Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: Dyxhahcva+7OGzocrwfxKpIi9oBLS1EnyI8yRTvnb80=
Subject key identifier: 40:F0:B4:D3:29:CD:60:CE:82:F6:BA:50:F2:34:10:D7:41:6B:C4:92
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 0197C75D0EDDE637C678F1EFEFE0BACCDFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 1252
Signing time: Tue 01 Jul 2025 19:00:54 +0000
Manifest this update: Tue 01 Jul 2025 19:00:54 +0000
Manifest next update: Wed 02 Jul 2025 19:00:54 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: bUHE95qAmgwi+oMU7yFVHFujl/XANYZyogxFy+z87EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:0e:dd:e6:37:c6:78:f1:ef:ef:e0:ba:cc:df:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Jul 1 19:00:54 2025 GMT
Not After : Jul 2 19:00:54 2025 GMT
Subject: CN=40f0b4d329cd60ce82f6ba50f23410d7416bc492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:e5:01:9d:5c:9a:b4:56:64:18:ac:70:54:
0a:1e:9a:c3:ad:5c:3d:e7:13:d4:01:fa:f6:77:20:
d6:ec:24:07:c3:2f:b5:b8:e0:b6:9c:77:f2:e7:ff:
7d:4b:e2:36:03:44:bb:92:52:2a:0e:61:31:15:d2:
13:37:b9:b0:bf:75:bf:1a:ef:8d:ed:04:47:b8:c6:
aa:1e:58:05:f8:bf:bb:7d:1b:b9:13:8e:44:db:f9:
b4:cc:48:cc:d8:49:3b:8e:91:58:66:e8:36:4f:b6:
b8:a7:4e:c2:80:a2:eb:5d:36:4a:89:1f:9d:c2:88:
8f:d0:35:b1:5c:d4:e1:97:57:be:9c:fd:98:fa:8d:
ad:a3:da:b8:49:56:b4:4c:94:61:ef:88:a1:a0:36:
1e:23:26:ed:e4:98:97:33:17:9d:63:2c:34:12:c4:
2b:a9:d5:63:7f:34:56:86:97:93:29:f1:c7:0b:eb:
9b:72:cb:da:0e:82:8f:14:d6:cd:04:1c:83:0e:f4:
17:3e:55:16:41:68:d1:bf:54:bb:bd:39:bd:f9:78:
69:b3:f3:46:3d:94:d5:13:a1:25:f1:7b:04:d5:26:
90:2f:96:21:47:6f:0f:d4:6f:ad:52:25:dd:cb:73:
ca:6b:0f:5a:0f:df:b7:6d:87:c1:46:e6:fd:54:70:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:B4:D3:29:CD:60:CE:82:F6:BA:50:F2:34:10:D7:41:6B:C4:92
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:eb:7c:0e:53:82:a9:a5:4e:25:59:59:2f:76:ae:a1:79:98:
40:39:55:7e:cd:34:6f:50:70:4d:fc:f4:c3:21:4a:db:56:c8:
6a:ed:e4:15:36:8c:90:b1:c0:1f:64:24:e8:fd:e3:91:ac:5d:
0f:36:12:dd:fc:05:bf:21:31:98:10:1d:e6:13:ea:27:43:22:
81:bf:29:76:53:8c:7c:b3:f2:8e:cd:fa:7e:87:fb:25:c2:2e:
c2:61:e0:a6:e1:fc:c2:f7:29:e7:c8:ee:93:a8:0e:65:66:6e:
34:04:3a:9e:06:ae:c8:99:09:73:46:66:c1:78:de:32:04:cb:
62:d8:f1:bb:8f:f7:a2:d0:0c:43:24:ff:f2:fe:66:9f:6b:eb:
fd:2f:e3:bc:35:db:5a:4b:76:a4:1b:4e:f3:9a:30:5e:db:c8:
d6:76:8b:98:67:bf:5f:b5:fc:45:e7:e3:25:ae:95:6d:99:4b:
c6:d1:19:e1:50:e9:6b:f3:57:23:40:cd:14:ac:ce:e3:17:70:
11:dc:ea:76:5b:12:b5:28:bd:cd:7e:ac:fc:ee:8f:e7:50:75:
a7:ba:6c:1b:bd:40:74:5c:76:8b:a1:51:86:88:10:4d:79:75:
49:ec:c7:c1:e5:36:a0:37:6c:89:d2:c1:61:d0:e5:bb:ec:9c:
54:6f:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:46:48 2025 by rpki-client