Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: SS+c9CTJCaayCWEwHljnEnDssNdlrc6ApJUaBE1LfCI=
Subject key identifier: 86:90:CD:3D:65:CA:1A:36:63:F3:39:FC:87:15:B9:C6:A9:6D:33:AA
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 0197B6A1918AD36B8982FCC5FDE6E49AF6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 1067
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: H1hDSCutaWTwTQic3CSDowvV/2YIf9OLzej7AIIxuG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:91:8a:d3:6b:89:82:fc:c5:fd:e6:e4:9a:f6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=8690cd3d65ca1a3663f339fc8715b9c6a96d33aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:91:c2:56:0b:37:f6:ed:5c:06:09:e4:56:
8a:ce:79:55:45:31:70:0e:60:04:52:9d:25:7b:76:
c7:3a:d8:9b:21:a0:31:83:88:0a:62:69:74:3e:e5:
8f:21:16:06:e9:bd:e8:a6:15:e3:20:df:46:ca:13:
36:7f:cd:ba:0d:0a:32:93:bb:32:18:03:c3:47:d1:
b3:86:f6:77:16:60:19:28:8a:1d:f4:77:d8:d2:de:
fe:d9:0d:f9:c4:d4:eb:c7:6a:b2:72:eb:51:be:e0:
2f:a6:38:e9:1d:82:6a:c5:1a:87:2c:ca:48:9f:88:
1d:70:9b:24:bf:b1:f3:80:56:79:32:86:7a:a0:11:
ae:2a:5f:00:9d:d9:b4:9e:5f:c1:fc:eb:db:a2:15:
96:d9:82:65:4c:a1:a5:9e:f6:31:94:f4:ab:2e:83:
21:a1:42:1a:c3:8c:ef:66:06:b2:94:88:dc:e9:6d:
af:66:98:9b:34:aa:d7:7a:42:13:08:0b:cd:ca:c5:
2d:27:27:fc:32:a9:3c:aa:6d:c5:ee:f4:0c:f6:20:
ac:db:31:4e:4e:79:fd:8c:ac:aa:0a:22:2f:b0:68:
d2:2e:c2:90:25:fd:6f:9d:18:8d:de:4c:1f:9a:57:
71:37:64:35:95:be:1d:d6:5e:56:90:49:07:1e:e4:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:CD:3D:65:CA:1A:36:63:F3:39:FC:87:15:B9:C6:A9:6D:33:AA
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:4a:c6:79:24:73:aa:23:ae:fa:d0:70:99:d4:28:74:c5:
d7:26:17:5f:b5:89:84:03:c9:21:83:12:16:75:9e:3a:04:1b:
15:09:f0:56:c2:49:d0:81:f3:fb:db:c3:62:1b:ed:5f:4e:04:
df:36:68:ab:8b:47:ac:aa:bd:26:e0:7d:97:84:94:b7:5e:1a:
6f:32:1f:73:3d:2a:14:29:f4:e3:99:f2:52:f5:06:6d:63:11:
39:ee:5f:df:f6:1e:3b:40:46:88:83:08:5d:4f:06:91:ea:7f:
fb:4a:49:c7:25:84:b7:c2:0e:66:97:32:4c:e5:7f:5a:ae:87:
4e:cb:ed:92:9b:c5:98:0b:9c:65:ae:39:14:16:5e:50:8b:78:
79:32:a1:7d:bc:12:53:92:3b:df:cc:60:c4:71:4e:64:38:4b:
3b:70:27:1b:1b:de:cb:7f:9f:18:11:38:0e:0b:dc:78:a9:45:
c7:59:d3:30:d1:ec:8f:71:a1:b5:fb:e6:53:42:f9:1f:47:21:
73:d1:01:e3:d2:2a:b8:1c:f8:52:ea:60:ab:76:61:13:a7:bd:
e8:a6:73:1c:56:25:05:9e:c3:4b:0c:2f:87:cc:be:2f:24:40:
35:2b:9b:75:71:e4:d2:37:db:5d:90:c7:e2:a2:b5:0b:88:ab:
31:dc:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:54 2025 by rpki-client