Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: t17hMF9188Dg9/Er/G4qbmZIXpJ0Uygrsyws+nYR4k8=
Subject key identifier: A8:0A:9D:0A:D8:CF:A8:EE:32:EE:18:2A:01:AA:38:3B:32:6A:D7:5B
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 01989592FC43706510F272721B3BE61199F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0CFA
Signing time: Sun 10 Aug 2025 20:01:34 +0000
Manifest this update: Sun 10 Aug 2025 20:01:34 +0000
Manifest next update: Mon 11 Aug 2025 20:01:34 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: oFrozqZx/tbLcJSP56MxM+vaGX6pFg+YjSTrMmHZqpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:fc:43:70:65:10:f2:72:72:1b:3b:e6:11:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Aug 10 20:01:34 2025 GMT
Not After : Aug 11 20:01:34 2025 GMT
Subject: CN=a80a9d0ad8cfa8ee32ee182a01aa383b326ad75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:9e:13:a7:ba:99:d3:8a:7c:e4:1c:74:7f:
2e:24:45:54:45:67:88:14:5d:c6:d9:ba:1d:21:1f:
bc:a4:53:3c:a2:c8:9c:df:be:57:de:9b:24:0d:33:
00:a5:bd:65:20:08:0e:ec:8f:57:99:da:5f:cc:a5:
d8:ca:50:b9:57:c6:86:48:ca:51:0e:09:95:3f:78:
c1:d6:03:4d:52:d7:66:c8:2c:4c:db:4c:ab:3e:0c:
f4:d8:8c:1a:80:e4:63:e1:52:01:49:f9:88:c6:a7:
d8:45:2f:a7:42:bb:1a:2a:49:b1:27:cb:30:fa:c3:
6d:ba:ce:f1:e8:25:66:f8:08:7f:bd:fa:e2:99:0c:
92:99:bb:39:65:a4:43:02:ac:67:7a:88:ef:85:89:
2e:51:83:ae:3c:80:39:af:ce:70:d3:d2:10:62:45:
85:da:f2:9d:0a:5b:41:52:d9:0b:b6:28:29:19:a0:
79:89:17:2e:25:b5:f6:7e:ff:36:75:81:95:45:dc:
b8:e3:b3:7b:f9:9c:82:3a:0d:a0:64:dc:b5:5e:1f:
40:af:bc:61:37:fc:98:13:96:af:d5:6a:75:b0:20:
b4:76:27:16:b9:c3:d2:0b:47:2b:2e:89:2e:1f:82:
fb:bd:c2:31:d4:83:1e:94:97:dc:b9:ca:79:1d:40:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0A:9D:0A:D8:CF:A8:EE:32:EE:18:2A:01:AA:38:3B:32:6A:D7:5B
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:c9:73:30:03:9c:78:0d:d7:b0:aa:90:7e:d3:c7:ba:29:
4f:1e:f8:b8:9b:79:29:73:d5:9a:fe:1a:9c:03:5d:0f:9b:92:
7e:bf:97:51:10:74:1b:3c:1d:a0:bd:0c:bc:d7:3a:cb:54:7d:
07:40:ab:a4:75:b3:62:87:e0:98:01:c6:e2:4d:44:66:19:19:
af:f0:e0:ab:07:7f:6e:8e:e8:7c:e2:38:c0:ef:d2:9c:40:9a:
78:1f:d5:93:f1:46:be:3d:6b:6f:27:ce:0f:8c:ce:e6:17:78:
f2:3f:6e:be:4d:e7:a3:08:84:ee:5f:33:fc:a0:6c:ba:a1:31:
b4:d9:d4:33:12:28:3b:e3:8f:8d:2c:8c:75:7c:d0:24:c8:5b:
90:53:db:7f:9c:85:b0:58:d0:f2:3c:79:19:64:c2:ab:d3:c8:
a1:bc:cd:c2:49:e9:5a:e6:48:fd:b5:a8:1f:3f:f9:f3:07:3f:
32:08:2b:21:cf:34:0f:eb:ce:e8:9d:f3:5b:da:44:bf:96:8c:
5f:1c:79:5a:bc:0b:b3:22:ab:66:da:76:5d:e0:69:44:21:57:
ae:b3:b4:36:3b:03:a0:01:72:2b:f9:62:61:44:1e:58:6a:8e:
43:39:c3:03:01:57:47:9f:a6:34:1c:64:41:86:f6:9c:7d:01:
c5:a6:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:22 2025 by rpki-client