Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: WH87J7xKtRNS9w8Z1f6UzTizVK5eKkFtvy/GYfdCvCM=
Subject key identifier: B5:80:66:E3:62:25:EC:31:BC:D5:AD:4D:3F:12:32:52:60:5E:AC:EA
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 01987AF755AE3D24AC1A0B9E13C71B2651B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 1012
Signing time: Tue 05 Aug 2025 16:01:26 +0000
Manifest this update: Tue 05 Aug 2025 16:01:26 +0000
Manifest next update: Wed 06 Aug 2025 16:01:26 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: QXE1LBvMMSjg5+2ctfo98FlqsJx8WFp78Ze6SvbnJWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:55:ae:3d:24:ac:1a:0b:9e:13:c7:1b:26:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Aug 5 16:01:26 2025 GMT
Not After : Aug 6 16:01:26 2025 GMT
Subject: CN=b58066e36225ec31bcd5ad4d3f123252605eacea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:27:90:a3:5a:1e:8b:38:36:55:37:15:51:
50:02:94:ba:5e:0a:9e:0d:32:df:df:1e:b7:b3:ea:
80:89:8b:95:e3:64:d1:b8:01:42:25:5a:34:48:15:
e5:83:25:4e:eb:3d:71:21:03:12:82:bc:1a:d5:67:
d8:f3:d1:e8:ed:6d:6a:40:b6:de:53:e5:6a:3f:38:
3d:24:a1:58:66:30:ab:cd:20:dc:1e:81:be:1f:37:
a8:73:06:a3:de:d1:02:14:91:2c:f8:fa:ac:19:2e:
24:aa:6b:7a:2d:c9:ad:dc:f1:68:f8:39:f5:39:34:
e3:1d:ae:e0:89:74:5c:74:61:21:1d:57:80:0f:99:
ec:61:72:dc:88:1b:7a:5b:18:19:73:af:8c:6f:47:
83:24:54:ca:b8:63:f2:b3:80:95:7b:f5:c6:49:5d:
ff:58:1d:9c:12:69:ee:a1:f0:d8:72:50:60:a9:d5:
5e:cd:e7:f0:f4:45:c3:49:89:47:b3:64:1d:6f:1e:
12:9f:ed:a4:10:63:18:38:78:bb:c9:3f:26:d8:4a:
1c:cb:47:a2:74:c8:a0:26:85:14:60:ac:79:c5:41:
0d:b0:19:27:6e:69:44:02:6a:08:fc:69:f8:82:3a:
97:d4:29:c8:c8:47:de:5f:11:00:da:48:d6:a3:d0:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:66:E3:62:25:EC:31:BC:D5:AD:4D:3F:12:32:52:60:5E:AC:EA
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:19:7f:69:66:f7:fe:69:c2:c4:88:b0:5f:e5:fc:a7:34:65:
84:e1:c3:58:a0:63:c8:5c:9c:dc:3d:23:87:b2:3e:a2:60:ae:
97:20:2f:8d:23:00:45:91:3d:7e:2a:3e:1e:5d:06:0a:1b:5f:
2e:0d:d1:ee:e5:d2:72:30:58:9e:b9:3f:8d:49:9e:b1:61:29:
4e:4d:9f:4c:51:0d:72:0e:bb:e1:5b:f1:95:e5:75:96:98:e8:
b9:35:33:42:b6:16:e6:12:d2:6d:ae:3d:a9:41:82:06:ea:be:
57:cf:a9:27:69:c3:22:43:d3:12:ff:02:08:7a:f9:68:75:4b:
ee:a5:f6:92:b0:63:30:ec:a3:5f:cb:b4:8b:a2:53:7d:b1:4f:
ff:85:ca:ea:15:df:ca:f8:bf:10:c1:13:6d:f2:e3:0a:37:f1:
f4:5c:22:36:44:64:4c:bb:65:8d:f6:4f:a1:da:e6:8a:9a:2e:
40:d3:1f:d6:b8:13:4f:1f:d0:81:00:f8:dc:d9:d8:93:a5:3d:
6d:36:d0:aa:c6:28:de:50:09:49:94:b2:fb:1e:1f:4b:a7:5c:
fc:79:c6:34:69:31:d5:2e:65:af:d2:f6:18:f9:6a:cd:8b:cb:
48:28:7a:da:f4:95:c5:a7:69:6f:2d:14:9c:8a:77:3d:5d:27:
d9:7f:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:00 2025 by rpki-client