Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: r7z+mn9Pxx5ellzZNe7zOLukWCX439G2nDQwUeyi27E=
Subject key identifier: 8D:58:CB:02:CE:7D:B3:D0:1B:A7:38:69:33:4E:BB:4F:FC:59:96:87
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 0197B6A143F76B44355C04BE5DD25669C4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: 46r1z06p806fvwqhUsBxZKQmVTHkZ++46M1go7Nzlao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:43:f7:6b:44:35:5c:04:be:5d:d2:56:69:c4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=8d58cb02ce7db3d01ba73869334ebb4ffc599687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:cd:fe:a3:dd:e5:04:4b:92:86:61:aa:07:
9d:23:db:1e:77:d6:11:a6:3e:72:7c:e9:4a:ae:6c:
78:9b:e4:92:97:37:f6:23:04:15:4b:75:f1:e5:3f:
65:d0:6a:92:5e:f3:30:26:4b:c1:98:35:35:fe:21:
3d:d7:ba:04:2b:b4:cd:cb:5b:8e:af:1d:d7:f5:d3:
00:07:d1:59:0d:08:6a:f0:8e:19:ed:f0:01:9d:3e:
57:23:f7:25:a1:93:d9:2a:1f:f0:2e:b3:92:0c:fe:
64:77:8f:e3:2e:7e:c7:81:43:cf:4f:e7:e2:d4:ee:
36:5f:c8:96:60:8c:bd:14:82:5b:28:47:dc:6b:fa:
63:b4:00:02:1d:6e:6d:aa:1f:67:6a:ee:b9:30:ec:
e5:46:f6:7d:99:bb:34:5d:1c:b3:0e:fc:64:35:82:
25:3d:4c:ce:b1:77:8b:0e:df:cf:6f:64:c7:54:6e:
27:d0:09:4c:e7:a8:39:53:91:96:b1:78:ac:c7:95:
4b:80:fd:2c:09:4b:14:68:87:4f:4f:7f:db:c4:37:
c1:3b:5a:5b:5a:e6:ca:ca:aa:9c:5d:bd:0c:6b:88:
91:12:9d:3d:7e:72:3f:24:6c:b8:ea:49:12:b9:4f:
6c:68:7c:e0:03:36:8b:d4:57:cd:7d:e1:14:b4:4c:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:58:CB:02:CE:7D:B3:D0:1B:A7:38:69:33:4E:BB:4F:FC:59:96:87
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d3:1f:b4:1b:10:b2:ef:d0:a1:5d:17:83:bb:93:34:ae:34:
47:14:01:99:7a:82:db:3e:1d:78:bb:da:7c:66:f7:41:fd:68:
41:bd:27:d9:58:20:44:71:72:00:32:28:72:9a:8c:e4:08:d4:
28:1a:f7:94:c1:30:5c:fd:30:9b:fd:c0:05:86:db:1f:a2:f2:
77:bd:91:81:57:eb:3f:3d:9d:d2:cc:ee:9d:24:84:73:1e:fa:
d1:9c:0f:40:e7:76:a2:32:66:e8:35:f6:23:ef:d4:a4:f4:38:
b0:44:e7:8d:b4:c6:a8:90:86:13:2b:b6:2a:b6:75:32:d4:43:
49:9e:ab:83:b1:18:95:65:59:20:da:8a:20:9a:38:a7:e7:13:
dd:bb:da:96:53:fc:06:bc:51:84:36:a0:b7:25:d6:f7:a0:08:
dd:8a:71:bc:63:89:a5:b8:ae:15:1d:ee:65:1d:d8:1d:60:1e:
04:3e:2c:18:55:09:83:ff:dd:28:42:0f:58:26:49:4f:a3:d5:
b3:4c:38:d0:27:7e:42:ab:cf:ac:6e:4e:10:de:1b:ea:3b:cd:
ec:92:0b:3b:7e:32:e8:50:88:f6:94:86:2e:b6:4c:f4:06:ac:
0f:de:f3:c7:0a:2c:bb:c2:2a:3d:d9:53:71:38:3d:f6:c0:ab:
c5:3e:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:26 2025 by rpki-client