Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier: GNe/CRcuuFRXMZ07GUohqtBF1b/D4cKuQeuw4biLP3Q=
Subject key identifier: 3B:D3:8C:71:1D:47:E9:7A:05:19:88:9B:B9:63:45:90:8B:ED:6E:30
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 019890DB1825A43B89929792305DFD9E95DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 22:02:14 +0000
Manifest this update: Sat 09 Aug 2025 22:02:14 +0000
Manifest next update: Sun 10 Aug 2025 22:02:14 +0000
Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: TpMRP4FPmqB8hZBXJplqnv0Z1djYMDtoTJmHzEIeM8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:18:25:a4:3b:89:92:97:92:30:5d:fd:9e:95:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Aug 9 22:02:14 2025 GMT
Not After : Aug 10 22:02:14 2025 GMT
Subject: CN=3bd38c711d47e97a0519889bb96345908bed6e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:5a:7f:c1:bc:12:e8:05:44:82:d3:fc:c7:
3a:69:d0:1d:6e:ef:1c:94:46:0a:49:2d:e9:09:20:
b7:ff:ac:be:2c:c9:de:f6:fd:ce:e8:00:da:2b:04:
76:7d:8b:1f:3e:b6:35:f6:95:fc:bb:51:32:6d:c2:
d3:ec:ca:02:fc:48:1a:5b:af:cd:ff:f0:a8:c2:8f:
74:8b:10:43:1d:21:32:b8:d6:99:33:a9:f1:47:01:
36:73:fd:77:22:e6:db:d0:d6:aa:b3:8b:74:7b:07:
36:e1:a2:c2:5f:5c:c9:87:0f:13:a7:1c:01:af:c6:
a2:17:25:ca:28:3b:5a:44:71:e2:2c:f4:e8:da:23:
71:6d:b2:29:72:e4:6f:9c:5a:b8:54:53:6a:2a:3b:
46:26:e6:ed:89:92:ce:a2:01:fe:04:de:c0:74:52:
e9:60:a4:c7:55:0d:81:07:be:33:b8:a2:85:7e:2e:
86:e2:8d:c1:8a:11:98:c9:3c:38:a9:f0:b4:19:d0:
00:05:7c:33:0a:c5:6b:ed:b9:ce:c7:3c:59:7c:67:
a5:6b:1f:d2:c1:95:78:1e:14:92:36:e2:9c:78:9f:
92:82:ba:93:a6:57:c3:0f:3f:c7:d3:a2:26:41:9c:
bd:bb:db:02:d7:a9:c3:be:6a:81:48:0a:fd:36:bd:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:8C:71:1D:47:E9:7A:05:19:88:9B:B9:63:45:90:8B:ED:6E:30
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:5e:92:b8:0f:cd:77:a1:c7:a0:a3:8d:ed:05:67:3f:e4:
19:d6:2e:fc:5b:f2:17:42:a8:1f:15:30:b4:6b:0f:2d:a2:9b:
fc:31:0d:0a:11:4d:ea:10:70:b2:99:86:c1:34:d8:ec:45:9e:
31:44:16:a0:28:37:67:46:9f:e1:c0:8d:fe:85:61:e0:67:0c:
2f:10:87:37:b9:27:bb:48:82:e7:53:aa:b0:fa:4d:57:83:31:
46:19:a5:4c:d2:c0:27:10:23:77:1e:f8:e9:7d:17:03:5e:84:
5b:e5:15:06:bd:b9:68:67:4b:74:bc:26:22:9c:73:c9:96:fd:
60:60:a1:fd:db:a9:ea:28:eb:e2:b0:21:79:0c:80:29:f1:aa:
9e:24:e0:07:15:e7:2b:35:01:ad:f4:02:6e:7c:e9:84:48:07:
8e:83:d8:a2:b4:d3:6f:80:4a:f2:85:84:d8:a7:0b:e5:f3:dc:
88:d3:16:7c:02:f5:35:c2:16:4d:ed:af:dc:bb:5b:28:a5:10:
ce:36:3a:25:14:be:90:12:d1:af:35:6c:a4:06:3e:eb:23:4c:
e3:2b:1e:8d:1f:64:3d:c6:f9:95:67:da:c6:a3:48:93:67:d6:
1c:67:b2:1a:f6:b9:7d:ac:22:3e:eb:27:00:79:0e:7d:a1:ff:
ce:bf:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:50 2025 by rpki-client