Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: RK41vZlH2k8oyrt5eUDX5+9M81GCM7bX0mWXJAKVR2Y=
Subject key identifier: A8:D8:74:12:49:6E:5A:8D:6D:36:88:9D:C1:90:51:80:99:18:F4:14
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 01989DF04ECF9A5EEFC58374C2C20D4A882C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 0258
Signing time: Tue 12 Aug 2025 11:00:28 +0000
Manifest this update: Tue 12 Aug 2025 11:00:28 +0000
Manifest next update: Wed 13 Aug 2025 11:00:28 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: BbcrEBarTfduvNzy/8WL1pnjkno7/b+vmyitjnKX86A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:4e:cf:9a:5e:ef:c5:83:74:c2:c2:0d:4a:88:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Aug 12 11:00:28 2025 GMT
Not After : Aug 13 11:00:28 2025 GMT
Subject: CN=a8d87412496e5a8d6d36889dc19051809918f414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:3a:27:05:91:f2:ba:0a:e2:e2:15:d1:c9:
21:96:98:6a:93:b9:51:73:db:c0:33:c1:4a:bd:a8:
0a:45:f6:00:55:04:f5:59:a3:a3:fc:90:62:7f:a7:
a4:0b:3e:5a:3a:4e:1c:94:05:2c:e8:9a:e6:9a:b4:
bc:81:09:99:de:9b:9f:c4:b7:66:dd:be:db:f4:22:
84:09:d8:c0:a2:04:97:4c:95:b9:28:73:c1:7a:c5:
37:6c:38:01:37:98:42:98:78:41:54:61:20:a1:52:
f5:6e:7f:49:c5:51:e8:cb:77:69:e7:29:5c:8f:4e:
86:57:1e:cb:c8:37:00:31:31:1c:c3:35:09:f1:14:
54:c9:92:72:7c:24:92:38:a8:76:14:b6:58:36:46:
5c:7f:77:34:b1:b7:d5:17:5b:39:0d:23:85:d7:11:
2c:b3:03:d3:59:1f:7e:38:96:b9:7e:79:d8:1f:fb:
3e:53:25:7a:d8:32:08:fe:af:f5:88:cd:9e:b5:96:
16:54:10:e4:c0:46:a9:02:ad:56:f4:77:a0:d4:d2:
23:fb:c5:12:00:a4:86:a2:1c:18:c9:0a:10:63:4e:
93:54:e7:12:99:e7:02:8c:7b:32:66:a4:06:63:4f:
96:f5:66:f9:d5:12:44:cb:16:9b:c9:1c:22:35:63:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:74:12:49:6E:5A:8D:6D:36:88:9D:C1:90:51:80:99:18:F4:14
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:30:36:3b:64:95:54:2e:ac:3e:2e:de:94:26:9b:25:ba:
d1:c4:c6:2f:ec:08:de:d3:d9:5b:b7:39:c4:4d:12:d8:0d:b1:
7a:61:b6:52:dc:45:6e:6e:bc:ca:76:3b:e9:0b:1a:2c:02:d4:
c8:df:4e:4e:0c:66:e5:da:f4:05:a8:9a:3d:db:96:41:63:30:
7d:f9:7e:3c:e4:aa:18:fb:6e:ff:a0:83:9b:18:df:28:2b:ee:
73:3f:96:96:6d:1e:38:dc:0b:4a:88:ed:72:9c:8c:88:5e:9f:
1a:17:f2:f4:8a:15:69:2e:75:57:b8:69:f8:a1:b6:34:ac:b5:
11:77:c8:70:03:b0:9d:1c:8e:40:6f:1b:c0:d5:5b:8f:d6:d6:
81:a1:fd:36:9f:25:d6:92:6e:59:61:a9:4c:07:fa:a1:36:bd:
13:32:ec:4e:7b:2b:54:16:1e:75:bd:d1:5c:1e:d3:b6:c9:17:
d0:b9:69:3a:ac:c4:09:91:0f:7b:83:20:ec:b8:17:ff:97:01:
d1:48:71:57:61:73:04:9e:e3:3e:c6:91:f2:b9:69:86:98:3a:
31:9e:59:89:8a:44:7f:c2:88:7d:67:d1:74:ee:d4:a5:06:cd:
c5:7d:7e:4b:43:4f:9f:45:2c:20:e5:ad:e2:f1:7e:4c:f9:45:
81:32:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:27 2025 by rpki-client