Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File: yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier: QAdyEOofgooxtkmwuoxWlBppVrf6VUIcbdk155HuzYM=
Subject key identifier: F1:24:A6:95:2A:97:61:EE:3F:42:26:48:55:05:B1:76:6A:B6:7B:EA
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 0197B7B37DC879F6928D9C94D28C20D3DC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number: 054C
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: HHKeu4cI9sWwDJnV0PpCdXeYxhqaaOI/1h9PP3k9BrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7d:c8:79:f6:92:8d:9c:94:d2:8c:20:d3:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=f124a6952a9761ee3f4226485505b1766ab67bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:fb:16:11:f9:bf:0c:2a:2b:11:4c:74:cb:
3a:53:3b:2c:c4:8a:6c:a7:8f:47:da:2d:d1:ed:fa:
0c:85:af:66:be:e8:83:92:1d:bb:55:09:2e:36:f3:
79:0c:72:63:c8:de:ca:cf:6f:da:d4:d8:b1:61:17:
48:fe:a1:26:b1:24:03:0d:e2:16:b0:67:a0:68:ee:
28:8a:ab:c3:da:7b:fd:18:62:65:97:e3:c7:f0:f8:
ab:97:7d:09:2f:7e:bd:5b:86:aa:1b:bf:34:c6:f6:
4e:76:99:9d:5f:26:f4:56:71:48:41:e8:e7:86:36:
31:92:d0:54:50:ce:11:e9:f1:60:2c:7e:e6:20:fc:
79:af:8f:27:97:df:72:ab:73:10:34:58:77:fc:2e:
d3:d1:fb:5d:da:3e:60:be:a4:b9:cc:f9:69:7c:4a:
e6:66:04:40:27:54:ca:62:7d:ae:51:1d:e7:ec:ea:
d1:81:a1:b0:7f:e7:9c:f2:cf:7a:27:5b:47:ee:4c:
ef:92:fc:b1:b2:65:ec:3d:0f:b4:39:88:35:42:17:
93:2a:bb:a9:b7:bf:08:93:e8:52:44:9b:93:d1:96:
01:ef:19:b0:b3:7e:9a:a2:3e:62:51:26:2d:fb:45:
61:40:65:3b:41:c3:42:5d:35:77:91:33:43:db:d9:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:A6:95:2A:97:61:EE:3F:42:26:48:55:05:B1:76:6A:B6:7B:EA
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:6f:f2:7e:57:ca:59:8e:5a:2b:d4:4c:77:6c:a7:f5:e5:
9d:24:aa:7c:4a:0e:55:fa:43:f2:26:9f:f8:b5:84:f0:7e:89:
f6:19:54:d9:74:06:2e:a6:91:51:ec:6e:aa:39:24:a0:f9:29:
a0:d7:e2:4a:3c:b3:d3:a7:eb:fa:ac:2d:a4:2f:3a:ef:b2:69:
eb:7e:77:5a:77:4b:05:6e:fb:d9:72:7c:1a:61:93:84:08:2d:
b5:0f:f6:bc:ca:58:e0:e3:84:42:c6:2b:77:5c:fd:d8:e9:1f:
59:18:ae:5f:4d:a5:b2:5b:e0:80:2e:eb:dd:15:87:5b:b5:3e:
c8:15:c0:1b:6d:14:8c:4d:49:f1:c1:ff:06:63:5e:79:74:c5:
fe:85:2d:11:7e:7f:10:51:4e:07:20:92:7d:cb:9e:87:b6:9d:
c5:87:5c:78:02:89:d7:63:95:d2:b5:40:9f:ad:68:37:0b:78:
58:31:69:3d:32:f7:76:0c:99:b1:4c:08:4a:e5:ac:cd:29:1e:
0f:bb:a6:e3:e9:14:db:12:af:a0:96:91:c0:61:e4:21:95:3c:
47:ff:3f:ce:b1:eb:bf:ec:d0:a0:59:59:d0:17:19:c8:d0:d3:
1d:ba:cf:e0:cc:9b:92:6f:b9:a6:0b:72:a6:f5:2c:f7:50:45:
dc:6c:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:44 2025 by rpki-client