Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: HE0+ZYampjc/rCptjv8JE3TDareAzZc6CsSgwv+vrCY=
Subject key identifier: BE:4C:6E:98:A0:EE:81:C7:7C:25:82:94:33:58:F0:D7:71:B2:4F:B2
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 0197C56F07FDD4305E067924830A8D5775E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 0AC1
Signing time: Tue 01 Jul 2025 10:01:17 +0000
Manifest this update: Tue 01 Jul 2025 10:01:17 +0000
Manifest next update: Wed 02 Jul 2025 10:01:17 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: RSWiiifoeoOfbdf0bKScaQ4rn/pLF8cPcjPWZanxCXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:07:fd:d4:30:5e:06:79:24:83:0a:8d:57:75:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Jul 1 10:01:17 2025 GMT
Not After : Jul 2 10:01:17 2025 GMT
Subject: CN=be4c6e98a0ee81c77c2582943358f0d771b24fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:2f:a4:1b:e9:58:60:54:b4:14:e2:af:fc:
88:e4:4a:15:f5:75:fa:8d:20:bd:87:ba:33:0f:61:
4a:48:9b:11:0e:db:96:d1:34:33:92:a5:f6:cc:c5:
27:74:9b:22:f9:b3:db:20:b4:57:52:20:1f:87:7d:
e8:8f:b1:19:1b:26:64:1a:7e:67:52:4c:cb:c6:bb:
ac:03:41:53:f1:c8:74:0d:47:52:03:50:af:da:db:
ed:bf:4b:db:0a:81:58:41:62:07:86:e8:e5:3d:40:
47:85:5b:c2:1a:d3:fe:8f:16:9b:3c:a1:0d:e6:3d:
16:dd:3d:06:45:d6:51:2c:92:25:f5:be:e3:ad:42:
b4:fe:48:b7:04:b6:12:f9:79:e4:78:03:ee:3a:93:
3e:80:57:c0:1d:c2:6e:52:25:64:3b:ae:3c:7c:df:
92:03:b3:68:69:60:74:b8:1a:ec:63:98:eb:54:5f:
b3:8f:d2:6a:9a:63:9f:06:71:c2:4d:13:6a:c4:fc:
08:16:10:2e:2c:57:04:e2:47:0e:ba:ba:18:40:d8:
ec:8b:53:72:19:52:7d:d9:1b:c1:c8:4e:dd:08:f9:
e7:6c:33:1f:1d:7a:38:9e:11:d2:40:d0:65:68:a0:
06:6f:1b:26:a4:07:30:a0:62:a8:08:5c:ad:96:3c:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:6E:98:A0:EE:81:C7:7C:25:82:94:33:58:F0:D7:71:B2:4F:B2
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a8:ae:cd:a4:b5:89:5e:4a:6e:48:ad:c3:de:d8:c7:bc:dd:
5a:4a:2f:4d:8d:aa:36:67:f8:04:e2:bd:ad:57:21:24:ac:08:
a0:84:7e:6b:58:d3:31:90:b9:3c:d1:0a:eb:e8:61:79:77:3e:
ee:08:e7:f5:6f:67:bd:13:70:87:96:27:e4:c3:3b:d7:18:dd:
89:e9:db:f5:bd:ca:23:94:61:e1:f7:94:4c:2b:81:b0:e9:d6:
44:ed:3d:1e:95:0a:59:bb:0f:c8:c9:67:c6:de:45:b2:39:c8:
69:42:26:00:f5:41:59:4e:6e:da:fc:0d:e0:47:d2:ca:e1:7e:
07:c5:70:ec:c4:cb:ff:cd:d2:dc:90:74:ab:f4:98:b0:ca:cd:
dd:e4:98:f3:e2:dc:65:11:3e:ac:2b:76:3e:4e:71:4a:d4:6d:
9b:09:5b:0c:1d:ae:d0:5d:8f:aa:84:7c:7f:c2:e7:e2:b2:92:
cb:89:b8:5c:54:2d:12:c3:65:fc:19:bc:36:db:92:da:eb:36:
86:86:bf:07:59:b2:8c:ca:73:ea:a1:3d:34:a4:25:70:07:93:
c7:f1:a8:42:66:9d:85:e1:31:01:65:57:f4:da:c4:20:93:ed:
1e:1d:2f:16:b6:cc:63:b2:a9:54:62:f5:d9:38:86:8b:c1:60:
43:bc:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:28:35 2025 by rpki-client