Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier: Ko6FIRbcv/z7GoiXp7dk5Xk/r/sNloQyubPa7248Xdk=
Subject key identifier: B9:46:4C:EA:6D:64:B5:8E:AF:97:CA:D0:36:F6:BA:A5:35:9F:80:3A
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 01989035436FAD28C303A16B877862F6ACD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number: 0A84
Signing time: Sat 09 Aug 2025 19:01:06 +0000
Manifest this update: Sat 09 Aug 2025 19:01:06 +0000
Manifest next update: Sun 10 Aug 2025 19:01:06 +0000
Files and hashes: 1: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: YsMw2cb1T354UJ0ttAF4nrR+M6RRs0rg65itQQ3sNB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:43:6f:ad:28:c3:03:a1:6b:87:78:62:f6:ac:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: Aug 9 19:01:06 2025 GMT
Not After : Aug 10 19:01:06 2025 GMT
Subject: CN=b9464cea6d64b58eaf97cad036f6baa5359f803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:26:47:23:36:8c:ec:58:32:8d:9b:c0:54:41:
3e:d9:f1:1d:b9:21:4b:c5:21:dd:80:66:e4:72:4f:
77:75:bb:79:17:35:3c:bf:bd:c7:b7:b8:96:53:9a:
91:00:b1:27:92:ee:b4:db:5e:25:c3:a3:48:cb:6d:
a2:01:99:26:28:b5:50:10:64:7a:a7:13:f9:e2:fb:
d8:43:0b:8e:fa:fc:db:1d:b8:97:81:d7:ce:55:d0:
4a:5d:7d:f4:ec:d3:cd:18:1c:5e:3f:4d:3b:ba:ed:
fe:f5:19:f3:67:b5:fb:74:ac:ed:f2:ac:cb:c5:44:
48:cf:0c:cf:86:c8:f0:92:5f:f3:ac:b7:81:f9:2b:
13:f5:12:04:b4:00:15:b9:8c:12:22:fb:7e:68:1b:
0e:a3:04:b0:62:67:f0:12:32:25:a8:e8:01:fb:a4:
99:a1:e9:7d:0e:bb:0e:6d:05:e1:a9:0d:cf:cc:20:
ee:f8:dd:99:51:08:2a:01:ce:84:16:53:93:20:b2:
3d:ad:64:73:e1:b3:b7:27:27:7c:90:52:7a:49:f8:
48:cb:2d:50:40:37:e3:dc:b1:94:70:6a:80:0e:56:
36:03:6b:cc:23:ce:e4:84:2c:bf:13:50:2d:2c:d3:
56:41:ce:47:ab:97:30:7e:cd:d8:7d:a4:35:39:b3:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:4C:EA:6D:64:B5:8E:AF:97:CA:D0:36:F6:BA:A5:35:9F:80:3A
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a3:3a:7b:da:a5:d0:2e:a5:ed:19:87:50:84:d1:71:5b:5f:
7f:60:44:f1:81:de:60:6b:9b:fd:0b:37:e7:a6:2c:61:dc:31:
b9:a8:cf:71:44:b7:92:39:9f:e9:67:51:20:5d:34:2d:1c:0f:
58:5d:ba:1d:c5:8b:38:17:4b:22:29:e9:e5:d6:9d:4c:6b:d2:
4c:84:c5:8f:d8:19:ce:9b:cb:4f:ba:12:5a:a2:1e:c7:9c:a2:
ad:82:d4:59:13:64:a2:03:91:b5:21:66:3d:40:07:09:eb:94:
fe:a1:d2:81:4e:87:0c:d3:22:47:f7:c5:06:9a:85:3c:c4:37:
3f:34:ac:d9:b7:de:9a:f9:7e:18:19:5b:69:b8:85:d4:58:c3:
e3:f1:77:e9:aa:1d:52:54:9f:4a:f4:a9:1f:33:57:e0:ea:56:
a4:ed:7a:37:d5:cf:21:ed:1b:e0:bc:b5:78:90:15:58:71:94:
94:17:59:88:c3:97:13:88:30:65:ae:3c:be:68:86:a2:d3:12:
86:e4:d7:7d:48:9f:ab:fa:ce:3f:c3:a4:cd:46:a0:e5:2b:f4:
a6:49:b5:45:e2:52:9a:f2:71:e0:5c:d0:82:00:b1:c1:e7:ac:
5a:52:b6:0f:42:70:d0:cc:0a:84:ad:b0:63:78:dc:27:a9:da:
59:b1:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:58:01 2025 by rpki-client