Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: if+z7y62vkVoFXA2sw78qROr3BEVeG8NKPawJQ5HziU=
Subject key identifier: BE:78:4F:A7:4A:25:0C:92:84:B8:02:7B:31:69:7A:71:FD:46:F3:D7
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 0197B6A11C7B15E1A81030C5E4B9C68479C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: RCiPWFlr9IIt3dG/2LPMULCOwJLEf1h5pq0SCimn3Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1c:7b:15:e1:a8:10:30:c5:e4:b9:c6:84:79:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=be784fa74a250c9284b8027b31697a71fd46f3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:e6:c4:48:1d:e9:08:ae:a4:1e:d2:28:38:
ee:eb:d8:87:6c:81:5f:0f:04:23:f2:90:90:88:9d:
5e:08:73:bf:18:5f:07:2b:52:e5:37:09:05:fd:e0:
a7:71:11:a1:64:d7:4c:c4:e7:62:3d:39:dc:ad:40:
9f:e1:d8:47:94:57:0b:e0:4f:b5:0d:c0:eb:f8:ea:
fc:3f:11:49:e8:eb:a4:2b:0c:c0:7b:4a:da:49:b5:
46:d9:19:65:ce:ab:16:e6:cc:58:77:a9:a5:bd:f1:
38:e6:db:47:9c:7e:0f:94:cd:7c:30:2b:2e:ac:7b:
af:15:73:13:c0:7c:9a:0c:c7:68:f5:6e:fc:00:13:
a4:07:47:b3:26:c7:67:9f:c6:31:48:81:88:b4:3f:
ff:51:e5:62:ad:ea:6a:5f:07:9e:69:ac:b4:f8:84:
14:6f:82:08:ad:a5:6f:67:29:b1:c4:5e:2b:9d:05:
ce:37:84:e6:f0:a4:d0:3a:d0:18:4a:2f:c7:53:f9:
37:59:d9:67:8d:f1:a2:35:68:28:ae:a3:db:d1:79:
76:ff:01:cf:20:7d:b9:76:bd:a7:13:3a:d9:7d:13:
f3:1c:3c:a6:db:35:fc:1e:f2:51:81:2b:85:c4:10:
77:cf:2d:ff:fa:0c:23:cd:2c:81:37:cb:58:72:19:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:4F:A7:4A:25:0C:92:84:B8:02:7B:31:69:7A:71:FD:46:F3:D7
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6a:0e:18:bc:6a:aa:49:3d:4f:12:23:d7:ac:78:a4:40:fe:
7b:02:63:f5:0c:7a:71:49:e8:8f:ca:30:de:d6:4e:b6:e3:13:
3e:88:ff:75:00:0b:1f:7e:e3:5a:34:09:b2:bd:35:3b:33:01:
1f:97:9b:09:17:15:67:7c:36:1b:d0:37:56:2b:61:74:af:ab:
7e:ec:72:6c:51:8d:27:09:1d:1a:dc:69:79:71:64:c9:54:5a:
67:da:7f:24:0b:ab:42:c5:e7:43:88:c0:73:de:07:76:e4:29:
a6:2a:8a:f3:aa:b0:1d:d2:c4:b1:14:ed:87:10:72:1b:cc:35:
5e:b3:41:5f:ba:08:8e:e1:e8:6d:1c:95:f7:ca:a3:e6:5d:ec:
fa:0b:a9:2b:9b:c1:df:42:95:59:9f:20:2e:a5:cc:32:f1:48:
99:29:de:ee:97:4c:01:36:29:71:f2:cc:8d:9e:86:f2:d8:fe:
4c:67:43:38:e7:90:6a:51:18:0a:39:e9:4a:33:7a:03:86:76:
71:1e:8f:68:57:2a:f8:43:9f:0c:a2:8d:f4:05:69:45:25:2c:
dc:6d:eb:c0:48:f4:04:fd:ff:7f:d1:31:0e:5b:4c:ef:2a:26:
4d:a7:05:ca:d0:f1:a0:e0:41:4c:38:21:2c:3f:e3:af:9d:e0:
e6:21:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:56 2025 by rpki-client