Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: AY2aRdXZemuhdcCm6sy+Z5rp5KOQo+2rZHequt5fpjY=
Subject key identifier: 6A:CB:37:FC:72:40:21:6C:89:73:5C:FC:8F:9E:A6:C1:DB:7B:7F:A4
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 0198880DD2F3FC847B8261759F634595825C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 76
Signing time: Fri 08 Aug 2025 05:01:04 +0000
Manifest this update: Fri 08 Aug 2025 05:01:04 +0000
Manifest next update: Sat 09 Aug 2025 05:01:04 +0000
Files and hashes: 1: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: 9d4dKOti4cI0CXb6HqsRVjYsc9cC1h+lLFBcis8MujQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:d2:f3:fc:84:7b:82:61:75:9f:63:45:95:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Aug 8 05:01:04 2025 GMT
Not After : Aug 9 05:01:04 2025 GMT
Subject: CN=6acb37fc7240216c89735cfc8f9ea6c1db7b7fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:ef:7a:9e:af:ab:36:7e:e9:1d:61:e0:b4:
a9:be:27:e9:81:bb:6b:c8:d6:c1:80:61:d6:e3:39:
7f:90:f3:65:15:1e:31:00:3c:51:89:ae:0f:7c:dc:
da:3d:46:77:2c:1e:1a:c4:60:f0:4e:25:e4:14:8e:
78:e7:e3:8b:6b:e8:c4:95:bf:bd:a1:43:2b:38:30:
48:a4:b2:6b:09:52:70:60:72:60:6f:73:46:bb:bc:
76:93:4f:f3:33:82:33:39:42:c5:bd:49:97:b8:67:
c9:5b:3a:6a:92:35:ac:f0:76:7a:87:37:09:95:62:
08:b3:ec:54:51:1e:70:b6:4a:6d:f1:1b:e6:2f:af:
bd:0f:1f:d0:39:8f:d1:67:af:78:e7:0b:68:b8:c8:
c2:61:88:44:1d:fd:1f:0f:c6:eb:0c:8f:87:2e:d2:
09:6d:c8:73:c1:ea:86:c6:38:1d:bb:ce:87:46:84:
35:10:d0:28:c3:4b:06:41:5b:2b:20:31:67:48:d3:
45:01:2a:d6:e3:f5:a9:a8:74:88:8c:0e:41:7e:b6:
80:0d:00:b7:d8:4c:ab:89:fe:b5:d0:ae:e0:ff:eb:
af:d7:e6:12:dd:73:59:3a:09:2e:95:48:42:0f:e8:
f6:b0:c5:5c:1f:d7:b2:9b:8a:59:7b:46:9f:3f:5b:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CB:37:FC:72:40:21:6C:89:73:5C:FC:8F:9E:A6:C1:DB:7B:7F:A4
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:bb:f0:2f:88:bd:9f:78:ad:77:24:34:df:d3:fb:14:f9:
9a:1f:e9:7e:f7:ee:b7:6c:a3:02:48:33:56:93:c7:69:ba:83:
17:d7:d3:a0:70:c3:cb:1e:b1:3c:ba:93:ba:43:da:d4:c9:cb:
d2:71:d2:c6:81:1c:91:27:7f:5f:61:b4:a0:b6:8f:64:83:69:
b2:b6:e2:e8:85:98:47:fe:ab:85:32:6f:ff:29:f2:f5:b4:03:
c5:88:15:c7:d7:56:86:97:11:e6:69:35:dc:79:a1:71:cb:ea:
f2:1d:d5:36:3b:b6:a3:f5:37:a0:8b:02:ed:a8:04:26:f0:49:
a9:2d:20:b0:58:97:3c:d4:8d:e7:22:ab:2c:0e:3d:5a:52:58:
54:3b:56:ae:f9:8e:41:a7:fb:ad:57:f2:34:f3:04:64:fd:f7:
0c:93:69:78:b6:11:ac:17:76:d7:a1:1b:a2:ae:20:21:dd:b2:
d1:27:18:6d:85:16:a9:f0:f8:74:24:48:8b:2b:bf:5e:28:74:
b0:78:4e:4a:83:55:6a:81:c0:59:3b:62:33:90:6a:4a:c8:00:
9c:0f:aa:2d:c7:30:bb:99:fb:ec:aa:51:13:bf:52:19:4d:1d:
b8:c6:6d:c3:c3:69:12:e6:79:79:56:bf:dd:18:f6:45:86:80:
8a:7f:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:37 2025 by rpki-client