Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: xXgrSWyBD85fGb54wS2ovOC3rk7inU2w1+FrYLCUtH4=
Subject key identifier: 64:BB:9F:3A:26:0C:D6:72:F8:82:23:3D:6F:78:76:18:FF:23:7F:6C
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 0197B8900BCE14C9ED1D18CF36B152502BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 0D75
Signing time: Sat 28 Jun 2025 22:02:17 +0000
Manifest this update: Sat 28 Jun 2025 22:02:17 +0000
Manifest next update: Sun 29 Jun 2025 22:02:17 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: 8RIYwiorRRrVSs6ulB6BjcPSrHLtPNc3FIjA2I3N+rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:0b:ce:14:c9:ed:1d:18:cf:36:b1:52:50:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Jun 28 22:02:17 2025 GMT
Not After : Jun 29 22:02:17 2025 GMT
Subject: CN=64bb9f3a260cd672f882233d6f787618ff237f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:ca:d3:6b:b9:1a:3b:44:cb:fc:96:33:63:
bb:0a:06:ba:f2:c6:c7:9d:70:33:68:b1:3f:46:0d:
40:87:88:a7:7c:23:bd:7e:8c:07:8e:09:cf:8a:46:
db:bf:72:03:74:c7:7a:c4:04:2d:3b:e7:c0:e1:72:
7e:be:5b:2e:a5:4a:dc:7c:c2:3a:f9:4c:a8:47:8c:
8f:66:e2:2f:3e:4f:89:53:e1:20:3d:d1:1f:83:f2:
5b:14:eb:4f:87:21:71:1b:1b:f1:20:80:f4:91:36:
a0:1c:89:de:a4:2a:de:34:b8:06:ec:7f:cc:6e:2b:
64:96:04:6c:51:0e:ae:ba:a3:1f:18:81:c1:7c:a7:
99:57:30:80:81:b2:cd:05:33:81:f5:b8:7a:3b:57:
c7:09:83:dc:d6:60:f8:de:93:c3:bf:cc:9d:7f:c2:
16:a3:b9:40:31:1f:de:c9:a5:f2:f6:fa:b9:96:a8:
eb:48:b5:d3:6a:ce:f1:66:f8:b5:1e:b6:f3:cf:98:
8d:67:ce:ca:b8:c4:b7:07:00:b8:02:e3:00:81:fd:
cb:aa:40:99:1e:4f:57:54:31:d0:27:81:0b:81:67:
51:da:e6:27:34:a5:d1:db:99:d1:f9:ec:0c:c1:ad:
d3:fc:cc:89:0d:6c:b4:18:3a:55:88:91:d9:0e:99:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:9F:3A:26:0C:D6:72:F8:82:23:3D:6F:78:76:18:FF:23:7F:6C
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:24:8d:e1:61:e6:08:bc:f1:0e:55:a8:bf:95:00:0c:7b:
2f:0c:15:db:97:21:9a:6d:8b:b1:e7:18:9b:3e:0d:80:60:65:
99:00:48:42:df:54:67:42:f5:76:ac:24:db:7b:5c:64:3a:1d:
6c:37:7f:ef:25:2c:ad:7f:06:33:2b:2c:8c:d4:fc:36:98:25:
f0:be:84:8c:fb:58:c3:f3:cd:bb:ab:56:a0:43:9a:8e:95:3f:
38:36:14:46:0c:fa:a5:62:db:0a:bf:10:7d:85:6f:e7:f8:b7:
cc:8a:09:ff:14:93:e0:f3:42:60:08:3a:eb:d3:f8:7b:cc:4e:
78:79:05:46:49:80:5c:f2:c9:f8:d4:65:41:3d:bc:1d:f9:5e:
dd:de:db:30:25:66:c7:df:28:1b:e8:9b:8c:1f:b0:47:a1:2c:
ed:83:ac:d4:73:26:01:02:7c:43:d4:7d:ce:62:cd:e9:7d:ca:
95:a0:9c:2d:3f:bf:7d:55:a4:0d:6d:33:00:f6:fb:3b:83:55:
7e:40:cc:00:03:94:8d:06:8e:65:2d:75:d6:e3:41:1f:db:f0:
00:87:a3:a8:dc:a2:b0:5e:bb:aa:a7:17:6a:fe:b2:a8:93:ba:
b4:a0:6f:f3:26:5c:1e:24:19:1f:c0:57:b3:71:48:9a:a9:e2:
a7:57:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:52:24 2025 by rpki-client