Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json)
Hash identifier: U1s8MjyI2gSNVqs3oto8PCQAsanFJNRqzqN81Odai+c=
Subject key identifier: 3A:A4:B5:84:50:4A:44:74:BF:22:63:6C:DC:8D:6B:61:01:69:A4:04
Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Certificate serial: 01989F03C6C0A4F9ED9C9276C89C891A98D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
Manifest number: 5C
Signing time: Tue 12 Aug 2025 16:01:21 +0000
Manifest this update: Tue 12 Aug 2025 16:01:21 +0000
Manifest next update: Wed 13 Aug 2025 16:01:21 +0000
Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: O+mWsmobhSZP+V+/6EkXEU7WpPSYTkv0YhWJaKeneWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:c6:c0:a4:f9:ed:9c:92:76:c8:9c:89:1a:98:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Validity
Not Before: Aug 12 16:01:21 2025 GMT
Not After : Aug 13 16:01:21 2025 GMT
Subject: CN=3aa4b584504a4474bf22636cdc8d6b610169a404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:81:69:f7:46:fb:62:ab:57:70:9f:43:e9:
f1:2e:ac:31:09:35:e5:b8:ea:a8:ca:31:68:69:93:
ba:29:34:91:8d:fc:1f:fd:76:ab:0d:4d:46:69:ca:
55:a1:9c:33:ac:62:5f:b6:72:fc:fd:95:7e:36:c3:
b4:44:39:69:e2:34:82:6a:fa:51:c9:07:ba:a7:20:
05:f4:c2:3a:9c:99:3b:71:6e:7f:23:a4:9d:b2:e8:
70:3f:f7:f0:24:c6:67:63:14:2b:c9:88:65:bb:9c:
b4:70:8d:b9:c9:a0:75:0e:e7:1b:54:93:55:51:ac:
e5:c0:69:9c:4b:e1:ba:fd:e9:13:e9:c0:1b:02:5e:
a8:29:2a:96:dd:a3:fe:71:9f:9f:75:c3:31:b7:ee:
01:27:7c:f1:40:ac:5e:5a:f9:d7:eb:52:6d:91:21:
97:65:eb:57:c4:6a:09:75:81:ec:6b:58:db:c7:ee:
00:e0:f6:d8:bc:00:75:95:67:fc:4f:28:e0:0b:7d:
d8:93:9d:0c:bc:c1:71:10:0c:f0:70:27:4a:8c:0a:
d3:0b:6d:d9:d6:72:59:e4:ba:60:a2:76:c3:bb:c2:
8f:b3:bb:01:eb:62:75:38:dc:ec:39:e1:5b:b9:d4:
5e:7c:e3:2d:03:b5:e8:d2:54:dd:44:0e:04:4e:c9:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:B5:84:50:4A:44:74:BF:22:63:6C:DC:8D:6B:61:01:69:A4:04
X509v3 Authority Key Identifier:
keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f1:ab:04:d5:b9:4c:56:7b:fe:11:7d:74:4f:cb:9e:75:a9:
c5:98:3d:4e:75:0e:6d:13:6b:f5:34:69:6f:2a:9a:d6:c6:5a:
fa:23:4e:1d:94:c5:10:64:a8:1f:54:ca:f4:c7:19:ea:d1:22:
fc:dc:e3:f1:29:cc:00:e1:88:69:e5:43:e2:1e:af:40:be:e2:
aa:5e:d1:85:2b:0d:ca:63:59:7c:01:b4:f4:7d:d2:3c:fe:6f:
8d:a3:6c:01:e9:74:83:13:50:36:67:75:a1:c8:19:b1:86:a7:
0c:f7:46:60:ac:4d:35:40:62:4f:88:7f:71:f4:e6:dc:21:d5:
25:fc:ec:15:e2:a4:6f:d3:74:ee:e1:eb:19:52:48:b6:7d:a0:
06:6b:ab:32:35:07:80:6c:44:53:2d:89:e0:1c:ce:9c:59:91:
dc:3c:be:25:14:87:6f:77:f7:01:3b:15:d4:2d:1e:8a:8d:7f:
8a:92:67:d3:51:ec:5a:c6:05:5e:36:44:c5:34:38:9b:7b:9b:
dd:38:a2:87:23:23:51:31:ed:34:7d:80:4d:6e:7b:d9:17:c0:
c1:48:98:80:d2:f4:3e:47:ac:1a:74:27:a5:b2:13:23:28:2e:
de:18:c3:ad:5f:2e:05:d9:f8:49:16:4c:fb:c9:68:1c:cf:96:
c5:ec:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:53 2025 by rpki-client