Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
File: Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json)
Hash identifier: s0hEPpinhCbbf5I0Qd3qq6y9XAHWEn1ceKlVpbEcFEM=
Subject key identifier: 67:51:00:B7:4F:88:10:20:5F:55:20:BB:5F:73:5D:69:E7:B4:FD:B6
Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
Certificate issuer: /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Certificate serial: 019873E1DD0A17022D01FF0726A31FF152E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
Manifest number: 096D
Signing time: Mon 04 Aug 2025 07:00:38 +0000
Manifest this update: Mon 04 Aug 2025 07:00:38 +0000
Manifest next update: Tue 05 Aug 2025 07:00:38 +0000
Files and hashes: 1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: aRWLrcqrD1FfSwtd71X9haLcPVi9uVv+JI8QolZ7d9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:dd:0a:17:02:2d:01:ff:07:26:a3:1f:f1:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Validity
Not Before: Aug 4 07:00:38 2025 GMT
Not After : Aug 5 07:00:38 2025 GMT
Subject: CN=675100b74f8810205f5520bb5f735d69e7b4fdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:0f:0d:32:18:d2:50:c9:34:0d:02:4b:cc:
b6:ae:47:c4:6d:af:59:36:de:d4:2c:91:17:3e:8d:
45:08:1d:a2:ca:cb:04:a8:02:92:25:14:47:e1:2d:
79:5b:a4:34:f6:18:8c:91:34:5f:19:82:c7:de:86:
5b:cf:7e:bb:11:5c:49:7c:ed:bb:20:2b:33:1d:a5:
a6:be:8c:28:e6:d9:b9:08:ea:3b:34:9e:c8:72:1a:
5c:6d:6c:5c:03:16:08:21:9a:72:d7:30:c7:20:e8:
1f:9a:cf:ef:61:83:28:bb:61:32:8b:5a:1f:d7:83:
ba:e2:49:d3:cb:4b:74:47:ac:60:3b:9e:45:c9:62:
00:59:d8:4d:4e:e6:44:d5:2c:51:e4:59:63:b6:c8:
64:16:ef:3b:ce:bb:da:1e:4c:e4:6c:8a:bb:e7:e8:
bb:db:39:5b:54:eb:f5:dc:8d:23:f3:b5:d9:97:5d:
b9:75:7a:34:3c:ba:8d:bf:81:4a:a9:aa:5d:48:6b:
9c:d5:54:d4:0b:e5:80:fd:3b:1d:ed:6e:c1:85:ed:
8d:2d:b4:91:0b:6b:8e:42:cc:f4:40:fc:f2:6d:c7:
23:cc:bb:0b:ba:76:ef:4f:b5:11:44:66:bf:fb:47:
a0:08:fc:4f:59:8c:81:92:9e:42:41:9a:b9:51:ab:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:51:00:B7:4F:88:10:20:5F:55:20:BB:5F:73:5D:69:E7:B4:FD:B6
X509v3 Authority Key Identifier:
keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:83:13:91:29:55:ab:46:0b:17:95:8c:4d:9f:ad:14:09:a2:
81:b9:f9:56:99:78:e9:34:83:6c:97:f9:88:46:5a:f0:de:6a:
a6:07:5f:b6:c7:9a:49:76:77:65:d4:64:c3:c6:f3:30:fa:06:
4f:28:97:ac:16:94:7c:5b:15:61:ac:99:cc:fb:9b:f8:4a:15:
56:ce:e9:89:e6:8e:08:69:14:ab:c4:74:ff:40:69:f0:32:29:
d3:9d:7e:07:39:7b:9a:c6:63:6b:44:bd:19:98:2e:de:36:40:
d3:62:4b:34:59:6f:ee:e8:c7:8c:3f:f7:e0:fa:98:ee:af:7a:
8e:1a:db:3e:22:1d:2a:a4:5f:39:ce:09:cc:27:19:1b:c1:2a:
91:bf:27:33:c0:90:ac:2e:66:5c:e7:b2:e0:ee:94:0d:ec:04:
ce:c6:7e:e5:8f:cc:bf:e1:fb:95:b0:17:ea:a9:40:19:76:09:
9c:f0:50:a7:fb:eb:98:31:1e:32:5f:69:88:6a:1a:ec:88:61:
bb:5c:e4:30:e3:a9:32:1a:ee:aa:28:96:20:a7:23:5d:ec:5c:
82:b5:be:27:00:e9:8a:f9:5a:3f:55:5d:c5:62:53:c6:d6:1c:
36:00:1c:b0:8b:1f:82:d9:b6:aa:9a:78:74:0a:ca:0d:ee:75:
38:c2:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:27 2025 by rpki-client