Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: /160Gfu9sn3BqSfqcikhPHnJ90d2895dfDhMvcuzTfM=
Subject key identifier: 96:A6:59:3C:20:61:9D:82:09:C8:19:31:98:E9:06:E6:7B:30:91:D9
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 019892C89E5255919B5B2FCBB555205017A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0D2C
Signing time: Sun 10 Aug 2025 07:01:17 +0000
Manifest this update: Sun 10 Aug 2025 07:01:17 +0000
Manifest next update: Mon 11 Aug 2025 07:01:17 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: 6C5Pa9tnOSE0+7gg+2wH1iaw4mHxDco7tv1nGa7S00w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:9e:52:55:91:9b:5b:2f:cb:b5:55:20:50:17:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Aug 10 07:01:17 2025 GMT
Not After : Aug 11 07:01:17 2025 GMT
Subject: CN=96a6593c20619d8209c8193198e906e67b3091d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:15:4b:72:47:34:32:c4:6c:08:8d:4f:a9:
dc:a2:f9:c1:fb:26:37:c1:bd:c7:f8:3f:ce:63:5c:
bd:cd:fc:65:0b:67:70:af:88:a6:81:4f:e0:49:21:
2b:d9:d5:c8:0f:0a:2b:1f:4d:e8:22:1b:7a:00:b4:
25:33:d2:dd:99:ad:69:bd:aa:b2:c4:0a:84:cd:6a:
4a:76:83:41:e0:00:d7:d3:dc:f0:b9:42:11:5e:af:
4e:80:45:8c:92:6a:cb:cb:4d:89:7d:36:fb:d4:e3:
e4:13:9f:9a:35:0f:b0:05:fc:79:c3:44:4c:66:01:
ed:8f:d1:90:d0:28:d3:af:4d:06:87:ae:e8:46:f1:
8a:4e:85:cb:c4:0d:e7:23:c2:c1:2b:6d:8d:b2:b6:
9d:b4:99:43:cf:09:23:e1:bc:4f:9e:7c:9d:07:fc:
98:3a:e4:c6:65:3f:ef:ab:8c:21:49:b0:b3:76:3c:
8e:fd:b8:10:2f:ec:3c:4d:14:4f:ca:d0:c8:ea:7d:
91:56:d8:56:da:41:35:3c:8d:3e:d0:8e:6d:a3:71:
b1:53:64:d3:7f:7a:ff:a2:1a:14:eb:f3:33:fb:20:
53:80:8c:2c:96:bb:b2:8e:ee:7e:7f:62:6c:28:d5:
f0:34:24:22:4a:a7:19:80:30:ed:83:f9:f0:3f:6a:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:59:3C:20:61:9D:82:09:C8:19:31:98:E9:06:E6:7B:30:91:D9
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c3:34:88:26:f5:ed:26:75:79:37:7a:42:a1:e9:73:21:25:
94:dc:e1:8f:a8:44:6d:39:9d:0b:a8:7a:e1:38:18:1b:d0:f0:
06:b5:8a:65:1f:7b:d8:3e:c1:b0:92:44:7d:3f:48:4a:65:99:
55:8e:8d:0e:0e:30:ae:6d:7c:79:f1:d9:f2:63:64:11:c9:fd:
00:eb:61:df:d5:b2:09:c2:54:87:4c:c0:0e:ec:04:2e:e0:40:
95:f7:14:8c:57:a8:a8:e8:fd:4b:fd:2b:a5:33:38:00:39:66:
59:37:d0:e7:62:24:d6:82:17:61:fd:f7:f0:8c:f2:25:c1:6a:
18:ac:05:34:bc:16:fb:8d:67:f2:d3:e5:e3:39:78:34:f0:30:
6a:c1:97:90:d8:70:9d:e2:11:23:c9:62:96:96:6b:3b:4b:50:
5d:50:39:7f:96:86:d2:3e:f1:10:78:c8:b4:4f:2b:80:cc:8f:
96:77:e1:c2:bd:36:1a:14:aa:25:1c:c3:99:12:cf:ae:d3:76:
aa:eb:f6:c5:9b:ae:ff:8d:94:9f:d6:d8:b3:b2:ec:c5:8f:58:
7f:6c:81:dc:43:b2:0c:56:5d:d2:fa:82:6f:c9:58:4c:9d:03:
54:67:1b:03:f1:0e:e2:3b:c9:fc:d3:a4:21:76:bb:5c:32:e5:
2b:12:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:41 2025 by rpki-client