
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
File: YzMz1xUm9TOxwc8L6fwyG2IzltM.mft (raw, json)
Hash identifier: M5Mz69xC7/4jaQo2x/zOfjfbT6cKYiEsf/0OUyKHc9A=
Subject key identifier: 6B:E5:C0:16:DF:C5:52:83:93:12:FD:BE:E8:2E:CF:81:E7:DC:21:30
Authority key identifier: 63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
Certificate issuer: /CN=633333d71526f533b1c1cf0be9fc321b623396d3
Certificate serial: 01988BB3361309B0F9CB33D93E9916183036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
Manifest number: 06B8
Signing time: Fri 08 Aug 2025 22:00:34 +0000
Manifest this update: Fri 08 Aug 2025 22:00:34 +0000
Manifest next update: Sat 09 Aug 2025 22:00:34 +0000
Files and hashes: 1: YzMz1xUm9TOxwc8L6fwyG2IzltM.crl (hash: 74WbK3TervNhSsc2f/a9JFe2nqFkC8NXs1P9M2zapSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:36:13:09:b0:f9:cb:33:d9:3e:99:16:18:30:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633333d71526f533b1c1cf0be9fc321b623396d3
Validity
Not Before: Aug 8 22:00:34 2025 GMT
Not After : Aug 9 22:00:34 2025 GMT
Subject: CN=6be5c016dfc552839312fdbee82ecf81e7dc2130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:b0:ab:fd:9a:8c:60:93:9d:a8:5e:56:e3:
09:7e:99:aa:d1:ae:8c:e3:4b:b1:d1:d4:00:67:dd:
a2:c3:a1:23:2b:bd:c2:28:87:8e:94:55:9a:aa:5c:
37:88:16:14:8e:28:e4:1d:7f:7c:cd:1f:3a:60:99:
87:15:f8:f3:27:b3:31:c8:72:c3:e3:41:e6:77:ff:
b7:29:d8:8b:52:16:ef:7d:67:92:7d:4d:aa:7a:f8:
e8:47:68:ce:13:d2:33:f9:58:05:7a:5a:ed:84:7e:
14:57:2a:3b:e5:8f:cf:57:dc:d9:f0:61:78:51:66:
3d:15:cd:77:47:0a:04:46:55:8e:fe:1a:c2:19:ea:
4b:0e:e1:16:a3:ad:32:02:d0:3f:e8:f9:9d:54:55:
e8:b0:be:60:a5:89:90:42:fe:fe:3b:b7:a3:59:b1:
b1:84:71:3e:34:1c:7e:13:aa:70:a6:63:b6:52:26:
e2:65:93:a7:4b:c0:63:07:f1:ca:d1:b8:3d:36:5b:
f8:33:73:ac:0b:de:46:ea:cf:7b:04:ba:ed:bd:93:
51:19:70:63:72:82:29:23:94:07:b1:6d:de:1b:6e:
45:56:91:38:04:54:70:63:2f:0e:3e:a2:96:2f:1d:
eb:7c:2c:08:9a:4c:7e:d9:35:23:52:64:df:92:e6:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:C0:16:DF:C5:52:83:93:12:FD:BE:E8:2E:CF:81:E7:DC:21:30
X509v3 Authority Key Identifier:
keyid:63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8b:46:14:2c:65:f4:da:93:21:2e:3a:18:cb:bc:69:14:25:
cb:62:eb:4a:b4:56:0d:ad:79:77:f8:e1:8e:51:c8:39:31:42:
4b:6f:15:2e:cd:83:09:5c:7d:6a:50:2d:21:04:88:57:6d:3d:
28:ca:b4:70:3e:f4:fe:3d:26:be:de:c7:c9:76:90:5d:e4:5e:
d4:58:da:14:8b:c0:ad:f2:15:bb:69:5b:5a:13:ee:eb:b9:73:
e8:6b:e7:d5:69:50:24:37:be:9a:61:0f:35:6d:92:5d:6d:2c:
19:f0:86:88:e5:97:ea:67:cb:08:46:b6:a1:76:67:8d:a0:65:
f2:a9:8a:31:4e:d7:b1:e8:c8:eb:2a:3f:d1:e9:ef:a3:34:fc:
99:70:33:8d:ee:35:aa:f1:c8:be:d4:74:e3:f6:8e:ae:a0:76:
69:5a:9a:66:01:c5:12:bd:29:88:af:c1:7d:b6:d8:4b:04:dd:
ee:7a:c5:6c:29:e1:3c:20:3c:f7:d9:9f:1e:5f:c9:c3:1c:db:
30:7f:e7:da:d1:ba:5b:ca:68:a5:ba:ca:c0:d7:80:1b:ab:7e:
de:04:0c:f9:27:f7:61:bf:d9:37:d3:87:38:da:9a:35:89:a3:
50:a2:1a:fa:5b:4c:c1:a6:79:05:78:b7:40:21:d4:c2:f1:8b:
dc:5d:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:22 2025 by rpki-client