Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File: Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier: udGMJW+mhaIf46T66IBe4ujKXOsgTYix0j9lxusi5Es=
Subject key identifier: 6C:C2:81:0D:81:19:BA:AC:4F:32:88:F3:4B:4F:30:E5:E0:5C:53:46
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer: /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial: 0197B5FC05E64E424C6FA6DD8A1C68BBC916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number: 097D
Signing time: Sat 28 Jun 2025 10:01:22 +0000
Manifest this update: Sat 28 Jun 2025 10:01:22 +0000
Manifest next update: Sun 29 Jun 2025 10:01:22 +0000
Files and hashes: 1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: 0fxxlNklHAXeCwY80Mx8OyyEYYps5iUEzBBIEMh2cEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:05:e6:4e:42:4c:6f:a6:dd:8a:1c:68:bb:c9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Validity
Not Before: Jun 28 10:01:22 2025 GMT
Not After : Jun 29 10:01:22 2025 GMT
Subject: CN=6cc2810d8119baac4f3288f34b4f30e5e05c5346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:27:d4:25:f7:64:1c:9d:22:11:bc:cf:f3:93:
6a:35:68:3c:db:11:fb:55:c6:c7:b5:db:05:0c:b5:
7b:72:96:eb:d6:76:b6:56:e5:95:de:98:33:40:4a:
92:0b:f7:94:3c:07:db:ef:53:35:18:2a:4d:fe:cf:
1f:f3:43:1f:43:45:ce:7b:4d:22:31:ef:5c:49:cc:
4f:cf:c0:44:30:9b:74:8b:7c:47:f2:27:c5:1a:ed:
1c:97:f4:88:25:9e:34:79:0d:dc:f4:14:db:b2:9a:
af:fb:75:74:a8:89:ce:f6:ad:65:4d:b5:7c:e8:db:
3e:c5:3a:1c:6f:80:f2:9f:ba:bc:03:09:1c:10:1f:
65:ba:dd:8a:17:e7:70:02:30:c1:ec:82:ac:40:c6:
90:fa:a7:d6:0b:9f:f4:ac:87:65:62:64:64:17:0a:
d0:82:eb:7b:e0:d5:8b:b8:7e:2c:5a:75:2e:21:5a:
e8:5e:d6:b8:79:aa:28:41:34:94:e4:45:b1:b1:1a:
c2:4b:22:5d:a2:4c:43:20:44:73:ef:24:78:84:6b:
76:1f:2d:b3:04:b9:9f:6e:06:1d:97:14:aa:08:e0:
cf:bb:f6:95:83:57:11:54:42:88:9e:47:a4:a1:23:
ec:19:69:c3:44:cd:95:45:49:86:23:76:45:9d:26:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:81:0D:81:19:BA:AC:4F:32:88:F3:4B:4F:30:E5:E0:5C:53:46
X509v3 Authority Key Identifier:
keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2b:e4:71:19:e1:56:2e:7e:e5:4c:58:62:5f:d3:71:85:f8:
59:25:53:82:16:8c:19:6d:58:69:41:3d:82:92:08:03:20:e7:
0b:9f:6c:b0:d3:6a:34:db:fd:75:57:0f:ff:e1:82:2f:a4:24:
fc:1f:44:af:0d:2f:b3:a5:bd:c8:02:92:e0:1f:df:1d:2b:9f:
37:a3:cd:b5:48:d6:01:71:d3:2f:34:9e:e4:a5:d8:b9:63:38:
52:06:09:21:41:4e:ca:f4:27:29:b7:d5:87:25:fd:8c:78:c5:
5f:d9:c7:bd:58:04:43:ee:ac:d0:a7:56:4a:ae:9c:67:49:64:
02:a2:8a:42:b5:61:56:4e:95:b5:c4:3c:af:6f:f1:fb:4a:3c:
e4:be:70:c8:af:ac:9a:ca:28:11:0f:68:24:9f:32:f6:ee:a6:
12:de:20:a9:5a:4a:70:df:ef:8d:5e:ef:81:7c:72:8d:bb:ab:
35:d8:f3:db:31:6d:50:59:a7:22:7d:d2:18:07:98:3b:6b:e5:
01:c5:44:53:ba:4c:bd:fe:00:3c:c1:ba:ac:1f:2d:60:8c:d5:
c8:85:d7:14:1c:d3:4d:83:6f:a6:fe:fc:8e:cc:1d:ce:bd:31:
af:13:bd:6d:53:53:d8:e9:37:f4:b1:6f:13:9a:67:f1:dd:6a:
2b:2f:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:34 2025 by rpki-client