Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: nUIdlEGjFW54EtsrcG2ZpQw4rED/Yryn/8WePOnp2ow=
Subject key identifier: 31:A4:F4:6D:24:A2:2D:1C:22:26:D2:79:B2:6A:96:79:36:3B:92:4A
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 0198A0BAC5F0FC0B31730B9AD83CA990A3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: A3
Signing time: Wed 13 Aug 2025 00:00:51 +0000
Manifest this update: Wed 13 Aug 2025 00:00:51 +0000
Manifest next update: Thu 14 Aug 2025 00:00:51 +0000
Files and hashes: 1: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: lk+WRrpzhehmM6lQiB0P1SUyBPtsmbZMvUuc6mSMskQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:c5:f0:fc:0b:31:73:0b:9a:d8:3c:a9:90:a3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Aug 13 00:00:51 2025 GMT
Not After : Aug 14 00:00:51 2025 GMT
Subject: CN=31a4f46d24a22d1c2226d279b26a9679363b924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:c5:20:f9:fd:8a:60:55:57:4b:58:c3:02:
a0:61:58:51:81:3b:c3:47:1d:3e:17:06:1a:fd:22:
c8:8b:0b:5c:f1:ba:b3:0d:39:bd:3d:10:3d:ee:1d:
d4:cd:a4:06:a0:df:a1:e7:a2:0b:27:77:1a:0a:e6:
49:69:3d:16:9a:8a:d4:ba:69:92:d7:ce:1f:e8:90:
e9:32:aa:26:c7:8a:20:51:33:33:2d:db:50:55:45:
fd:6b:c4:2f:d6:12:91:e7:a2:c3:13:17:91:5e:c3:
14:4d:6e:c7:b4:39:e3:40:01:9e:8b:0d:49:39:ef:
b3:ff:c3:2c:58:ff:3f:ce:42:68:79:15:e4:1c:3f:
88:bf:9e:63:24:b8:25:f7:6c:75:aa:5f:b1:b1:3e:
30:a6:a0:f1:c1:c4:9e:0f:6b:49:d0:6c:44:d2:e0:
05:df:b4:11:8d:1e:70:f1:06:b2:cd:db:4a:83:f0:
dd:93:e1:c1:dd:4b:9a:3c:c6:6a:d0:5f:2f:7d:ab:
80:f1:e5:3b:0e:c8:b9:a8:32:b6:7b:c2:96:a6:57:
13:b3:76:aa:3a:40:d0:e2:bd:f7:47:f3:24:e6:05:
33:7b:b3:f3:37:13:f1:65:b5:eb:1b:10:f1:41:90:
45:25:97:00:5b:40:14:73:4d:4d:11:6b:d4:e1:ed:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:F4:6D:24:A2:2D:1C:22:26:D2:79:B2:6A:96:79:36:3B:92:4A
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5a:95:57:76:46:0f:20:c5:7f:85:7e:34:05:21:73:27:a1:
4e:1c:6c:cd:4e:2e:eb:b7:75:df:31:09:bc:71:21:a3:bb:2c:
09:14:70:e3:a2:96:7b:e7:bd:17:d4:43:ac:08:ec:a2:5e:f4:
94:29:a2:19:4b:56:93:a4:b9:4a:fc:8f:55:a7:86:e0:db:4b:
a9:5e:6c:cc:f6:5b:e6:45:1c:61:d8:1c:a9:9b:9d:9e:5b:64:
5a:10:92:07:cc:95:22:51:cc:e0:d3:d5:47:5e:77:2b:6c:62:
a0:43:1e:16:9c:0f:ce:8e:bc:41:76:53:29:84:e3:4d:ba:3d:
5f:04:a4:18:f0:1c:93:d9:56:c6:70:10:14:4b:ec:c4:0f:36:
0b:44:95:d7:49:e4:a3:65:6e:81:5f:02:ec:c3:08:bd:ec:69:
8f:6f:ca:43:8f:14:b0:a6:9c:35:38:3b:b9:5e:63:90:4f:5f:
99:fd:3f:10:2a:10:58:bb:ea:d7:6d:f3:fe:9a:aa:8a:2f:d4:
e7:e4:d2:02:5a:a6:0b:6a:11:5e:8e:f5:98:7b:ed:67:04:47:
0a:88:86:1f:a2:7f:96:5a:48:5e:80:25:5f:d9:7b:ed:1d:78:
08:dc:92:93:4b:ea:15:30:f0:ac:af:26:e7:3e:5d:8c:18:58:
f2:67:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:09 2025 by rpki-client