Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
File: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft (raw, json)
Hash identifier: j8qsqZRl/1QdslcqaSKRSY1PpzyY+Xi+RG4peQ3l6x0=
Subject key identifier: A2:24:42:03:AF:C2:3A:07:BA:4D:48:76:F7:26:93:FE:32:78:B3:62
Authority key identifier: CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
Certificate issuer: /CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Certificate serial: 019895926D6309B339EE07FF013BA45727B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 20:00:58 +0000
Manifest this update: Sun 10 Aug 2025 20:00:58 +0000
Manifest next update: Mon 11 Aug 2025 20:00:58 +0000
Files and hashes: 1: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl (hash: ceWGMrUVKcze8tPjGXP9mQo4NOwip0lgbPclCHg1Szg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:6d:63:09:b3:39:ee:07:ff:01:3b:a4:57:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Validity
Not Before: Aug 10 20:00:58 2025 GMT
Not After : Aug 11 20:00:58 2025 GMT
Subject: CN=a2244203afc23a07ba4d4876f72693fe3278b362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:b8:96:ad:3e:c8:d6:b2:b0:34:84:17:16:
50:1d:54:ae:a9:09:f9:b9:ea:0d:6b:73:34:55:cc:
d0:2e:cb:42:cb:71:26:94:9d:ee:f1:93:41:65:0b:
e2:dc:c5:08:ad:ab:ad:76:ac:05:a0:ec:b3:4a:cb:
9b:ec:8c:00:19:43:87:9e:1d:fd:86:b4:4f:6f:99:
b6:18:88:9b:11:b8:58:c4:a6:f3:e5:49:dc:13:89:
f4:38:34:a1:92:a1:25:95:46:49:27:d5:a3:2f:5a:
25:f4:db:85:02:13:70:d6:eb:27:b9:21:ad:49:a8:
d0:0b:ac:7a:69:e5:a2:52:42:7b:1e:09:97:f8:de:
a2:f6:2b:78:2d:13:d8:52:04:ce:a2:75:07:4d:3a:
5a:f9:2e:cc:c0:39:1b:16:af:bf:b4:1a:bf:55:e2:
cb:cf:8b:16:d2:6f:77:ec:34:55:c7:67:31:5e:6e:
ce:9a:22:dc:ed:fe:05:34:c4:ab:e5:1b:ee:ca:c0:
a9:a5:0c:74:0c:29:11:1d:30:90:0d:27:a1:80:e2:
b4:57:e4:3a:3d:58:3c:d4:cd:0a:cf:31:13:01:99:
56:22:93:0d:97:f4:db:d3:c5:7b:33:83:2e:d0:69:
53:19:32:de:0b:f9:7c:be:b5:e4:17:a1:cd:85:c8:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:24:42:03:AF:C2:3A:07:BA:4D:48:76:F7:26:93:FE:32:78:B3:62
X509v3 Authority Key Identifier:
keyid:CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:25:61:0e:2e:70:20:c1:d4:92:5a:47:f5:c5:56:b5:89:79:
bd:47:83:37:0b:45:fa:34:21:da:b4:da:6b:0b:bb:36:5c:a4:
e2:93:ed:21:95:aa:d3:41:ae:3d:72:88:c2:9c:80:9c:b2:0f:
f9:9f:bc:6d:7c:b1:29:b7:be:af:89:84:0c:89:98:b1:fd:6a:
5b:6e:21:04:f5:85:20:78:1f:cf:53:89:26:ae:a2:1a:c0:2a:
5f:46:1f:34:d7:c0:53:43:b8:c3:e6:06:9c:aa:12:47:d4:4e:
cd:bb:e6:3c:55:7d:cb:0b:39:9f:8c:1a:39:f8:fc:85:b6:b2:
1a:70:8e:35:e1:cb:30:df:5a:8c:6c:86:f5:c7:ff:ff:d2:7e:
05:70:02:9a:f7:e2:c2:a9:78:a9:4f:5a:e5:0c:a7:fb:8f:84:
f8:b0:0c:c3:cd:dd:ce:3d:50:af:1e:e7:53:b7:dc:1b:f3:5e:
ac:04:d4:bf:75:9b:40:fd:02:58:61:d8:3c:45:a5:53:7c:c0:
20:85:98:bc:bf:84:63:52:93:2d:ab:31:cd:3d:ea:fe:6e:09:
1d:9f:44:0e:70:84:a2:9c:7c:b0:95:d7:80:51:e5:90:35:57:
e4:33:ab:fe:8d:13:2e:c2:58:86:56:85:75:cf:7c:5c:35:c7:
18:c2:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:35 2025 by rpki-client