Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
File: yyDpqru2GRVGEQI1z3bEg4S0UdA.mft (raw, json)
Hash identifier: sUe8+qZDhQOvQYwRPdQC9DTPy1gdaj9PMvaafkr1tmc=
Subject key identifier: 0F:BF:27:C9:F1:E7:6A:B6:F1:66:1A:5B:2C:23:8F:AB:E7:14:60:DD
Authority key identifier: CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
Certificate issuer: /CN=cb20e9aabbb6191546110235cf76c48384b451d0
Certificate serial: 01987B9CF38B40B2E08D7E99C9C2775E9CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
Manifest number: 0568
Signing time: Tue 05 Aug 2025 19:02:20 +0000
Manifest this update: Tue 05 Aug 2025 19:02:20 +0000
Manifest next update: Wed 06 Aug 2025 19:02:20 +0000
Files and hashes: 1: yyDpqru2GRVGEQI1z3bEg4S0UdA.crl (hash: NTGYEP3dXbVbc7I5lMoPi/XhosBX2t1Il8HNKmBv+JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:f3:8b:40:b2:e0:8d:7e:99:c9:c2:77:5e:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20e9aabbb6191546110235cf76c48384b451d0
Validity
Not Before: Aug 5 19:02:20 2025 GMT
Not After : Aug 6 19:02:20 2025 GMT
Subject: CN=0fbf27c9f1e76ab6f1661a5b2c238fabe71460dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:a9:12:0b:56:7b:0a:48:e3:1f:91:f2:d1:
58:4b:dc:58:8c:2e:70:8a:bc:1a:46:af:5c:02:02:
a5:b7:c4:53:b9:38:be:7f:6b:be:63:9a:81:da:fd:
8a:17:0d:2b:4c:7f:fa:de:0e:ef:10:e2:d5:86:a2:
cd:ae:3d:4d:58:61:0b:dc:b8:95:03:a9:30:18:59:
74:e9:87:0a:66:69:67:37:11:8e:59:ab:35:07:1b:
18:6e:ce:d5:85:69:fd:64:97:0c:95:0d:7a:61:68:
40:17:49:26:c4:80:c4:70:81:e1:21:d9:07:31:b2:
a3:c2:b9:27:ff:10:a1:de:f4:8d:20:8a:fc:fc:cd:
e3:a0:06:3b:98:b6:52:6d:ce:2e:c0:80:b8:d9:67:
54:7a:5e:1c:c0:84:36:ad:0e:1d:b9:3a:99:88:9f:
08:5a:22:53:7f:6b:91:3c:0c:1e:09:c8:81:fc:4d:
ba:64:e6:e1:49:96:88:2a:45:c4:59:d8:8e:f6:ad:
aa:ad:9a:c9:f5:61:85:8c:cc:f4:77:51:0c:b4:41:
b8:6f:67:27:6a:18:13:12:45:7b:10:06:e3:f8:61:
87:e6:ae:9b:ea:b3:ee:7a:2a:93:94:d9:c0:78:b8:
6b:ac:79:00:88:75:73:92:d0:ac:97:71:2c:1f:81:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:27:C9:F1:E7:6A:B6:F1:66:1A:5B:2C:23:8F:AB:E7:14:60:DD
X509v3 Authority Key Identifier:
keyid:CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d6:e4:1b:8c:b3:05:8f:ce:45:3a:5b:ae:1a:94:26:1b:f4:
cc:56:2d:43:b8:8f:4f:dc:7f:6f:cb:c3:0d:89:f6:40:e7:9d:
80:bc:4e:34:40:64:5d:7c:b6:35:fa:09:27:a9:77:93:84:2f:
3d:ee:5a:2e:a1:7f:62:b2:d5:f5:b3:5b:9e:85:6f:51:6a:80:
34:69:03:fc:1a:1c:47:ec:3d:c7:45:f3:1d:69:40:c1:5a:82:
04:af:0e:7a:1f:1c:c2:80:f1:74:5c:5c:84:6e:09:10:bc:ec:
15:14:cd:3c:fd:6c:9c:a3:f2:4a:05:28:bd:b6:09:dc:10:0a:
2f:9d:82:3f:f4:bf:0f:5d:9f:dc:d1:7d:b6:20:f3:1a:83:e1:
15:72:b7:5d:8c:f6:0a:68:cc:1b:1a:7e:94:27:d1:a3:32:77:
a0:68:e9:71:3e:f1:25:94:28:23:de:eb:1c:4c:86:d1:a8:d0:
75:fe:3b:9e:b4:49:2c:46:48:9c:f8:48:40:ce:e6:a1:ec:3c:
47:e3:ba:1e:c5:f1:b7:05:1e:ff:22:a6:3d:8a:ab:6b:38:22:
43:1c:0c:96:fb:99:63:5f:a4:f3:94:05:58:4e:c5:21:bc:70:
18:2f:0c:0b:b1:c7:6f:d5:4b:74:b2:cc:11:20:d7:a3:37:2b:
18:53:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:27 2025 by rpki-client