Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier: QDUrCDqY3W1XkntSIWIXBupL2gZC3HN/MLM8K/2QJeQ=
Subject key identifier: D6:3B:E2:AC:63:42:44:30:E1:B3:6D:93:F4:90:CF:FA:62:C2:44:32
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial: 01988FC728AEEA7DAABFABBC8E9192241E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number: 070A
Signing time: Sat 09 Aug 2025 17:00:50 +0000
Manifest this update: Sat 09 Aug 2025 17:00:50 +0000
Manifest next update: Sun 10 Aug 2025 17:00:50 +0000
Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: bdmyf8aY2cpYsB+kLYMi6qZK72kYfGC9fFIbrECedTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:28:ae:ea:7d:aa:bf:ab:bc:8e:91:92:24:1e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
Validity
Not Before: Aug 9 17:00:50 2025 GMT
Not After : Aug 10 17:00:50 2025 GMT
Subject: CN=d63be2ac63424430e1b36d93f490cffa62c24432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:66:41:61:a5:b8:82:cb:c2:74:10:3a:7a:
b3:5a:5b:ac:60:cb:19:0b:f7:5e:e9:e2:56:23:30:
9a:9f:94:9c:06:04:71:62:e2:f7:3b:5b:fb:41:ee:
04:f0:88:06:2f:01:b8:f0:3b:66:cf:00:c8:b1:89:
f6:ca:c5:d7:59:ce:0a:b9:87:da:1a:b7:65:82:a2:
14:a7:d5:8c:97:72:e1:64:4c:1b:df:6b:9f:20:52:
6b:e4:b8:29:b8:f3:f4:b3:63:64:40:27:d8:33:d3:
10:20:de:09:a2:de:d7:7d:82:fc:09:d0:ad:be:90:
82:cb:28:59:31:8b:b6:e7:b4:3a:18:35:29:b1:d5:
ef:0e:87:ab:69:20:aa:12:dd:a0:4e:0b:ee:32:d0:
5e:5a:cb:27:73:50:97:ac:d5:a5:33:29:27:0c:a7:
cb:24:4a:5a:b0:b0:eb:10:f3:26:bf:87:ee:e4:12:
44:da:19:cc:6d:f6:56:13:40:75:e0:5d:fb:11:da:
fb:2e:ca:34:15:80:53:3c:96:b5:63:e0:8b:9c:c5:
c0:52:e3:3e:0a:a2:ca:24:1b:c6:c2:c1:9e:4a:4e:
5d:7a:a7:99:51:95:e3:02:84:03:be:37:8a:50:d4:
51:1f:6c:a8:d6:f7:ce:ac:bc:0c:5c:d4:41:35:28:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:E2:AC:63:42:44:30:E1:B3:6D:93:F4:90:CF:FA:62:C2:44:32
X509v3 Authority Key Identifier:
keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cf:0d:f7:5f:49:66:f1:7c:9a:62:48:f6:a2:cb:8b:1f:aa:
cb:8a:66:2a:b9:5e:0b:14:82:95:0e:ad:e2:9d:52:3a:78:fe:
7d:72:b6:68:99:0b:b4:ad:b7:90:51:a8:6b:75:7d:ac:ab:6b:
62:a3:b3:5a:07:d9:f4:ad:31:b6:57:99:fa:06:3a:c1:81:26:
76:03:a2:6b:a3:48:c0:c4:b1:5b:da:db:23:ff:aa:dd:dc:f9:
96:4c:f7:f5:ff:dd:e8:8f:3f:03:57:0d:9e:24:0d:51:3b:43:
23:4f:8b:06:06:63:ab:2a:f6:1f:ad:68:5b:28:0a:02:90:b4:
fc:60:66:5c:cc:78:b7:43:dd:8c:cd:26:5a:e7:53:b3:da:a1:
e9:f5:e7:ab:3c:50:62:d3:44:7b:41:1e:b1:24:7c:a5:de:1a:
0b:09:bb:05:9f:f4:0b:9f:c4:34:51:d9:49:42:ad:31:15:03:
09:2a:1b:68:cf:5f:dd:e4:cf:de:40:75:76:f3:db:dc:3e:95:
77:25:37:d0:ce:c8:62:d7:4b:21:37:3d:77:af:83:04:a5:15:
b1:13:3f:16:d5:b2:f4:25:26:72:c2:0b:33:c7:83:79:95:07:
1e:94:a9:6a:ce:50:64:9b:c4:ff:69:5c:e6:aa:5f:f1:85:a8:
0e:90:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:18 2025 by rpki-client