Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: uyPvfvtamVMm+Z+AtR2YAOimcEP3a+5KOOT5Ovz28wE=
Subject key identifier: A5:CD:47:EF:99:A2:73:17:BF:B0:5E:DD:0E:70:FD:2E:C3:D2:AF:41
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 019873E2BD369B7F51701A44EC7D09B19F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 126F
Signing time: Mon 04 Aug 2025 07:01:35 +0000
Manifest this update: Mon 04 Aug 2025 07:01:35 +0000
Manifest next update: Tue 05 Aug 2025 07:01:35 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: sFssFhwm7ApQa+BdosiL8tQmUUNPyPOwiTq2bGtL13c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:bd:36:9b:7f:51:70:1a:44:ec:7d:09:b1:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Aug 4 07:01:35 2025 GMT
Not After : Aug 5 07:01:35 2025 GMT
Subject: CN=a5cd47ef99a27317bfb05edd0e70fd2ec3d2af41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:6b:6c:f9:d5:3c:3d:b1:7e:62:14:87:3c:
8a:50:ee:6a:e0:28:a4:bf:02:42:4b:e9:7c:2f:dd:
08:55:d1:da:db:60:c4:bf:99:95:aa:8f:47:ec:a2:
0a:d9:70:d9:79:34:44:c9:81:18:d5:fe:b9:c1:aa:
39:aa:41:70:a2:1d:bb:fa:73:57:f1:e9:74:41:b2:
b6:f9:8e:6a:be:7f:64:15:4d:7d:e5:1d:27:cc:47:
6f:27:fd:87:d9:ee:99:1e:a1:4e:de:b0:dc:d5:aa:
b3:54:eb:4f:24:bc:66:e0:d8:9a:1a:94:88:83:9a:
ea:0c:94:8b:9b:2a:d7:2f:22:36:ef:78:66:24:70:
4f:5c:22:ba:d7:24:b5:4e:c1:c6:7d:05:ab:dc:19:
25:f7:a2:39:e8:dd:6f:34:79:25:c8:21:d2:9e:14:
ef:b5:93:9e:24:dc:db:cb:c6:43:52:a8:4b:de:76:
b3:52:e3:a0:26:07:70:ea:d8:53:2c:b2:8d:8d:f6:
52:f6:ea:f0:b0:ef:2b:2e:b7:0c:6b:0a:a0:62:7a:
06:53:ce:d5:f7:3d:86:56:c3:a9:97:f6:62:37:74:
23:dd:96:8e:79:3f:06:f0:e3:01:0e:b9:39:31:cb:
2b:af:59:76:53:f6:3e:cc:85:06:89:ab:db:93:2d:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:47:EF:99:A2:73:17:BF:B0:5E:DD:0E:70:FD:2E:C3:D2:AF:41
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:76:4d:28:b8:88:65:10:7f:d5:31:c3:2e:95:bb:85:c9:
32:7c:f4:7a:58:71:82:29:37:01:c3:d6:58:06:76:bc:d1:3c:
da:5e:fe:8b:e7:f1:40:1e:56:14:53:21:6d:30:29:52:ce:9f:
8c:de:91:52:e1:30:1b:db:7a:95:9e:31:0d:b2:26:d0:bb:e7:
14:3d:60:2f:e4:c5:7a:5c:83:af:04:f9:9b:bc:81:82:6c:08:
08:a9:c8:d3:f0:e0:2e:a1:19:f5:29:89:e6:80:d8:42:40:fc:
3d:4b:24:48:f0:d8:85:8d:65:cc:a4:a8:dd:13:ad:a0:99:8f:
5f:1e:a7:3e:0e:b6:d1:fc:3c:79:37:d5:f6:48:fb:c6:8c:d3:
27:dd:50:7c:48:79:0d:8a:57:be:30:7b:6b:ef:1d:e1:c3:e5:
6b:f2:66:6e:40:a1:61:42:a2:c1:64:54:27:80:5d:61:d1:d2:
8d:37:4e:16:b9:d3:d4:0d:d9:53:e7:cd:d7:4a:97:ee:32:00:
7b:49:ea:12:45:fc:da:52:73:60:6e:ea:f2:30:ee:da:f2:4d:
49:ac:e9:7c:7a:7a:40:ed:3d:e2:1e:6a:8c:6f:a2:74:a8:bf:
22:91:2a:4b:da:0d:b9:b4:f5:f3:8c:d1:aa:4a:41:eb:f0:8b:
0c:c1:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:02 2025 by rpki-client