Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: Ku+zKzhZovzfRjuny9TLM5oHl6rs+V+asTNKhGuMiQk=
Subject key identifier: 9D:A7:2F:E7:41:E9:57:9F:93:2F:39:4D:C3:CE:5B:53:07:16:9A:AA
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 01987298B429B3464EE570349C2EA34B552B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 12A8
Signing time: Mon 04 Aug 2025 01:01:06 +0000
Manifest this update: Mon 04 Aug 2025 01:01:06 +0000
Manifest next update: Tue 05 Aug 2025 01:01:06 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: 4ekuaFf9pqxZuDB4gMjJXCO9gnM9+cRBZYh9w6PV7aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:b4:29:b3:46:4e:e5:70:34:9c:2e:a3:4b:55:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Aug 4 01:01:06 2025 GMT
Not After : Aug 5 01:01:06 2025 GMT
Subject: CN=9da72fe741e9579f932f394dc3ce5b5307169aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:26:84:da:e6:2d:87:26:4b:bc:e1:c8:26:
72:80:6e:cb:fd:c2:26:a3:7c:f9:69:98:9d:52:66:
b3:5a:9f:03:6c:28:36:7a:e9:e4:a5:6d:9b:83:4f:
ab:17:44:ff:ac:1c:bc:c3:37:e0:09:d4:d3:3a:68:
b8:c5:04:7e:fd:b8:90:61:85:fb:5f:2c:26:b9:ac:
a3:40:99:31:de:f6:f9:76:69:92:8f:6a:54:f8:21:
5f:54:55:36:a3:12:a5:ae:24:31:55:0c:79:5d:4e:
84:60:b3:d3:c3:95:7d:a2:09:8d:05:1f:49:46:d1:
2e:d5:53:71:20:02:11:b3:ca:c8:16:c4:c5:7b:0d:
32:fc:0a:43:04:e0:4f:e3:10:f5:67:fb:f3:19:bb:
9c:87:8b:c2:b6:e2:23:21:72:bb:aa:ee:de:80:ec:
c3:ad:72:86:90:4e:2c:f4:6d:0b:ba:a5:df:03:c6:
e9:aa:ee:51:7a:79:80:ae:1b:4f:86:92:0a:1a:67:
8c:ae:e0:b7:8e:76:d6:c3:77:e6:b9:2c:bd:0b:57:
39:d9:87:7a:32:b9:8f:fc:a6:35:be:cd:8d:52:64:
5b:6d:92:08:7c:2f:1e:4a:45:22:b6:ac:3a:ba:8f:
34:ff:58:8d:29:cd:c3:75:9d:7c:1f:ca:5f:02:6f:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:2F:E7:41:E9:57:9F:93:2F:39:4D:C3:CE:5B:53:07:16:9A:AA
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:62:d1:1e:63:a3:b8:46:46:95:4e:2a:fa:74:de:6e:91:b6:
6f:80:ec:49:b3:b3:4e:b6:95:c6:86:da:fb:a3:ba:50:32:3b:
3e:61:10:71:c3:c1:25:db:8a:6c:e8:f4:63:51:7b:7b:eb:f3:
ac:22:7c:f2:00:be:b6:44:1b:1d:48:00:a0:91:73:5b:37:cf:
33:3e:3f:52:be:fd:6e:85:5f:3c:41:a6:79:7b:a9:db:92:a5:
08:15:45:34:1f:50:af:b8:8f:ed:d7:d1:36:42:83:92:c2:cc:
78:ca:2d:b6:4a:19:92:d8:bf:0f:95:b8:b6:ea:c6:ae:1c:f3:
5c:92:8a:8c:5c:e6:8a:5a:95:db:b1:39:70:0b:80:d6:15:6c:
50:a8:10:9e:aa:d0:17:da:9b:a8:35:c8:4c:0f:7d:37:d9:ca:
53:7e:60:b5:07:8d:26:85:2c:3e:42:a6:02:b0:b9:10:1f:79:
cf:3c:cc:56:76:41:74:c6:6d:84:ae:b0:28:1e:4e:c9:47:ae:
ab:04:0d:53:a4:75:a1:8a:2a:4d:6f:07:46:49:9a:d9:a3:34:
c1:76:83:d4:ab:bd:eb:90:91:c2:e3:a6:f8:20:8b:79:6e:b5:
fe:70:bc:d3:20:b5:73:13:3d:45:71:eb:7f:7a:96:68:ae:13:
6e:ee:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:50 2025 by rpki-client