Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: DcvjRHK3Dpbycy9kaEH8reHT8DN5ABvSF3bwIy3Aoxw=
Subject key identifier: 8C:8B:64:73:C8:D6:23:FE:1B:BF:18:F1:FA:F5:B5:AC:D8:92:D3:18
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 01988F9059786016ABC60EFC4D93EDA0751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 16:00:58 +0000
Manifest this update: Sat 09 Aug 2025 16:00:58 +0000
Manifest next update: Sun 10 Aug 2025 16:00:58 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: k6PCrHcnOox/Jvj+MthySqv1VxrG+oG2qcFcyw+N0xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:59:78:60:16:ab:c6:0e:fc:4d:93:ed:a0:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Aug 9 16:00:58 2025 GMT
Not After : Aug 10 16:00:58 2025 GMT
Subject: CN=8c8b6473c8d623fe1bbf18f1faf5b5acd892d318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:82:f3:80:58:34:0b:3a:c3:19:d4:18:f9:
eb:f6:b9:30:44:70:8e:21:b5:66:6a:e8:85:d6:fe:
da:67:cb:79:42:76:8d:d8:76:44:ec:29:a1:d2:f3:
77:de:b3:8e:8d:4f:61:63:b5:03:fa:54:e2:cb:25:
b3:52:ab:1d:b0:44:36:fe:29:40:62:50:fc:5e:4a:
e4:7b:87:c4:a5:ea:00:94:db:48:64:25:a6:e0:58:
4e:fb:73:3d:29:69:86:df:72:9e:e8:a6:6c:25:73:
7f:57:55:42:e4:a8:97:92:aa:3e:3d:1d:8d:de:da:
bf:ec:03:66:f2:26:cb:de:e9:9b:5a:64:a4:f1:13:
01:a3:36:b2:27:a2:9e:85:fe:1d:2f:78:40:f9:2f:
b8:6b:6c:81:54:ba:26:4b:e7:e6:1b:2d:66:05:f1:
40:55:82:63:28:77:e8:af:cf:ed:c4:6a:f8:ff:e7:
1d:9f:80:32:99:09:f9:f5:3e:65:34:3e:66:8c:15:
57:b9:5f:9a:81:c3:e8:20:ee:42:8e:43:40:4c:8a:
61:56:44:c7:3d:5a:a9:d3:ba:f6:f6:28:c6:02:92:
1b:e2:c0:f3:51:79:25:eb:b4:ba:2d:f7:6a:8e:c4:
ad:d0:10:30:c1:f4:33:5c:fe:54:c6:ca:e1:c2:1d:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8B:64:73:C8:D6:23:FE:1B:BF:18:F1:FA:F5:B5:AC:D8:92:D3:18
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f4:5d:3e:b0:12:20:9a:29:64:e6:b9:8a:f4:c9:9b:c3:af:
06:e8:9d:ee:4c:9a:44:50:29:ed:1d:a7:e0:0e:b4:20:74:e7:
b7:0e:5c:ab:13:46:35:e1:64:1d:91:09:21:c1:ab:8d:dc:72:
b2:a8:10:aa:18:47:ea:16:a3:6e:a4:4c:a3:6c:d1:d2:80:f0:
1b:bc:dc:6f:cb:22:9a:de:dd:e8:b3:ed:a8:d2:95:35:b4:e3:
9a:b1:06:bc:10:cc:47:71:cd:5b:78:19:33:5a:de:7e:f1:24:
7b:69:bd:9a:93:f4:f4:42:0c:0f:17:b1:f1:39:17:d2:ad:7a:
06:87:2c:ac:dc:e2:9e:e7:a9:10:3b:c0:ef:be:a5:b2:2a:ca:
84:9f:85:6c:5b:96:3d:72:27:55:4f:d7:60:c9:f3:11:be:86:
e7:6f:79:04:d9:20:99:55:68:e8:51:af:a0:b3:2a:d0:86:dc:
61:99:97:49:19:20:48:c9:9b:e5:e5:33:24:1f:a7:0e:a8:3f:
ea:c7:92:20:d0:77:cc:c5:ea:f0:b5:42:84:c2:23:4e:61:77:
5e:ae:13:74:e2:1f:6f:2d:ac:6f:80:69:8d:1a:56:66:ce:53:
ff:5d:3e:92:39:dd:1a:c6:a6:15:66:d6:b2:d7:28:64:a0:88:
b3:92:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:22 2025 by rpki-client