Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: ZfNQbaI0AQv6HPob46O4WrBUdodOiDfN114NJDqBEZg=
Subject key identifier: 0B:18:68:61:67:79:E8:39:1C:AA:BA:8F:9E:63:40:16:20:AC:BB:28
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 0197B7456F3F295AEFE179FC0AFCF04C7FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: pQRxwuYaXG291Y0+2V1TGQmT90VOp2TBfy2xP32jaA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6f:3f:29:5a:ef:e1:79:fc:0a:fc:f0:4c:7f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=0b1868616779e8391caaba8f9e63401620acbb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:35:90:09:e2:58:ee:e3:c6:19:2e:de:4a:
95:89:42:62:24:73:5f:4c:b0:43:f4:ea:95:d5:c1:
d6:79:9c:85:b5:0d:a3:a5:13:9c:ab:ff:99:61:6b:
ec:01:9e:bd:e5:fc:a2:b2:e6:f7:00:d9:01:22:f8:
13:64:dd:e0:46:87:2e:2c:90:5b:23:ae:7a:65:9e:
dd:87:5b:42:12:22:14:e5:2f:28:1f:7f:ea:af:a1:
f9:19:eb:b3:3a:64:87:93:aa:17:ae:95:c6:bc:86:
4e:71:b3:64:80:fd:ea:0d:a8:93:8b:86:a6:3e:66:
76:fa:eb:db:a5:fc:19:10:f8:13:52:0d:8e:ed:b1:
e6:8b:e1:78:22:3c:13:5c:c3:e3:a0:c3:1f:97:d5:
9c:56:ac:55:ef:86:e7:69:e0:72:fc:43:78:d8:1a:
ce:49:25:d7:84:16:f4:3b:b4:a9:b2:c6:15:c0:f6:
f3:fc:34:06:cb:a9:ed:7e:32:36:19:98:46:fa:d9:
3d:b8:4a:57:04:96:0f:e8:c7:57:1d:be:44:05:bc:
a5:71:b9:01:5b:13:01:4e:43:55:84:e0:ab:f6:38:
f9:10:a8:f9:e1:b0:8c:cc:63:b4:60:b6:cf:59:7a:
a6:24:91:e0:a8:6f:5b:0d:47:f5:8d:66:06:2b:73:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:68:61:67:79:E8:39:1C:AA:BA:8F:9E:63:40:16:20:AC:BB:28
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:e3:d9:3c:13:ad:d7:c7:0d:88:52:c9:b6:29:a1:7c:17:
db:4d:85:cc:ac:5e:e9:bf:ab:69:45:9f:57:8e:07:7a:dd:ff:
e2:b4:c1:f2:04:59:f7:0b:7f:37:10:19:15:48:b9:20:11:2c:
2a:46:45:fe:78:ef:22:7b:1e:64:98:04:9b:7a:db:c0:3b:f6:
19:45:2f:41:7f:92:ec:33:dc:7b:7b:ce:74:f2:de:e5:05:5e:
54:c2:e4:5b:b3:56:eb:84:9e:8d:e5:63:f2:1e:b4:da:00:24:
30:34:49:1e:0f:51:a0:5a:dd:bc:83:d5:4b:5a:b6:1a:5f:de:
55:16:81:c2:d3:78:fd:63:4e:81:c6:ff:a5:9e:aa:de:38:ec:
77:78:80:57:8a:ff:b3:a4:15:6a:80:2e:21:b1:51:34:41:c4:
82:4b:ba:c8:05:00:42:32:5f:88:c8:d0:57:30:77:1e:a8:b1:
a9:2a:30:26:12:6c:b8:6a:01:97:45:1d:69:cb:1b:8e:5c:82:
9a:d8:8a:24:7f:55:31:61:b0:6c:fa:3f:0a:72:54:c6:f3:1d:
85:ef:a7:11:06:b8:23:1a:44:3b:1c:cb:76:4e:41:6f:ff:89:
7c:41:07:b2:e3:e0:cb:b3:6c:97:b5:5c:e9:bc:60:41:72:f4:
37:a2:c0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:15:21 2025 by rpki-client