Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
File: Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft (raw, json)
Hash identifier: u7ezwZrxei2ohOkthGpj1nxKoWAAWV/hUROExANP6WQ=
Subject key identifier: 36:3F:F2:C1:42:EE:93:51:BC:2B:AC:4F:88:90:D0:F1:62:DD:11:26
Authority key identifier: 62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
Certificate issuer: /CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Certificate serial: 0197BA7E0812F32CE4EFE489B35B10D21F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
Manifest number: 1190
Signing time: Sun 29 Jun 2025 07:01:50 +0000
Manifest this update: Sun 29 Jun 2025 07:01:50 +0000
Manifest next update: Mon 30 Jun 2025 07:01:50 +0000
Files and hashes: 1: Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl (hash: VFBvugz5EI2PH5ofI/lx8b1Tbj2xLNwJdNaZBVGSfEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:08:12:f3:2c:e4:ef:e4:89:b3:5b:10:d2:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Validity
Not Before: Jun 29 07:01:50 2025 GMT
Not After : Jun 30 07:01:50 2025 GMT
Subject: CN=363ff2c142ee9351bc2bac4f8890d0f162dd1126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:a7:89:94:38:d9:50:98:f3:d2:c9:a7:24:
59:17:af:11:d8:30:8c:b9:ce:0b:f0:b2:0a:ac:ea:
11:94:b6:7e:b5:4a:7b:50:b2:ae:8a:c3:3b:c2:a0:
e5:4f:c3:68:4b:9d:8a:96:32:99:95:da:19:1b:d0:
58:89:51:bd:b8:e4:16:e5:38:7f:2d:e1:16:3d:26:
8e:b5:9b:f9:6d:35:fc:4b:98:54:b2:15:84:c9:89:
7d:b5:f3:a3:df:ae:87:2b:c7:61:68:7e:30:bb:57:
e3:05:ed:8c:a9:24:03:30:34:8d:fa:8d:58:6d:6b:
46:b3:2b:f1:ba:de:3e:eb:18:66:7c:c0:84:fe:58:
ee:f0:f4:a5:43:74:34:d5:3e:92:2b:88:92:bc:b3:
af:0a:3a:0d:ce:27:27:ae:68:68:da:1f:3d:7e:20:
56:8c:08:52:11:a6:14:eb:69:a9:f2:08:fa:b7:f4:
3d:5a:76:89:3f:d7:56:b3:5e:1e:78:7a:5c:54:b0:
38:f1:67:71:a7:fa:14:0e:c8:ed:be:c5:e5:09:31:
10:13:31:e3:b7:b8:68:3e:4b:2d:f4:94:94:00:1d:
0f:77:ce:fd:51:e0:f7:c5:66:ba:23:47:72:b9:ac:
09:fe:db:fb:f5:0d:9d:48:65:d1:8f:15:d6:d4:0d:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3F:F2:C1:42:EE:93:51:BC:2B:AC:4F:88:90:D0:F1:62:DD:11:26
X509v3 Authority Key Identifier:
keyid:62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:81:cb:b8:a5:8a:3e:3e:4f:6b:dd:5c:00:f3:5a:53:fb:8f:
a5:93:6b:5f:49:2f:fe:90:e5:c9:e2:d6:a0:ac:66:a9:f3:c8:
62:d3:29:06:ec:c8:97:1a:d7:4c:69:f1:de:3f:75:fc:fa:ae:
6e:7d:17:9e:53:d5:52:a9:e5:f4:53:88:45:58:5d:ff:f4:2e:
c9:3c:91:7b:58:54:42:54:a2:59:84:49:a3:e1:af:05:4d:d1:
8c:30:c5:44:bf:09:3f:09:bc:0d:43:d6:fa:c8:00:50:b2:a1:
93:8f:7b:75:4e:bb:d0:dd:4b:13:67:40:43:1a:8a:65:3c:09:
d2:52:b6:32:cb:fd:89:ca:62:a2:49:bd:42:73:11:86:b2:64:
3f:23:6e:cc:6c:c9:b6:0c:4b:af:2e:f4:20:43:b6:e6:34:c8:
8c:76:82:a1:44:cf:08:65:26:04:e5:be:13:1f:8a:8d:50:4e:
4a:10:18:b6:a0:84:e8:2c:f1:a5:76:19:b9:15:e8:3d:ce:3e:
41:25:41:c5:cc:be:3f:e1:c5:95:29:5d:21:4c:ba:71:ae:6a:
6c:2d:34:11:04:4f:90:8a:16:d1:6d:2e:3a:7f:93:09:9e:80:
e6:b1:c7:71:03:c3:f8:af:96:6b:e2:87:0a:14:93:94:28:d2:
03:be:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:49 2025 by rpki-client