Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: Hs1fm2shbXuhnJIkVjuiQUo65Wc/mOoaSq6WiGE91HI=
Subject key identifier: 8B:8B:2B:4D:1C:07:7C:37:C5:DC:C2:23:82:02:8E:36:3D:7F:94:95
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 0198A04E9F56F2E068E7B17B1FC8C4E14941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 22:02:43 +0000
Manifest this update: Tue 12 Aug 2025 22:02:43 +0000
Manifest next update: Wed 13 Aug 2025 22:02:43 +0000
Files and hashes: 1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: qSZZ15SP8SpSL94PrBqUiuv+bbwJD3P92v37R7yvuok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:9f:56:f2:e0:68:e7:b1:7b:1f:c8:c4:e1:49:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Aug 12 22:02:43 2025 GMT
Not After : Aug 13 22:02:43 2025 GMT
Subject: CN=8b8b2b4d1c077c37c5dcc22382028e363d7f9495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:90:a2:b0:da:86:1b:e4:1d:0c:ed:c7:7e:
23:5c:a6:24:cc:fc:00:da:da:8e:24:3a:1a:f6:ff:
9e:67:2b:eb:23:b4:60:c5:3f:25:f3:3d:22:a6:7d:
54:ce:60:fd:ea:e0:e1:fc:49:ab:82:5f:ff:e7:77:
1e:79:8b:28:be:76:b5:6e:ac:7b:0c:fb:bb:d2:82:
d2:b1:c6:62:32:e5:5c:06:24:5f:63:bb:f2:08:e1:
c0:b4:78:7d:b5:e9:07:30:33:10:e6:bf:4b:cb:6a:
0f:ff:84:f2:db:d2:38:8e:8d:c0:42:f9:49:a2:b0:
a4:de:f0:c2:f9:2c:8d:4d:d4:a6:6f:53:4d:d7:01:
7a:28:30:6a:73:d4:b9:83:2c:e5:5f:3a:82:d6:ad:
18:3b:d1:97:60:5d:2a:6f:b4:38:68:74:29:09:cd:
08:a0:a2:92:8c:13:d6:50:fe:3b:fb:84:c0:27:a0:
d0:d0:a8:4e:f0:00:5f:23:31:60:d0:17:ec:b4:82:
86:a8:d3:12:08:ab:5d:82:07:e2:95:b2:bc:de:e3:
3a:de:bf:cd:a1:a8:fb:76:4c:68:81:ff:db:6f:06:
b9:52:41:96:ef:13:8e:56:49:54:2d:5a:8e:c6:08:
f0:02:cb:5f:c7:47:a4:76:7b:cf:4c:2d:18:aa:07:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:2B:4D:1C:07:7C:37:C5:DC:C2:23:82:02:8E:36:3D:7F:94:95
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:69:c5:3e:c9:4c:22:11:56:ef:87:1b:00:83:52:49:2f:
3a:54:5c:e0:e3:28:db:32:6e:b4:2c:28:53:ec:b6:2c:1d:00:
48:6c:ee:ba:58:ea:a8:6a:11:72:c9:08:76:67:94:6e:ad:1b:
8d:c6:cb:79:0b:b3:8e:23:a6:43:56:49:dd:24:8d:a7:37:61:
07:28:c0:63:f1:69:8f:6e:46:fa:49:7f:26:52:98:47:fa:da:
d7:c7:66:3f:cf:e1:17:8f:2f:fa:34:a9:db:51:21:c5:9b:34:
2a:bc:b5:9c:de:2b:50:f8:05:d0:fb:9c:a2:45:ae:17:60:a9:
49:06:89:43:3e:90:32:6f:44:49:2a:2c:c0:d3:55:0e:86:82:
af:27:7b:ef:54:90:cd:af:ed:a7:b4:94:c8:5c:a6:78:67:bc:
32:7b:3e:2c:46:62:6c:cd:af:5d:94:53:55:c6:04:31:3b:c4:
0b:37:32:a0:4e:34:94:ce:c6:94:d2:c9:9d:05:c6:6e:aa:cb:
a0:17:89:74:d4:ee:0e:66:2f:d4:e1:86:f8:5b:bd:05:66:88:
7b:a6:e1:a7:56:21:ec:a9:99:ce:e8:d9:da:7d:6b:21:1c:6d:
34:73:1e:49:31:1e:87:0c:b9:dc:ce:a9:cd:e4:fd:bc:bf:78:
4e:4a:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:24 2025 by rpki-client