c2:cf:dc:fe:ff:90:45:76:ba:f9:
bd:37:5d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:51 2025 by rpki-client