Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier: RsEPQb6m/YxeTkd6/M8+Y7PupcakfXk28LRw086Wdf0=
Subject key identifier: FB:F2:74:15:08:C8:5E:30:7E:D5:B3:9D:09:C2:3B:28:CA:BC:6C:9F
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial: 01988F59C9DD125D85F1CD3ABDE9C4444D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number: 017F
Signing time: Sat 09 Aug 2025 15:01:22 +0000
Manifest this update: Sat 09 Aug 2025 15:01:22 +0000
Manifest next update: Sun 10 Aug 2025 15:01:22 +0000
Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: xMQNhZZFfwGZOQnP7YD0FWomYKshKTHA4I6qMXRNQqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:c9:dd:12:5d:85:f1:cd:3a:bd:e9:c4:44:4d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Validity
Not Before: Aug 9 15:01:22 2025 GMT
Not After : Aug 10 15:01:22 2025 GMT
Subject: CN=fbf2741508c85e307ed5b39d09c23b28cabc6c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:ae:ea:86:0f:a7:d5:0a:5c:1a:2c:09:c3:
5b:5d:9a:4f:c5:92:4c:6c:87:42:6a:bf:99:f4:df:
6c:4e:0b:59:5b:fa:0c:fb:e8:0c:57:7c:b0:42:c0:
00:da:b4:63:b6:61:16:63:d2:93:a0:a9:a6:37:ef:
4d:6b:e7:c5:b3:2c:39:27:2a:71:f9:f9:ba:83:a4:
ec:8a:90:c0:0a:ac:2d:26:aa:85:c1:7f:f4:fa:f2:
1f:28:bc:71:29:43:8d:2d:5b:67:6a:79:20:a6:7e:
ef:bc:40:a2:a6:d0:43:16:38:9c:ed:28:f1:99:e1:
af:e8:76:a4:f6:1f:23:97:45:1b:26:05:5d:e7:b4:
e5:9f:ea:c4:e2:61:4a:f2:10:fe:fa:bd:5f:9f:d3:
c3:d8:6a:2f:90:4c:f8:80:42:f0:2f:8c:8a:ea:81:
98:55:3b:1b:07:1c:f4:60:3d:3e:26:f5:0e:7f:cc:
48:db:cf:7b:f1:85:e2:15:a5:57:2f:42:6d:e7:04:
9a:db:25:7e:76:5c:2e:9e:79:86:eb:f2:bf:f1:54:
4f:e4:a4:93:a1:74:5a:bd:6e:64:87:48:84:be:3a:
41:8c:b6:64:8e:5e:cd:e3:19:77:b3:74:d7:eb:05:
4d:6e:7e:ab:2d:01:27:df:d3:ec:3f:8a:20:73:89:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:74:15:08:C8:5E:30:7E:D5:B3:9D:09:C2:3B:28:CA:BC:6C:9F
X509v3 Authority Key Identifier:
keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ef:b0:53:06:e0:b5:5b:28:29:be:5f:1a:6a:41:5b:65:1b:
48:65:43:d8:2e:c6:7b:4f:c6:6e:79:1a:69:3e:20:93:bb:49:
45:11:e6:ab:ce:2c:41:cd:7c:33:1d:7a:33:ba:9c:94:23:36:
6a:2c:21:b6:e8:9b:05:f0:fe:f8:5d:f1:80:aa:d0:98:ec:02:
b3:45:60:9b:46:9b:78:2c:1f:5d:2b:46:8f:85:f2:a4:3b:cd:
58:b6:8f:55:f1:5c:51:de:88:fc:38:b5:d6:ce:1c:9e:ea:fd:
b8:69:36:0e:95:2d:18:46:23:d9:3c:eb:09:c2:21:24:1c:b0:
8b:14:9d:71:6f:d9:8b:9f:c6:c6:bf:c2:30:0c:a8:aa:87:80:
c8:33:06:a8:62:e6:20:a4:c0:36:63:33:c0:36:26:8c:d8:d6:
0e:f6:92:e6:9f:1e:72:2d:89:d5:a4:f4:23:2c:28:16:54:63:
c6:2d:7c:66:bd:cd:a3:69:91:5c:ae:61:46:a9:68:fb:f5:f5:
53:9e:ab:99:01:cf:08:cf:09:70:44:6b:63:a5:c7:05:7b:ce:
db:e5:26:f9:fd:ab:50:3e:a0:04:fb:84:fe:90:c9:3f:0c:21:
4f:0a:b1:5e:a5:4e:b7:c4:69:0c:0c:d2:fd:e1:c7:b5:11:50:
52:c7:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:15 2025 by rpki-client