Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
File: cnOYybFuqY0iKkwpyvey68mE8oI.mft (raw, json)
Hash identifier: XiaPNqVX1S3cv+AVg7ahYPgpMXi+kp/xsyMg2G5dVZE=
Subject key identifier: 9D:90:60:67:E9:05:ED:80:01:E4:96:0F:64:59:5D:1A:04:11:F0:31
Authority key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
Certificate issuer: /CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Certificate serial: 0197B8906A63F79924559276CD15FBECB5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
Manifest number: 014E
Signing time: Sat 28 Jun 2025 22:02:41 +0000
Manifest this update: Sat 28 Jun 2025 22:02:41 +0000
Manifest next update: Sun 29 Jun 2025 22:02:41 +0000
Files and hashes: 1: cnOYybFuqY0iKkwpyvey68mE8oI.crl (hash: /Ha1y+9tyMxWIek/VnUFS/mAkcrXw3y3WAhYiREa4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:6a:63:f7:99:24:55:92:76:cd:15:fb:ec:b5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Validity
Not Before: Jun 28 22:02:41 2025 GMT
Not After : Jun 29 22:02:41 2025 GMT
Subject: CN=9d906067e905ed8001e4960f64595d1a0411f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:c4:67:9c:36:ac:eb:6c:ff:e2:1b:38:89:
af:db:bf:d5:ea:9f:c8:5b:87:28:e4:8d:d7:c3:7c:
d5:3c:f9:ac:9b:78:32:da:30:bd:f7:dc:2a:21:7a:
2b:4e:02:41:c5:ef:2e:98:71:1b:62:6f:b7:b8:28:
9e:ca:bd:44:cb:90:7e:0e:67:17:7a:dd:b4:5d:67:
eb:59:cd:e1:1b:99:df:6b:de:9d:57:a6:df:74:d6:
7c:eb:1d:cb:35:c0:f9:33:58:93:e5:a0:fb:f6:ee:
22:43:92:97:25:a0:87:5e:85:43:71:1c:48:3a:61:
09:1b:f7:bb:c7:eb:81:6e:81:37:c5:03:2d:35:d1:
5c:af:63:f8:d1:ad:a8:f7:63:9a:8c:25:7f:01:44:
f0:b2:27:bc:ff:20:7e:70:f0:89:aa:a6:3f:61:df:
86:20:19:58:e2:18:32:60:de:8f:23:31:6a:e9:27:
0d:94:f4:1b:83:f6:b2:bf:30:09:a6:9b:11:9a:d5:
85:e0:ff:63:37:c5:20:48:56:99:66:3b:8f:38:75:
a8:86:60:04:a8:4f:97:3f:c3:56:05:a6:79:ad:c7:
16:6e:e1:66:27:cf:df:0c:0d:23:d3:91:26:ba:e8:
99:8f:a2:1f:40:b3:b2:64:12:ef:b7:e0:d0:3d:1c:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:90:60:67:E9:05:ED:80:01:E4:96:0F:64:59:5D:1A:04:11:F0:31
X509v3 Authority Key Identifier:
keyid:72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:75:57:e0:e0:aa:ec:80:91:67:4c:8f:6a:26:0d:5d:35:49:
17:e5:45:66:58:f3:d6:55:28:81:b9:44:cd:0a:0c:b3:b9:44:
b2:55:44:e7:df:87:d1:37:02:df:3f:1f:e4:4b:64:b0:9d:7b:
5a:90:0d:57:2e:12:38:35:3f:08:9d:e0:a5:03:57:2e:2b:59:
72:8b:f7:76:4a:86:00:cf:4f:26:02:b3:59:22:1c:1e:41:73:
81:52:ea:1f:0f:fc:04:b4:41:a6:f1:d8:6b:67:47:bb:93:9d:
01:5b:8d:06:22:d3:8b:2d:cf:37:05:8d:c1:0f:af:89:e1:84:
3a:6b:2b:63:8c:11:79:7c:71:91:cb:6e:d7:67:ad:55:36:79:
eb:67:3a:d4:d2:09:26:c8:9b:7b:46:d5:8d:f5:d9:d1:2f:0d:
3c:0c:41:22:7e:48:86:c3:2f:95:dd:9c:e9:a4:b9:b3:12:c8:
6d:b2:5d:b4:80:c8:dd:b2:95:e9:d9:5f:a1:3b:5c:28:43:d3:
a6:b6:d4:cb:40:16:44:d3:fd:b9:af:1b:6e:e1:6a:33:1b:8a:
a3:c7:ad:05:c6:bb:30:58:13:b9:cb:dd:81:f7:e1:b4:d5:28:
bf:29:95:a6:81:9e:76:ea:ec:51:19:c3:bb:6f:f7:8a:7a:b2:
45:98:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:44 2025 by rpki-client