
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File: ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier: doeKtfUck9OjkSJcRSZV/Gjx3bOOnSYvA38RsFZkcnM=
Subject key identifier: 4F:AF:E9:39:E8:AC:3A:FF:72:FA:B5:34:38:34:FF:4D:75:BB:1C:6B
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer: /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial: 019875D0473B94B6A41520F62D6E50336CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number: CC
Signing time: Mon 04 Aug 2025 16:00:40 +0000
Manifest this update: Mon 04 Aug 2025 16:00:40 +0000
Manifest next update: Tue 05 Aug 2025 16:00:40 +0000
Files and hashes: 1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: hUayr5Tnh0QFbmLJTy20paCBX3leSx3L/811RdLhs1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:47:3b:94:b6:a4:15:20:f6:2d:6e:50:33:6c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
Validity
Not Before: Aug 4 16:00:40 2025 GMT
Not After : Aug 5 16:00:40 2025 GMT
Subject: CN=4fafe939e8ac3aff72fab5343834ff4d75bb1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:49:c3:eb:bf:c5:3e:d4:ed:43:b4:47:f6:
04:3d:2a:36:d3:03:7e:9a:a4:75:1c:d4:60:35:61:
91:31:64:5b:39:b2:22:d3:72:7e:bb:e6:12:37:12:
ff:81:4c:ef:c4:d4:17:26:85:18:54:bd:04:37:6c:
39:48:61:63:af:3b:0f:e8:d2:51:11:b9:9b:2f:a5:
33:f4:49:18:82:29:3c:b0:d4:9c:3b:06:0e:f4:09:
cd:10:64:72:b4:9b:0b:75:ca:46:08:99:23:c3:b1:
49:2a:aa:9e:ad:4d:f6:8a:c4:17:cb:48:ec:55:3f:
47:0b:ff:08:ff:fe:f2:29:a8:f5:6d:22:9f:0b:b0:
77:c1:5a:70:bc:ab:48:95:33:b9:cf:9f:91:56:6b:
3e:48:b7:14:23:9f:4f:b8:3d:2d:4a:d2:13:1a:2f:
ea:db:d7:fe:60:50:b8:54:3c:b7:ea:b8:9d:fb:1e:
da:77:86:05:81:71:f7:c1:27:86:18:e8:d2:77:a3:
a2:13:c9:3f:f8:9f:ae:34:a5:c0:52:1f:91:57:7a:
5d:84:18:56:35:60:94:e1:20:73:be:37:72:9c:8e:
a9:70:96:24:c0:91:3d:fb:b9:5c:a9:45:00:dc:ce:
13:0a:56:d2:4f:32:c7:52:13:ca:d4:f1:06:14:07:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:E9:39:E8:AC:3A:FF:72:FA:B5:34:38:34:FF:4D:75:BB:1C:6B
X509v3 Authority Key Identifier:
keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d4:fc:46:f0:4e:3c:e9:2f:87:14:52:9c:83:a4:f1:d3:19:
2f:e3:92:b1:35:11:79:81:a9:f8:71:7e:2a:48:0c:7d:9d:b5:
ff:f3:98:d5:8b:9f:4f:bd:98:28:99:f0:af:23:18:04:a2:b1:
ea:ba:b7:ad:cd:05:77:0a:02:10:ad:fe:d5:64:2c:03:66:2a:
70:1e:19:1c:4e:ea:65:0b:d6:ff:99:68:ef:80:99:fc:ec:94:
27:6a:b5:9b:50:ba:9b:88:b3:2a:f2:f5:22:2c:1c:fb:c6:6e:
05:9f:a3:bd:cd:7f:bc:76:86:84:af:29:ad:e5:41:a9:0e:e1:
00:fb:77:85:c6:2f:78:c3:a4:29:3a:b1:13:76:18:1a:45:6a:
21:df:af:2f:0e:f7:bf:53:8b:36:6e:ca:85:c1:50:fa:88:fb:
d5:b6:a3:77:af:f8:1f:3c:72:1f:bd:07:12:0b:cb:ac:99:d8:
f5:b9:04:9e:c5:53:73:34:cd:fb:44:5b:97:19:e0:52:43:33:
7a:6c:80:94:0d:7c:fb:bb:a0:30:1d:96:0d:34:eb:29:a3:1a:
71:0e:2f:e4:b1:dc:8b:89:11:2c:4b:60:c8:b8:70:07:f8:f1:
52:34:ae:a5:f4:70:cf:fa:ce:9b:96:b9:60:9e:fd:89:6a:e0:
12:32:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:12 2025 by rpki-client