Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
File: yFiMcrJRDxd7g18gHjNl7PnkWh0.mft (raw, json)
Hash identifier: e73QJE2PH6Y3BOlDra2tbnJkLJwgAqQd7lVXk47SRAY=
Subject key identifier: 91:2E:61:D2:ED:03:81:5F:7C:92:C1:4C:3F:E1:06:5F:3D:B8:AB:8A
Authority key identifier: C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
Certificate issuer: /CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Certificate serial: 01989F0399D7336EDCEAF9E41513B1B8A505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
Manifest number: 0FDE
Signing time: Tue 12 Aug 2025 16:01:09 +0000
Manifest this update: Tue 12 Aug 2025 16:01:09 +0000
Manifest next update: Wed 13 Aug 2025 16:01:09 +0000
Files and hashes: 1: yFiMcrJRDxd7g18gHjNl7PnkWh0.crl (hash: Ahdz5C4sZ1bKDhlPRCptkLM4gBJfGCCN/YYXsFh3FQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:99:d7:33:6e:dc:ea:f9:e4:15:13:b1:b8:a5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Validity
Not Before: Aug 12 16:01:09 2025 GMT
Not After : Aug 13 16:01:09 2025 GMT
Subject: CN=912e61d2ed03815f7c92c14c3fe1065f3db8ab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:4c:ef:52:6a:15:92:dd:9c:f9:1d:99:36:
9c:2b:03:4b:3c:0d:a6:8a:29:75:cf:e5:01:93:eb:
5e:ac:a0:8a:eb:ce:ba:37:13:ee:7b:ac:8f:70:aa:
e9:9a:e1:1e:e2:2e:26:2a:f9:19:5c:11:20:dc:cb:
b7:09:63:69:9c:d2:f6:89:80:48:20:8e:e4:ac:2e:
8d:62:6c:36:c0:df:23:b7:8f:1f:62:d2:b9:a6:58:
f2:e5:3d:f0:5a:48:6e:f2:44:c3:6f:06:a1:84:84:
3b:a1:a4:9d:d8:2b:20:47:ee:02:c1:06:37:18:e2:
ce:20:ff:44:89:a5:c9:e9:37:30:99:5c:d2:e1:05:
ed:a9:fd:12:42:70:4e:8b:2d:cd:c0:fe:44:74:a1:
27:f0:4d:46:54:a5:a8:86:69:9d:c8:a1:ca:a4:70:
d3:fd:b5:c0:d4:09:18:70:17:5b:ae:73:5b:18:83:
d8:6a:3d:0b:c0:c6:ab:26:09:6f:37:e9:94:a4:d0:
d2:54:a6:a9:76:a6:73:87:47:55:c0:ea:ca:02:e5:
25:f6:f4:e5:a6:bc:84:3c:1d:38:08:2f:7b:f4:37:
29:eb:ac:f8:24:27:ae:55:d8:1f:89:2d:19:b7:9b:
91:d0:94:92:51:c2:1c:0d:b1:0b:37:ac:29:03:26:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:61:D2:ED:03:81:5F:7C:92:C1:4C:3F:E1:06:5F:3D:B8:AB:8A
X509v3 Authority Key Identifier:
keyid:C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:52:b0:da:8b:d3:67:c3:27:80:c4:49:ec:4a:3c:0a:35:
04:03:fb:9b:8b:78:eb:e5:33:d3:81:a5:8e:d7:4b:a3:46:72:
3e:69:57:36:21:40:c8:ff:12:54:ab:50:88:ea:ec:f3:fb:ec:
bd:db:75:64:d2:82:a5:de:27:2f:a3:a3:25:4f:3c:d4:ab:d2:
cf:89:1e:2c:54:99:32:a1:5a:51:a9:83:cd:8d:bf:15:d7:bd:
a5:70:7f:70:8c:92:c4:c7:28:42:f5:5c:bc:e7:b1:da:83:23:
8a:83:55:3b:15:ed:71:71:8b:8f:18:e1:81:02:54:e9:38:9e:
e9:e1:fc:07:6c:14:86:24:e6:15:85:e4:29:69:45:70:81:89:
6b:64:24:7e:fa:b9:0a:d1:bb:fd:c8:1d:31:ed:75:e2:da:d3:
47:eb:a7:60:32:17:66:5d:4e:f2:67:05:1a:31:6f:a6:b6:88:
b5:2b:3e:3d:68:c9:88:48:c9:8b:1e:6a:c6:99:ca:46:db:47:
06:46:35:e0:51:1e:56:43:96:00:95:01:bc:88:8a:94:80:9a:
76:7b:0f:70:b9:4b:3e:15:a6:4a:e6:84:c5:75:11:57:ff:95:
c7:83:72:29:0a:18:27:26:df:fb:92:31:7d:9f:37:14:90:07:
9c:b1:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:08 2025 by rpki-client