Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
File: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft (raw, json)
Hash identifier: Y6o1BTd+LoJceqDcHYrimIuMXLYZCqeA7gvgFWAElwM=
Subject key identifier: 3C:CC:52:9A:5A:66:A5:1E:C9:0C:8E:22:30:21:11:8D:95:9C:39:09
Authority key identifier: F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
Certificate issuer: /CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Certificate serial: 0198745079853CD49149F2A3441779713775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
Manifest number: 0499
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl (hash: 6zVUfCoLDRUuiJJVsWhBtleCalhRkRLQZAJ9QIMv1uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:79:85:3c:d4:91:49:f2:a3:44:17:79:71:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=3ccc529a5a66a51ec90c8e223021118d959c3909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:fb:94:e8:52:46:68:cf:28:5a:55:44:6f:
f1:50:d5:c9:dc:6e:0f:41:20:95:bf:70:73:1b:56:
78:aa:bc:42:9c:99:f8:c0:f9:88:a2:df:ad:80:89:
d1:9d:2b:e1:36:e5:50:1e:9f:e6:e3:73:c8:d2:3a:
f5:50:5a:4d:49:08:e9:75:29:86:50:82:92:63:ce:
2f:95:bc:4f:31:25:66:1f:10:31:11:f4:53:26:bf:
b8:40:2a:37:d8:e6:ef:14:4a:6e:8d:56:68:28:c7:
da:2a:f9:22:80:cf:95:52:02:55:a3:19:67:33:18:
17:2a:a3:3b:53:b1:db:bd:79:76:67:fa:c5:c8:39:
37:a9:ff:dd:56:57:24:ec:a7:b2:e4:ca:fe:bf:53:
66:d4:5a:3d:85:52:82:4f:b0:36:c9:2b:53:83:ad:
3c:37:02:20:15:78:1a:ab:96:50:22:1b:6c:b9:e0:
48:42:a4:b0:71:a6:22:a7:00:95:24:70:e4:98:29:
7a:4a:58:13:ca:46:12:2c:e3:c4:03:f9:c9:c6:95:
fd:42:21:74:f2:ef:b2:fd:c2:cb:de:9c:c9:27:7e:
0f:ac:71:33:ee:c7:0f:87:71:46:1d:9a:6d:b2:4b:
9d:1a:ad:bf:91:b5:b9:01:a5:b6:58:1a:a3:43:b8:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:52:9A:5A:66:A5:1E:C9:0C:8E:22:30:21:11:8D:95:9C:39:09
X509v3 Authority Key Identifier:
keyid:F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:5f:04:62:0f:1d:fd:06:ed:8e:c3:0f:23:89:30:70:b7:
ee:bb:ca:a8:5c:5c:7b:50:53:35:4c:94:07:c0:03:57:84:38:
57:3f:52:06:af:df:25:13:2c:1b:4b:d8:10:40:06:45:b1:a9:
b9:71:8b:eb:e2:45:3b:d5:67:e9:d7:80:d9:e1:f9:9c:8e:43:
24:f4:cd:5b:81:bc:e5:46:ed:07:01:d5:1a:35:c0:00:77:6f:
51:fc:f4:56:a5:50:d3:18:89:93:25:4f:5f:c8:16:74:1f:aa:
a5:ae:db:a4:08:8c:c6:e3:cf:9a:3c:e8:48:df:20:34:08:ac:
c6:0c:02:f4:db:d3:1a:61:c5:86:1f:74:b8:93:0d:75:7f:2a:
a0:44:2b:62:a7:9a:56:cd:c9:6a:ea:d6:40:1b:3d:24:07:3f:
59:f7:11:7e:a6:99:6c:6c:d2:f1:38:fe:1a:c0:85:f3:d4:74:
8c:cf:a8:f8:27:02:32:38:24:35:cb:31:7a:2b:98:c3:36:4f:
7c:5d:6a:0d:fd:d4:5c:bb:71:7c:f2:36:68:24:3c:7a:f2:77:
0b:e0:10:be:ac:16:df:88:75:fe:43:a8:49:18:90:98:fe:3b:
40:bc:ec:ea:c0:57:9b:56:1f:ba:d1:c8:d6:0e:60:c7:b6:87:
9f:33:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:01 2025 by rpki-client