Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: uFQNUFTnBqNVrx4pBmjWT8W8M9WW1JzJUorhJdCk2WY=
Subject key identifier: 54:CB:E5:45:45:14:97:A5:9D:C6:65:A0:B6:A4:96:E0:19:DC:9A:1F
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0197B77BFBE1F7C8828B29194101C7BCB739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0948
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: 72Vn8PaklzSKu8vWQILeuIwk/2fyd/Wg1SWo9/HyIuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fb:e1:f7:c8:82:8b:29:19:41:01:c7:bc:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=54cbe545451497a59dc665a0b6a496e019dc9a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:89:4d:b3:2e:5a:e3:60:06:24:43:b1:b5:4a:
65:42:b1:60:71:f3:62:9b:c9:69:ee:ee:f4:26:45:
ea:a6:9e:17:7e:5f:9f:78:88:f2:80:63:af:e9:ae:
5f:7c:c8:9d:df:5c:73:2a:ef:b0:90:48:be:61:e3:
2e:89:ff:f1:b5:2c:96:5f:89:c1:21:6c:c1:66:cb:
9d:66:0a:b8:e0:4a:14:33:e2:70:06:3b:33:44:cd:
e8:4c:01:c3:e9:bf:04:da:fa:5d:5d:14:83:31:fb:
f2:43:56:a2:74:69:0e:f6:f6:a4:8c:5d:9c:15:bb:
e9:78:57:1f:cd:92:a0:14:f0:c1:d5:37:67:69:2c:
19:93:aa:b6:04:8d:87:f1:8e:b3:d0:a9:a7:bc:33:
a7:65:29:b2:bc:b9:98:ab:ae:f9:86:90:7a:24:23:
88:52:f9:87:d6:06:f6:ad:e0:6a:a7:82:de:39:48:
94:ac:df:40:53:d6:b8:30:c3:d2:84:4b:4b:06:47:
5f:c8:c8:f0:69:7b:ca:61:93:ee:2a:eb:a9:ae:d2:
c0:a3:68:0c:d6:13:f0:fb:64:97:65:15:56:10:f3:
d7:43:5f:cc:e8:eb:25:89:8d:fe:6c:d6:a1:e9:a5:
4f:dd:1b:fe:29:1d:37:11:ca:49:cd:a7:31:a8:3c:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CB:E5:45:45:14:97:A5:9D:C6:65:A0:B6:A4:96:E0:19:DC:9A:1F
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b6:9a:55:91:6b:8c:ac:bc:46:c1:7b:35:88:12:b9:28:22:
c6:d5:1d:40:b6:d6:4e:c3:f1:18:0a:58:36:ea:cf:9b:2a:66:
85:36:85:23:2f:d1:a6:8f:bb:82:02:76:a2:e5:70:64:1b:ee:
5b:93:a2:c3:ab:82:1a:a7:de:e9:8d:1c:fc:68:5c:f2:b7:ea:
58:c3:36:7a:1a:51:ec:a2:e3:10:d1:16:63:e5:47:eb:33:a6:
16:04:6d:b6:97:07:0b:ca:d1:95:7b:69:18:f7:ca:0e:5b:0c:
1b:98:d1:b7:a3:1e:47:7a:e8:2b:ca:85:1b:40:cb:c0:60:09:
09:18:ac:8e:be:bd:a8:48:89:1a:e9:ae:b0:b2:e0:cc:13:bf:
ab:64:2e:57:72:a6:31:2a:b9:62:3b:ec:0f:4b:24:59:d6:18:
74:1e:7a:3e:03:72:ae:81:d4:d6:cc:14:b2:79:3a:47:a9:10:
95:ff:0d:bb:5f:ea:bb:a1:2a:ce:21:75:9b:f8:55:23:a3:85:
9f:28:76:2a:7c:09:5a:d8:94:16:06:5d:06:ad:2c:53:77:92:
31:be:83:17:a8:cf:07:be:07:9a:1c:0e:79:64:38:99:79:3e:
80:ea:1e:6c:d1:5e:9d:92:1f:86:b3:e6:e9:98:d9:d2:a8:5c:
04:04:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:30 2025 by rpki-client