Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier: Arl/20R0lx3a0Itjd3i2FUFV1X/pCV9rTXEGZUMixe8=
Subject key identifier: DE:49:E1:5D:D0:43:CE:9E:7B:67:93:44:A6:41:9F:A2:39:3D:A7:A3
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial: 019896A540AD33371A9B1C768043D5AEA465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number: 06B1
Signing time: Mon 11 Aug 2025 01:01:09 +0000
Manifest this update: Mon 11 Aug 2025 01:01:09 +0000
Manifest next update: Tue 12 Aug 2025 01:01:09 +0000
Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: MgxSqdjmH0W9PS2GIy4xlWXjLJ8YU5vvpL7kdxBbkEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:40:ad:33:37:1a:9b:1c:76:80:43:d5:ae:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Validity
Not Before: Aug 11 01:01:09 2025 GMT
Not After : Aug 12 01:01:09 2025 GMT
Subject: CN=de49e15dd043ce9e7b679344a6419fa2393da7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:b7:a6:8c:3c:1f:22:a4:c3:8f:74:76:a8:
df:4b:26:1a:99:9b:02:8f:99:0e:ac:ab:2d:87:d0:
96:7d:09:66:64:75:5b:86:65:7c:83:4d:ac:c2:66:
09:c7:27:44:c5:d9:22:de:b6:d7:9f:2e:91:ae:90:
38:9d:25:06:9e:ba:12:de:fd:c2:01:0e:90:86:16:
1e:8a:d7:2a:f6:c9:fd:35:aa:a0:99:46:32:51:cd:
8d:19:69:23:06:64:27:cd:c6:ff:a3:5d:0a:c5:a6:
89:4d:87:1b:25:01:3e:0c:3d:65:5c:60:e9:de:3d:
11:5f:e2:97:a1:16:7a:c2:50:13:a7:6d:83:8c:e7:
a4:a6:e2:96:4e:12:a6:f8:3b:48:2b:5c:ca:ba:b9:
f0:ab:be:af:cc:c1:71:91:3f:f8:a4:ed:8f:0e:84:
2a:fa:f0:66:98:22:7f:97:a7:9d:b6:10:be:6b:04:
7f:bd:54:cd:5a:fe:5d:65:37:67:15:3f:69:ba:7e:
95:72:32:74:2f:d1:0e:5c:11:90:23:8d:0f:e6:21:
98:b7:5a:5d:79:8a:a2:a4:b8:fd:f0:2c:bd:3b:c8:
2b:00:b6:0f:39:cd:01:20:26:b1:9d:d0:1b:8e:a5:
83:e1:c0:4f:25:ec:a6:b9:b7:74:9e:73:e7:3d:63:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:49:E1:5D:D0:43:CE:9E:7B:67:93:44:A6:41:9F:A2:39:3D:A7:A3
X509v3 Authority Key Identifier:
keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a8:10:b0:af:47:46:04:97:fa:5c:fa:a0:34:19:4b:99:84:
6d:11:fa:d9:60:48:95:ad:8b:0b:3b:a9:b5:75:bc:2e:75:a8:
21:b3:ab:e0:6c:eb:27:ee:88:e1:bb:e3:e2:15:7c:08:6a:b1:
81:0d:ab:14:fe:1f:40:5b:3e:0f:25:8f:cd:fc:9a:5d:6d:a4:
d0:d6:63:c8:0b:9d:08:da:72:1c:16:a4:02:c5:a6:0f:98:79:
c5:1f:9e:9b:27:ff:12:8c:43:79:da:9b:4f:25:36:45:91:69:
96:f8:96:69:e9:24:1a:2b:98:e1:95:bd:dd:d2:f2:a8:ac:f9:
2f:6b:dc:96:01:12:7c:3d:9c:a0:57:78:9e:60:ba:7c:e4:71:
dd:18:ae:08:b9:6e:00:03:17:7e:62:db:dd:80:83:d2:c6:13:
e7:0d:84:1c:a9:75:c4:dd:24:b0:81:fc:05:72:f6:b0:f0:d9:
74:8b:03:f2:53:9b:54:57:df:9e:9c:98:cf:c6:08:18:8c:75:
77:88:98:90:a3:7d:18:ca:a4:e6:40:00:66:1e:a5:c1:78:35:
cc:f6:0f:c5:d6:ec:49:bf:c9:30:21:0c:55:99:5f:7e:48:ce:
d4:60:15:39:d0:9b:05:7e:a5:80:90:d8:13:20:ca:4f:99:3c:
33:a2:ae:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:21:40 2025 by rpki-client