Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: EfBmX1QQ5W61TFl6Kt0f3QiO30TzZAjXpA44+LvLcX8=
Subject key identifier: 42:79:68:B4:89:62:FD:08:94:B8:F8:2A:9D:AD:96:DD:91:18:0C:07
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 0197B6A1916CA89E76F782334D778BD198A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: 2xDjQJcPXcA27cZZq83EOnlh5MTlJChuYusp5bipaB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:91:6c:a8:9e:76:f7:82:33:4d:77:8b:d1:98:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=427968b48962fd0894b8f82a9dad96dd91180c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:58:e1:49:29:0e:7f:88:c7:7b:18:8a:ef:
0c:16:51:99:73:51:28:4d:55:5e:fa:7c:12:c5:77:
87:ce:54:0d:c0:55:1d:c0:17:e5:89:fb:6f:d3:a9:
91:27:1c:09:3a:62:4f:04:86:c2:a8:0c:ad:60:a1:
d9:a0:78:76:0c:c8:a8:9a:37:00:c9:e5:1c:40:22:
7c:0f:bc:81:f5:a0:be:19:94:77:fc:58:e0:7c:fb:
fa:72:5c:f0:3f:f0:fd:c3:78:72:c5:80:bb:4d:c1:
78:24:6c:06:40:d8:fd:ea:fb:93:23:ce:2a:d9:9a:
a5:5d:dc:65:f8:21:8a:f6:bd:8d:43:e0:fe:b0:ba:
61:7c:85:e1:8a:8f:b0:55:32:b6:3c:66:97:95:10:
0c:2b:f8:57:0d:2e:17:12:b0:46:b0:9e:e3:d5:fe:
1c:03:c4:f6:b9:1f:a8:16:cd:73:81:45:ee:4b:26:
48:96:0b:0d:c7:7c:d1:02:32:20:ce:c9:c2:5e:40:
45:3c:94:b9:ac:fa:e3:1f:d6:a3:57:8c:2e:b4:7c:
24:f2:84:83:80:f1:7e:96:1a:78:c6:7f:e9:f3:29:
83:51:d8:3c:6b:c6:a0:d5:d7:17:38:7c:66:e1:e4:
f1:7b:0f:e6:ec:b3:41:08:29:98:50:60:4d:14:6e:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:68:B4:89:62:FD:08:94:B8:F8:2A:9D:AD:96:DD:91:18:0C:07
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5b:75:18:b3:3f:11:64:90:7f:b3:9d:63:a0:47:06:d5:84:
eb:0c:1a:8b:9a:ce:2c:58:44:66:70:59:da:db:c0:a5:fa:70:
24:76:fe:23:4f:79:20:c3:2b:e9:1f:14:a4:a7:63:bc:a8:db:
e1:be:a0:8f:ac:e2:ff:c9:40:3c:d1:f1:b8:f0:c1:f6:8f:ac:
16:29:47:c5:68:fb:cb:08:13:9c:08:dc:c6:c2:0b:50:2e:a3:
c9:ee:cd:09:16:e9:fe:e6:3c:6d:72:d0:49:59:77:bd:ca:b8:
5c:b4:3d:69:dc:9d:1f:5e:77:e1:d9:fe:a2:a0:d2:3b:be:f0:
db:75:be:ba:01:78:3f:0b:10:3f:66:52:bc:e2:a6:10:8c:3c:
ac:ec:d7:f3:cf:73:f2:f3:cb:0c:ed:b4:b0:32:b0:7b:45:03:
c9:2d:b5:fb:ed:0a:4c:30:20:2c:28:57:ee:00:00:3b:39:e1:
a7:51:99:be:aa:da:68:02:4f:50:a8:e1:14:d8:28:26:e7:a2:
79:98:eb:6c:08:10:bc:20:53:3d:7f:fe:3f:9f:0e:b3:64:6a:
1c:62:ba:b2:12:b2:4a:bf:43:b1:74:6d:7e:af:ff:73:96:97:
ab:46:dd:30:19:6e:2d:74:d5:4d:f6:e0:5b:66:d1:50:d8:7d:
9d:1a:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:25 2025 by rpki-client