Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: 3IvmEiXXCno6cEMt8EnhMu3kpTZtiIDZUrYGqYwOcHs=
Subject key identifier: 6B:01:4D:82:0C:77:83:2C:53:26:D2:39:E7:A7:FE:83:2A:78:9A:4E
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 0197B6A1F5E25B0133E75671AE0411C96396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 0FF5
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: gH62fDMFmVJEzlaHnKoOipa2io8q+GPEwObImkSH+Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f5:e2:5b:01:33:e7:56:71:ae:04:11:c9:63:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=6b014d820c77832c5326d239e7a7fe832a789a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:b8:55:94:34:4b:7f:15:1f:90:19:4b:51:
44:45:86:85:91:7f:b9:09:dd:4c:16:24:1d:80:e4:
77:b6:c3:c2:64:6c:f2:c0:51:f4:bb:e0:cb:8f:22:
59:cb:c9:83:ac:20:bc:91:77:0e:bf:66:21:30:a1:
c6:b2:2c:35:e2:bd:1e:f5:b6:0d:9c:9d:fc:5f:82:
3a:29:56:6d:f8:ce:16:c7:31:3d:d2:7b:0c:b9:51:
df:a1:ad:8e:7a:46:38:7d:cb:28:8f:0f:1e:6d:90:
51:aa:32:42:00:2a:35:ea:9c:4b:df:c5:67:17:0d:
29:1a:07:ec:1e:49:3b:83:33:c7:96:e2:73:13:b4:
b1:f2:00:a9:ee:54:a1:45:5b:1b:ef:3c:30:1b:e5:
7e:dd:eb:be:6b:15:75:90:8a:d4:da:93:d4:75:51:
17:6f:a7:02:0d:2b:40:c2:d6:13:29:ac:1d:c4:cb:
ae:1b:32:bc:c4:0b:26:71:94:82:ed:d4:50:24:c6:
f8:9c:27:33:21:63:8e:ed:c5:79:ec:0e:1e:bd:78:
4b:81:c9:a5:9c:d9:d1:57:09:28:fd:33:5b:06:49:
1b:41:79:38:75:fc:50:f2:bd:75:3e:17:c4:52:d3:
39:51:5b:19:37:bf:82:8b:e9:77:3c:04:b8:df:cd:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:01:4D:82:0C:77:83:2C:53:26:D2:39:E7:A7:FE:83:2A:78:9A:4E
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:25:4d:e6:b4:17:58:f0:3f:51:cb:0f:ee:08:37:96:b7:
c4:60:06:96:51:b7:5f:23:c5:67:ac:48:30:6c:2b:22:81:36:
c1:61:6f:64:18:02:06:eb:38:0c:7f:74:07:d3:16:88:e3:63:
2e:d6:b2:de:96:16:f5:52:71:7e:b5:fd:10:0e:00:f0:32:76:
b4:43:da:10:0c:bd:d0:0f:c6:59:d8:a3:eb:85:78:59:68:ee:
45:f7:bd:a7:1f:dd:69:0d:5d:38:b8:39:3e:2e:f8:a9:94:b8:
38:23:2e:b4:09:f5:60:d1:97:15:4b:7c:71:31:d6:9f:9f:9b:
4a:fb:58:0d:7e:45:12:2b:90:72:eb:5a:dd:54:b0:ce:0c:0d:
fc:7a:d7:6b:25:3f:67:5f:fd:b4:c9:00:58:63:be:d4:c1:88:
a5:76:9f:97:e6:a5:82:10:d2:41:a2:26:ab:92:35:7b:be:f6:
a6:5c:c3:bf:28:4f:8e:d5:8f:2a:6b:bf:fa:01:18:c7:78:18:
2c:58:de:c5:0e:b8:5a:fc:51:7a:f0:07:bf:39:b6:dd:86:20:
ce:ac:08:1b:8c:5e:2f:13:09:36:23:1f:34:42:88:a8:9b:09:
94:ac:84:a3:20:07:0a:02:1d:2c:19:70:59:3b:d1:51:45:2f:
db:9b:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:03 2025 by rpki-client