Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: cfCjLTT34L/AJOkuRfDW9WfUcgHU1gsvX8N4qzfcdf8=
Subject key identifier: CF:EA:B7:A5:B8:64:FB:6A:4C:CA:B5:53:18:16:08:C0:79:B1:B7:EA
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 019893DAFCDE34586E1C2274E062357D459B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 0137
Signing time: Sun 10 Aug 2025 12:00:58 +0000
Manifest this update: Sun 10 Aug 2025 12:00:58 +0000
Manifest next update: Mon 11 Aug 2025 12:00:58 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: yq9bHaeIHNzccYmkU2sTJf5nZTjMMIfHzS6Wbye/Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:fc:de:34:58:6e:1c:22:74:e0:62:35:7d:45:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Aug 10 12:00:58 2025 GMT
Not After : Aug 11 12:00:58 2025 GMT
Subject: CN=cfeab7a5b864fb6a4ccab553181608c079b1b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:f4:5b:d2:95:00:51:f7:e0:f2:ff:b3:92:
a4:d7:92:7d:98:88:88:4d:0b:b0:99:16:64:a5:ca:
ac:04:00:81:19:4f:68:73:ea:7f:6a:74:d7:17:77:
13:ea:04:a5:3b:2f:4b:7d:5e:e2:21:ba:38:94:77:
93:7a:8c:62:13:fc:64:5f:6e:7f:e4:f9:6d:c8:0b:
a6:cc:9b:9a:eb:a0:87:c0:90:3d:90:a7:37:43:77:
7d:ff:d0:bf:29:99:14:f1:93:ba:5f:04:3a:34:8a:
f5:9d:19:3b:cf:ab:62:6e:fc:77:fc:c7:57:f6:e1:
16:fb:e9:8d:4e:8f:11:4c:53:b5:d2:37:61:2e:ba:
24:ba:05:3d:3e:df:5d:7c:b7:6e:2b:30:64:39:67:
27:c1:eb:7a:60:c0:e9:96:a6:0b:c0:f6:98:42:8d:
ea:9b:81:76:26:a0:87:34:35:3d:98:10:51:ea:5c:
63:76:3e:31:f5:45:b9:0c:e4:1b:2a:c1:f8:90:19:
e0:30:d1:de:2a:6b:1b:e1:72:23:e5:05:bb:a0:7c:
6b:b7:40:62:a1:df:cf:9c:d8:51:95:4b:49:9d:ed:
22:5b:e6:c4:94:94:23:b4:9d:02:49:d5:7a:48:31:
c6:3b:26:bd:13:f2:93:08:e4:bc:a0:6a:99:f1:6a:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:B7:A5:B8:64:FB:6A:4C:CA:B5:53:18:16:08:C0:79:B1:B7:EA
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d9:1e:e5:75:fd:c4:5c:c4:68:22:f0:11:be:30:4c:c0:63:
24:08:9b:ab:0b:a2:ef:ca:5e:91:f0:d5:09:de:85:a3:9d:a4:
55:15:11:68:d7:b5:c0:ec:a9:18:89:71:c1:59:d4:9e:a1:a6:
ff:e2:08:4c:7b:2e:7e:f0:37:92:1a:1b:80:0c:8e:49:6c:3f:
c4:db:27:a8:ba:4c:29:7a:23:85:45:f5:9e:3f:00:a0:59:2e:
f6:27:cd:ae:62:a3:c6:2b:28:8e:e7:88:5e:08:2d:e2:61:6a:
6b:61:8a:4b:02:e9:15:70:27:55:69:2b:a5:ac:4d:08:21:4f:
dd:98:ac:78:15:64:96:49:c9:f0:28:c2:a2:ce:4b:24:87:05:
53:41:1f:dd:11:65:89:70:88:e3:a8:cb:c0:c0:03:11:72:59:
b3:c2:a1:ec:6e:e8:5a:3b:d1:2b:8b:37:d4:78:cd:d3:30:47:
8e:57:bf:1c:a7:ee:d0:76:e6:29:1a:d1:7b:c5:9c:c3:59:dc:
65:62:6a:d8:72:72:56:1e:d0:48:b2:fa:51:74:de:a3:45:5c:
64:29:d4:eb:dd:67:d4:54:33:db:c0:57:f3:83:7d:81:51:89:
ae:57:09:4f:73:46:63:d6:62:51:0c:ad:7f:fb:45:a0:24:41:
f9:2f:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:07 2025 by rpki-client