Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: meWYOkOE6EhwpfacdGTBrJt9mnn/bmB0/uZZG2U6WrY=
Subject key identifier: 15:44:7E:DB:65:75:39:AC:65:93:DE:FD:12:8B:4F:EC:C9:7E:44:8D
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 0198A0BA9B4DDE6C83A90C26E8DDDBE7A79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 0540
Signing time: Wed 13 Aug 2025 00:00:40 +0000
Manifest this update: Wed 13 Aug 2025 00:00:40 +0000
Manifest next update: Thu 14 Aug 2025 00:00:40 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: tXlkaovJlfEQ74L4nSQCSSyoqAolgVfmnv0row5SoKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:9b:4d:de:6c:83:a9:0c:26:e8:dd:db:e7:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Aug 13 00:00:40 2025 GMT
Not After : Aug 14 00:00:40 2025 GMT
Subject: CN=15447edb657539ac6593defd128b4fecc97e448d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:7b:cb:58:f2:d7:4d:7b:63:32:cb:c5:f4:
a4:5b:4b:5b:03:d5:b7:27:49:13:d1:d9:53:bc:58:
58:d2:fc:9b:2e:1e:4a:6d:2d:58:a7:4e:87:b2:13:
ae:1f:f4:c3:5b:c5:e5:7a:70:90:e2:a7:27:e3:6c:
1d:a2:55:7b:4b:78:8a:1e:04:70:b9:31:33:d7:89:
5c:98:18:08:e9:48:3a:0c:3b:88:6b:55:c1:ac:81:
c7:26:5c:84:62:72:06:8d:a6:e2:6f:2e:23:49:8f:
f7:78:6c:de:ad:0f:28:71:a3:d8:29:e7:92:ba:ee:
dd:a8:bb:f4:62:c7:77:c5:61:e8:5c:0e:70:ab:42:
21:84:b3:8f:d0:8b:7f:ac:13:4a:fd:ed:1a:41:27:
40:d3:50:15:4d:01:d6:6c:74:8c:c5:1b:f3:d2:21:
6b:91:92:8e:7c:47:62:7c:8a:89:45:e7:ec:a7:fd:
47:ca:3c:94:3f:8d:0a:3a:e3:ab:b3:03:ca:c6:b9:
6f:6d:4f:ad:6e:b1:80:f1:9a:19:37:c5:df:d6:71:
2f:9f:c9:0f:36:d7:2b:34:de:18:33:54:f4:d7:3d:
b0:54:36:a9:19:e2:b7:3e:ea:30:51:63:93:cd:72:
15:43:02:c6:35:4e:41:b7:a0:15:a3:2c:74:a5:4b:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:7E:DB:65:75:39:AC:65:93:DE:FD:12:8B:4F:EC:C9:7E:44:8D
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:f2:1c:fd:40:a8:0c:6f:4a:2b:af:da:60:6a:01:27:af:
97:4e:87:be:b8:f1:1d:d6:5c:05:26:48:05:f8:94:f3:68:32:
59:6e:23:db:55:e4:32:be:41:3c:c9:da:a5:de:1e:03:5a:61:
d9:ce:fd:3e:66:b9:68:f2:57:07:5a:e0:34:2f:4a:63:81:65:
4d:62:69:00:15:bd:3e:09:cc:2b:97:24:2e:bf:8e:09:83:45:
81:8c:90:74:87:a8:ac:0f:40:f7:a6:b6:d8:59:b1:40:80:59:
cf:6a:f6:82:00:72:1d:74:f7:c3:56:79:57:4c:56:35:c5:4b:
2a:81:2e:9a:a5:81:5d:28:26:1b:00:63:7b:b4:59:6c:0a:64:
91:d8:06:27:68:cd:3b:9f:b6:9b:e1:b9:72:94:8f:5a:56:16:
71:6d:e0:31:1c:38:ee:8e:ff:ba:54:68:fc:83:ab:95:9e:f9:
b9:8e:5c:d9:71:ee:8d:07:1d:f7:37:cb:b7:51:cf:40:bc:71:
64:7b:29:4d:df:35:eb:d6:e8:9c:08:a1:bc:ab:43:ba:a3:c0:
16:9c:bf:ad:7c:c8:27:80:b3:37:08:43:85:ed:44:8a:85:ca:
6d:ed:60:bc:1f:79:fa:f0:b9:31:94:f0:78:cc:1a:21:88:79:
26:06:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:21 2025 by rpki-client