Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
File: yh3vhAA2XhysFuj3iHCS2smDtz4.mft (raw, json)
Hash identifier: THc87X3BkKaxYW3SUt1ETH5+FfRL/6t/y4nvis88nFo=
Subject key identifier: 9B:1B:95:64:1F:BE:C8:16:6A:F7:AA:BC:94:CA:12:62:54:7C:44:3A
Authority key identifier: CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
Certificate issuer: /CN=ca1def8400365e1cac16e8f7887092dac983b73e
Certificate serial: 01987A1B785945912A542ECB85C3CF09413D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
Manifest number: 11B7
Signing time: Tue 05 Aug 2025 12:01:17 +0000
Manifest this update: Tue 05 Aug 2025 12:01:17 +0000
Manifest next update: Wed 06 Aug 2025 12:01:17 +0000
Files and hashes: 1: yh3vhAA2XhysFuj3iHCS2smDtz4.crl (hash: tJkGNLN83hQzS9dwIw+ldEbpnESkoStK/qug6WQYEhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:78:59:45:91:2a:54:2e:cb:85:c3:cf:09:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1def8400365e1cac16e8f7887092dac983b73e
Validity
Not Before: Aug 5 12:01:17 2025 GMT
Not After : Aug 6 12:01:17 2025 GMT
Subject: CN=9b1b95641fbec8166af7aabc94ca1262547c443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:55:d8:5e:1f:9b:f6:ef:8c:88:5f:a6:b3:
22:70:6c:2c:31:87:23:f8:51:ef:53:b2:6f:9c:24:
e2:33:86:9a:62:9d:c4:f4:87:83:64:79:52:23:62:
de:c2:a7:35:74:f9:09:7f:a1:79:ff:86:d9:d0:84:
4b:f8:85:3f:ad:f5:a3:0a:22:ce:0d:4b:ff:f8:09:
50:ab:60:a4:04:d9:78:0b:a7:7c:7f:53:39:fc:32:
d7:eb:6b:6c:3f:6a:07:93:7b:7a:eb:82:b4:e2:b9:
ac:db:80:8f:3b:b2:0a:c1:03:33:e1:8a:ea:8d:31:
9d:f0:9e:d9:81:93:05:19:3f:74:95:43:7f:75:5a:
f5:24:e7:b5:a5:dc:c2:53:f6:18:d4:a7:05:cf:8d:
89:89:62:4a:66:a3:47:89:6e:7c:d1:2f:d2:6a:ec:
68:6f:26:09:38:16:b2:f0:c5:6f:ad:98:b1:59:55:
63:cc:73:dc:12:28:9b:ec:05:3e:99:1b:46:26:a0:
76:34:de:45:82:33:41:fc:b8:e2:18:17:ed:25:87:
2f:8a:2a:0c:48:a8:ea:1b:bc:44:1c:69:cf:ec:b9:
4a:81:55:99:d7:a5:56:a0:76:31:50:d7:2c:08:f7:
06:50:46:ee:de:f3:94:a8:bc:a6:15:25:e9:a7:58:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1B:95:64:1F:BE:C8:16:6A:F7:AA:BC:94:CA:12:62:54:7C:44:3A
X509v3 Authority Key Identifier:
keyid:CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:98:43:9d:54:8b:02:52:f8:7b:cb:7c:34:6d:72:4f:23:0f:
fc:a2:6b:5c:05:0a:b2:01:f2:99:c9:2b:f6:03:9b:f4:6f:69:
8c:0d:b2:c8:23:6b:8d:7c:9b:ea:e0:f7:93:46:d2:94:1f:a0:
44:e8:08:4d:cd:ef:62:37:a0:94:c5:9b:32:ac:9e:65:44:f4:
b3:33:7b:d5:70:51:f7:d4:79:5c:01:fa:3a:db:7b:0c:ce:20:
8f:4a:f6:91:ba:eb:be:a6:a9:bd:3a:00:6a:e8:4f:71:7a:1f:
91:25:d7:7b:71:a1:35:0b:a4:2d:5b:58:51:8b:8c:a2:92:95:
bc:ab:fc:fd:b6:9b:b9:fa:60:20:4b:59:ea:27:d4:99:0c:f4:
8b:b5:15:d6:e2:47:03:76:00:42:45:09:84:44:72:3c:be:92:
43:64:60:ca:4e:6f:98:d5:11:7e:1f:34:44:4f:21:d6:ac:c4:
21:57:58:ec:dc:d4:b3:1c:5f:a9:d0:d1:97:7c:ae:98:31:df:
03:0c:6a:9b:17:1b:ab:16:c1:7f:15:ae:3b:99:8f:c1:fe:0d:
70:89:7d:14:18:b5:28:72:80:84:66:93:c8:8f:20:8a:cf:5b:
48:0e:8f:49:d1:88:70:1c:18:e8:1d:f8:af:59:9c:44:da:53:
43:d2:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:02 2025 by rpki-client