Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: MqDmbvHWkqA27kTOPODBnGEeN1xdob+l07soJ6/0XLg=
Subject key identifier: 7A:02:E1:7C:35:77:FF:80:AA:FC:0C:BE:8F:F8:DD:C0:48:AB:47:9E
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 01987486CEE371774C9A42C5BFD17AEA5733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 0F96
Signing time: Mon 04 Aug 2025 10:00:48 +0000
Manifest this update: Mon 04 Aug 2025 10:00:48 +0000
Manifest next update: Tue 05 Aug 2025 10:00:48 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: BRo1JadBYw6FPHDJgRbBrR5jsuNrB5MZ7gLyiJmucXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:ce:e3:71:77:4c:9a:42:c5:bf:d1:7a:ea:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Aug 4 10:00:48 2025 GMT
Not After : Aug 5 10:00:48 2025 GMT
Subject: CN=7a02e17c3577ff80aafc0cbe8ff8ddc048ab479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:d6:30:54:7f:78:e2:ae:0d:2e:d2:50:49:
89:96:48:bd:aa:97:b5:8f:de:54:fb:6f:24:70:6e:
f7:af:1e:35:a7:4f:4c:f3:4d:82:1a:f6:e9:45:58:
9e:4a:81:a7:30:cb:1e:e0:27:76:27:84:f2:4e:76:
b8:92:b1:81:5d:23:ee:7b:f0:38:97:54:ac:4d:45:
5e:da:fa:da:72:24:af:d9:56:b1:e3:2c:df:66:1f:
eb:52:0e:cf:40:2a:70:cd:f4:5c:9b:f5:ef:c1:2f:
08:32:80:53:2e:a3:47:e2:80:cb:98:68:86:85:65:
07:16:a9:b3:eb:55:81:8c:8b:23:96:93:46:7c:75:
f1:98:17:2d:28:cc:9a:57:61:41:35:85:29:99:78:
17:d2:80:1b:ac:dd:b3:a2:a4:fb:b4:8f:61:49:0f:
82:d9:22:f5:a4:85:04:72:4c:9b:e5:c6:13:5c:46:
aa:41:9c:7b:4e:31:65:11:a7:63:38:b6:18:d4:b9:
9d:11:8d:01:c0:65:66:58:6e:55:51:52:b3:e3:a8:
f6:0e:9f:55:64:3c:38:e6:5d:71:ff:47:92:0f:61:
f0:c7:70:92:a4:06:5b:3e:49:3e:f6:e6:90:ac:bb:
d4:b8:8e:fd:03:ff:8e:a5:3a:cd:e2:a6:24:03:7e:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:E1:7C:35:77:FF:80:AA:FC:0C:BE:8F:F8:DD:C0:48:AB:47:9E
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0a:d0:34:a2:4f:2c:b0:f9:de:a8:d7:ac:3b:51:06:2f:f5:
e6:d3:8a:59:15:9f:70:c8:da:99:1d:45:9f:7a:01:5d:ed:2e:
37:11:e7:cd:c6:f4:a2:92:24:ab:52:77:5d:17:7f:e4:14:af:
2c:bb:29:13:6b:e2:b4:52:b8:1b:85:58:b2:26:9f:48:40:66:
b0:75:54:09:66:75:1a:03:06:ae:1f:bf:de:4b:b4:4e:a1:53:
19:d0:d5:c1:e9:14:60:02:3b:ed:9b:28:21:b6:2a:69:53:c4:
3e:7c:ef:de:7f:6f:c5:57:93:84:00:60:82:e7:31:a4:1f:4d:
4e:21:da:bf:cf:bc:d2:01:74:f0:15:03:2a:55:8f:08:13:82:
a0:a5:ab:44:f4:e6:da:45:cc:13:fb:32:b1:cc:69:80:c4:be:
73:e2:5d:ef:c7:13:6e:a2:76:77:b8:27:34:98:96:7a:8b:91:
08:ba:9e:b0:91:e3:67:c8:c6:56:43:95:32:76:f6:c9:17:6b:
3c:1c:bf:70:0c:9f:6d:30:e8:ba:07:b1:0a:fc:cd:ff:56:3c:
78:90:8b:48:a6:56:1c:08:d5:8d:2d:23:5b:1d:e4:5f:23:10:
47:e0:5f:af:b1:06:1d:b1:dc:b2:45:3f:d1:86:77:b0:7d:3e:
b1:64:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:54 2025 by rpki-client