Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: QYhlAOPVUSxDOMLyxVJx0ez0KBHpYgt8aQLeeJ/9GbI=
Subject key identifier: EC:D9:59:A8:82:82:A8:D2:D2:7F:81:44:0E:ED:92:F0:35:79:D1:C8
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 01988B0E5350C8605BD5E20668E6758CCB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 06CA
Signing time: Fri 08 Aug 2025 19:00:28 +0000
Manifest this update: Fri 08 Aug 2025 19:00:28 +0000
Manifest next update: Sat 09 Aug 2025 19:00:28 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: LtWcaFLooIMECT/qj6aBO5Si4AKZ+0YB05N3EhgzGoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:53:50:c8:60:5b:d5:e2:06:68:e6:75:8c:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Aug 8 19:00:28 2025 GMT
Not After : Aug 9 19:00:28 2025 GMT
Subject: CN=ecd959a88282a8d2d27f81440eed92f03579d1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:cf:3f:5b:cd:6a:f8:dd:0d:81:de:61:d9:
90:2e:58:5b:4b:bf:7a:2d:63:02:91:cd:d8:0b:6e:
ee:d9:a5:c7:a5:f9:e1:97:e0:ff:6e:a1:6f:81:44:
3c:2a:3e:1d:76:d1:60:ec:f8:d5:f6:65:e7:4d:5d:
f7:cc:10:c0:3e:3e:3c:27:0f:d1:2b:02:63:f3:02:
e5:40:75:9c:f5:45:bf:04:af:22:a0:72:11:2d:ad:
2f:7c:3e:02:f5:24:e3:e5:1f:ed:30:e8:49:68:ab:
40:26:ea:8f:80:66:46:a6:19:43:2c:67:6b:8e:b4:
06:ee:88:a2:6f:27:0e:2a:0d:44:60:9c:62:f0:fe:
e6:80:a5:80:b4:05:45:86:07:70:3c:61:8f:38:7c:
9f:f6:e0:08:f3:f6:f9:44:a9:05:cf:0b:83:1a:2b:
77:ea:67:38:7f:a1:b8:27:04:58:4d:70:74:ae:24:
f0:d8:81:0a:ea:d5:c8:63:6a:ce:06:ba:ab:bc:6a:
9c:fe:5d:de:76:8e:f6:ab:28:c9:21:da:5a:31:8b:
ee:90:c8:dd:d1:c4:14:91:fa:ec:39:78:cc:e5:8e:
14:8b:e0:1f:a9:ee:2d:74:ff:aa:08:96:4b:25:da:
a0:e7:dd:63:55:72:76:17:5a:b1:c1:eb:4a:f3:48:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:59:A8:82:82:A8:D2:D2:7F:81:44:0E:ED:92:F0:35:79:D1:C8
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:ba:14:c6:57:58:bd:3a:c3:f0:37:75:0b:d8:4b:1b:18:
ae:b8:02:6f:1e:0f:94:15:fe:56:70:57:9d:51:13:28:ec:82:
fd:a5:57:7c:10:39:39:ae:d1:33:d9:ef:23:90:1f:66:9b:88:
c3:5b:ae:4d:ae:1a:21:7a:ad:d1:70:a3:48:4a:6c:c9:46:97:
c1:de:8c:4a:b9:89:7c:52:ed:43:77:90:4b:bb:e2:76:8a:81:
00:12:94:33:cf:7a:3f:ed:3a:5f:00:73:9d:6c:e2:24:fd:19:
0d:18:7d:82:90:01:d9:64:13:0b:d6:c5:d7:1c:21:6a:82:5c:
6a:81:1c:fd:3c:a3:2f:51:e1:43:70:76:7a:94:a3:84:03:c5:
15:dd:89:04:6d:f6:b5:97:82:18:06:bb:6c:11:1b:f5:a3:d3:
26:43:78:16:cc:0b:41:ae:bf:db:19:aa:df:72:c4:86:43:a7:
7e:25:6b:32:8e:7f:21:8a:02:b4:2d:ec:a1:68:c8:ce:fc:ea:
e3:a5:e1:00:48:34:89:11:8c:e4:d8:7b:74:8e:fa:f1:b4:a2:
ab:6f:fe:70:63:b5:d0:3b:c3:52:4c:85:a8:ed:e6:fb:bc:9d:
ba:d8:04:1d:93:0a:3e:93:63:cf:2f:0d:a8:3f:88:b2:33:c5:
6e:a0:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:04 2025 by rpki-client