Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: LiGGG87Sb2iF86t4TvPTNy9/w4vA8fLrByhHOoi1AOI=
Subject key identifier: C8:52:C6:01:98:85:4E:FC:B4:2D:78:25:56:41:70:FB:54:34:6F:C2
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 0197B77BF203CBC0B8C3ED807063E7EE3ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0A1F
Signing time: Sat 28 Jun 2025 17:00:42 +0000
Manifest this update: Sat 28 Jun 2025 17:00:42 +0000
Manifest next update: Sun 29 Jun 2025 17:00:42 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: tqUfYY1TeAcLYcsEA/f/V6pZ86Vkk0GUGcUPP2AQkj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f2:03:cb:c0:b8:c3:ed:80:70:63:e7:ee:3a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Jun 28 17:00:42 2025 GMT
Not After : Jun 29 17:00:42 2025 GMT
Subject: CN=c852c60198854efcb42d7825564170fb54346fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:b8:41:f8:de:6c:0a:6f:c4:d9:7c:41:be:
a1:e7:bb:cd:70:ad:f7:24:4b:8d:b0:6c:42:a1:d7:
3a:63:15:99:e8:e1:d1:01:e6:6d:fb:d0:1e:fd:79:
0f:8b:e8:2d:8f:68:e9:80:a4:64:40:3f:ef:a7:22:
85:44:96:da:0b:63:0e:60:e8:7e:e0:72:cf:01:80:
a4:0f:17:1d:3f:19:8f:99:0d:01:70:de:b8:c6:52:
b5:d8:87:cb:e8:b8:9a:71:22:f5:43:62:bb:51:51:
2f:a9:b0:9b:2b:73:e9:95:0d:a0:e8:c6:da:7b:c8:
39:c3:c4:25:11:33:f6:a7:cd:f8:4d:89:71:f9:ab:
ad:11:66:92:47:cd:dd:1e:d6:b8:57:49:99:6f:2b:
71:9e:a8:b3:54:c2:4e:4d:16:ab:44:97:89:e7:97:
f5:07:77:9c:bb:68:87:86:01:9e:55:dc:cb:b8:0c:
b5:ec:81:6d:1c:5d:37:ac:68:a7:e9:aa:ad:58:18:
3b:80:78:da:c6:a4:c1:f4:fc:98:05:ab:a1:46:fd:
a2:b2:8b:41:03:e8:e1:c4:3f:a4:25:45:74:34:37:
67:17:89:3a:06:5c:fe:bc:dc:b9:5d:f8:3f:39:0e:
ec:db:97:33:49:99:c5:96:3c:6e:94:59:4b:1b:1c:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:C6:01:98:85:4E:FC:B4:2D:78:25:56:41:70:FB:54:34:6F:C2
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:6a:3f:47:2e:ef:55:47:0f:29:a6:0c:9b:64:3b:28:1d:
eb:63:8f:9e:3f:a6:5a:9c:01:df:d1:2d:a4:22:a0:34:49:1b:
f5:de:51:3b:e9:3c:fb:82:ae:9e:09:16:2d:0a:d1:f4:75:e4:
47:b1:1e:87:ff:52:64:37:b3:e5:0f:73:25:c8:e0:2f:e7:7c:
a8:14:ab:3d:8c:62:18:e9:3b:2c:63:a1:bd:3f:07:67:88:81:
e9:21:5b:43:e8:d3:3a:d4:6d:f1:99:5d:37:7b:be:b5:91:a9:
b5:06:dc:7c:76:47:ce:6e:30:57:68:a0:71:b5:e8:88:70:e5:
75:c0:1d:5b:02:8a:50:72:32:be:c0:25:7c:a4:a6:3f:e6:3d:
f6:11:85:92:20:65:b3:28:43:16:4a:4d:97:ab:95:c2:46:24:
27:60:9a:ed:38:9d:71:f5:a8:63:43:84:d5:e3:78:2e:01:93:
57:e6:49:73:44:61:da:2e:4e:b7:b3:9f:f6:49:30:6a:a1:da:
d9:97:db:3e:da:e8:00:52:0c:8d:2e:af:f5:3d:ac:c7:85:00:
55:ee:76:01:6b:24:5e:22:74:77:fd:8e:45:95:76:cc:77:32:
2d:84:90:f9:27:17:82:c0:2c:e1:11:0d:44:eb:70:e5:7f:44:
bb:c8:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:12 2025 by rpki-client