Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: gKPvpt22fV+NJ4ZGZ92RMgrHSPcaKwgWCi8VKxofvT8=
Subject key identifier: D5:E5:70:48:1A:65:01:1B:51:37:61:36:C2:59:F0:56:DB:32:D2:A2
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 0197B6A072B528DC2A8EDDBC1FBBEAC188A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: g/zATptnmm83L+XiN/wLvsol6ykQ8Jq3fgIcql/h7F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:72:b5:28:dc:2a:8e:dd:bc:1f:bb:ea:c1:88:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=d5e570481a65011b51376136c259f056db32d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:7e:d6:37:63:4b:5f:16:04:26:4a:3a:9b:
c9:78:7a:40:01:4b:cf:25:0d:91:78:0a:73:65:a3:
db:f0:57:15:51:d0:7c:89:d6:e2:51:05:9e:05:7b:
e2:f3:60:5c:09:09:03:c3:7e:38:ca:99:be:c6:c8:
1a:41:71:49:66:68:8e:69:e1:59:bf:85:53:d8:ac:
b8:91:0a:b0:d2:c9:6a:a3:33:00:03:f4:47:b5:03:
1b:ef:df:23:82:74:f4:76:3d:4a:9d:f0:b1:b8:dd:
74:f5:41:8f:b2:b0:71:f2:83:b7:b6:09:98:6e:1a:
67:b0:46:8b:05:9c:63:a1:ea:80:ce:10:10:8d:50:
08:e7:09:03:04:ab:bd:63:69:13:c9:e5:4b:bd:4d:
df:1f:0f:0d:8b:09:a8:d3:10:13:9f:c7:42:a9:0f:
37:ca:03:09:7d:d2:70:05:b9:8f:74:37:68:ad:d1:
fc:4f:5d:f5:2c:e1:95:ec:d4:c8:63:9d:cf:e3:9d:
c5:7e:4e:d1:72:c3:31:2a:3b:48:47:6f:87:ea:b4:
60:92:65:67:7f:3d:1d:b3:dd:28:68:83:f6:5c:dc:
30:de:27:39:69:a0:f7:46:91:04:01:b7:8f:02:49:
b6:c0:1e:3c:0d:41:7f:4b:66:b6:48:7a:4f:21:27:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:70:48:1A:65:01:1B:51:37:61:36:C2:59:F0:56:DB:32:D2:A2
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0a:c2:19:58:9e:e5:39:9e:90:91:eb:02:f2:3e:bd:e0:07:
49:8b:fa:cc:c9:f5:55:b8:8b:00:ad:e5:a1:6f:32:fb:16:6e:
1a:69:a3:68:12:c6:80:2f:3a:f8:8a:08:e2:a2:c7:2c:f0:e6:
9e:22:68:44:50:32:9d:65:4e:25:3d:b8:32:17:44:0c:ee:11:
df:f7:83:89:0b:cf:f5:fa:7d:74:b3:00:06:88:b6:2d:c2:a1:
62:a2:55:bc:02:d5:c3:4b:55:9f:5d:37:1a:ea:16:22:bf:9a:
5f:de:79:be:1d:fe:cf:7f:e0:92:f6:45:80:8b:1f:28:4d:7a:
f2:32:df:da:59:90:20:19:76:8c:7e:63:bd:5f:91:f1:bc:1d:
7e:ea:28:e7:80:1a:80:99:c4:8e:e4:71:1f:e7:56:19:f6:84:
4b:10:4b:f4:e2:e5:5e:52:ad:03:31:1a:e9:58:55:83:89:6a:
32:e4:03:16:ea:13:33:ad:d8:95:5a:55:b5:df:f3:f4:a5:48:
54:06:a8:0e:05:21:47:56:40:76:c9:28:62:a2:e3:31:0b:64:
0d:f2:89:b4:5d:b3:0d:57:2a:74:76:e0:e2:e6:f0:82:13:67:
24:51:71:2f:8b:51:8e:08:a8:7a:6e:01:4e:91:ff:57:61:58:
62:4e:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:03 2025 by rpki-client