Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
File: YmJJH6XuZw3MLCvhaY436ZMXSSM.mft (raw, json)
Hash identifier: im4b04iTYilBqazo1ODclE2C4BpUg8Ehzw0BF4N1nJ4=
Subject key identifier: 64:88:B0:9A:84:BC:FF:F9:79:BA:2C:5A:EC:83:8C:FB:D2:B3:6A:D2
Authority key identifier: 62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23
Certificate issuer: /CN=6262491fa5ee670dcc2c2be1698e37e993174923
Certificate serial: 01987486F4A3EB415239E4013DBC00CC2AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
Manifest number: A9
Signing time: Mon 04 Aug 2025 10:00:58 +0000
Manifest this update: Mon 04 Aug 2025 10:00:58 +0000
Manifest next update: Tue 05 Aug 2025 10:00:58 +0000
Files and hashes: 1: YmJJH6XuZw3MLCvhaY436ZMXSSM.crl (hash: PNwlOMTksX7w+cwUn5ZYf6MG3FOkUXsXRSTmWweu0rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:f4:a3:eb:41:52:39:e4:01:3d:bc:00:cc:2a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6262491fa5ee670dcc2c2be1698e37e993174923
Validity
Not Before: Aug 4 10:00:58 2025 GMT
Not After : Aug 5 10:00:58 2025 GMT
Subject: CN=6488b09a84bcfff979ba2c5aec838cfbd2b36ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:e2:5d:7e:10:65:89:eb:b5:d5:b7:cf:5d:
9a:e7:d8:dd:d7:cd:94:04:a6:74:0e:53:ff:91:93:
aa:35:25:ed:27:77:ae:ab:0a:05:4b:7a:99:1d:7e:
22:aa:96:99:68:9e:7c:c8:8c:40:41:50:0e:ad:e3:
c1:54:db:fd:23:1d:fb:85:1b:73:17:1e:b1:6f:20:
1e:e6:1c:d6:9f:74:ff:f5:07:d4:50:f1:e0:dd:83:
39:e5:15:07:c7:33:42:34:40:50:16:a6:8d:32:cb:
ee:34:7a:c0:3d:63:74:3f:95:16:87:8e:93:7e:32:
e6:3c:ed:b8:c5:da:bc:0e:16:0f:03:40:40:41:ae:
96:b9:be:6d:33:e3:d7:ce:61:97:84:ca:6a:b1:0b:
c0:0f:3d:45:00:8a:f4:d0:dd:5f:2f:e5:00:a3:78:
22:53:6c:d4:db:c0:ea:07:e6:89:36:aa:6f:cf:3a:
ff:f2:2f:4b:21:86:78:89:96:13:f2:a7:d4:d7:83:
13:14:3b:1d:ff:87:e4:72:72:57:0a:96:57:56:a6:
3a:a3:04:b1:0a:d5:f0:94:ec:37:fd:54:d3:0b:cd:
fd:95:8b:a1:de:98:c8:30:2c:1d:01:4c:9a:5a:2f:
35:f0:03:50:fe:85:a2:7b:6f:3c:eb:5c:9a:10:85:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:88:B0:9A:84:BC:FF:F9:79:BA:2C:5A:EC:83:8C:FB:D2:B3:6A:D2
X509v3 Authority Key Identifier:
keyid:62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:9b:02:27:48:9a:ec:18:bc:93:81:1c:44:22:d7:26:fa:
6a:0f:5f:44:af:88:95:f4:53:7d:36:24:b8:ba:23:35:a5:4b:
d4:a8:9f:a9:6d:4b:9e:fa:5e:e4:ec:f3:9c:6a:5e:70:ca:9c:
ec:37:06:c8:76:fa:01:84:25:0d:3e:83:8c:c8:ae:5d:9a:ab:
03:cd:c6:3f:1a:46:bc:01:75:69:88:71:3c:e8:27:e2:8e:01:
66:c7:6d:76:ca:24:fa:bb:21:a2:dd:29:87:10:b2:3a:63:e9:
6c:19:6b:3e:03:e0:a9:6a:42:e9:64:92:94:3b:77:72:e4:14:
2f:f8:ad:0a:a2:9f:0c:5f:bb:85:dc:cd:3a:77:91:fe:72:e2:
62:99:28:bb:fd:71:14:3e:35:db:a4:0b:f5:1b:5d:17:67:23:
95:3f:5e:76:70:a1:37:d3:3d:52:1d:fb:f3:05:b2:c6:f2:39:
38:fe:21:af:be:eb:6e:0e:63:b5:5d:e3:a3:2c:17:0a:02:14:
b1:82:28:15:2e:5f:84:df:88:25:d1:a1:cd:d6:f9:9f:10:b6:
d7:0d:3e:09:62:97:ea:9b:08:4a:f6:15:04:82:5e:98:0b:fc:
a8:9e:89:74:c5:36:99:38:58:c4:c5:91:67:b7:48:32:e5:b5:
78:f7:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:17 2025 by rpki-client