Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: Lkf3IHLHziEWikGwocNfhCDn1m+LOHZufr0MzKGfP4E=
Subject key identifier: D0:10:92:7B:DD:13:3E:7A:0C:4A:C8:7B:60:F4:95:76:F5:14:6A:05
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 019874BE72086783F2751D1409A975875CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0A81
Signing time: Mon 04 Aug 2025 11:01:34 +0000
Manifest this update: Mon 04 Aug 2025 11:01:34 +0000
Manifest next update: Tue 05 Aug 2025 11:01:34 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: Tg5uGRWvq1rKepTmb2vMySSHQNQyj908x6E2xKwuj2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:72:08:67:83:f2:75:1d:14:09:a9:75:87:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Aug 4 11:01:34 2025 GMT
Not After : Aug 5 11:01:34 2025 GMT
Subject: CN=d010927bdd133e7a0c4ac87b60f49576f5146a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:9e:7c:31:98:6e:e1:05:7e:98:40:6d:7e:
d8:80:d0:eb:01:46:69:c9:0f:62:b1:55:39:fb:74:
55:ce:a4:aa:22:ce:a9:81:63:97:d3:fd:07:11:7a:
ff:bd:41:11:bd:00:91:1d:34:f6:e1:e7:06:15:52:
0d:52:48:df:5d:36:d0:25:72:78:b8:74:8f:ff:cc:
81:ea:1a:24:1f:64:03:d6:07:b1:b5:e5:a1:93:99:
f8:01:f8:c1:29:10:70:35:1f:3b:19:55:f8:a7:df:
50:d0:1d:e5:0f:75:90:41:6e:cc:96:ea:6e:07:da:
8f:fe:a5:86:b8:d8:4c:65:32:07:ac:02:fb:30:ff:
2f:70:05:96:0e:20:fb:16:e5:17:30:20:4f:6d:9b:
ef:03:82:50:b1:b3:3e:8f:99:d0:bc:a3:7d:7e:1e:
94:83:20:6b:6e:88:95:43:ad:e6:59:52:4f:d8:61:
8b:8b:46:d2:1c:a4:2a:8c:2c:68:20:ac:34:e5:f4:
79:f2:97:ad:74:59:51:af:b9:9d:79:a5:df:52:19:
b8:ef:cc:d6:a7:0f:47:ae:37:b3:a9:eb:48:f0:eb:
50:91:40:43:c5:81:55:6c:e3:99:ff:8e:50:f4:1c:
b4:e6:fe:3f:8e:c3:bf:82:e9:f3:b7:8b:a4:ee:fe:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:10:92:7B:DD:13:3E:7A:0C:4A:C8:7B:60:F4:95:76:F5:14:6A:05
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1a:c4:4d:70:20:e6:2f:e1:e9:2f:20:5b:5c:fe:02:fd:cb:
a8:38:2a:88:0c:69:73:fc:04:80:42:bf:4c:81:ae:b3:ea:b4:
9b:f1:3d:be:78:b2:e0:6e:42:a5:47:aa:12:4b:fb:7c:58:f3:
ec:87:eb:f7:27:66:72:f7:66:88:9f:73:d7:fd:6b:a8:37:2b:
c3:e8:03:1d:3f:a6:8a:a8:68:46:6a:96:a4:b4:9e:0f:ee:33:
6d:8e:e4:9c:90:cb:81:be:8e:3a:13:b8:fb:b3:dc:ed:70:a9:
cf:9d:a6:1d:7e:f5:f8:7b:48:2f:ef:e5:59:32:df:16:1e:26:
10:0e:a6:4c:0d:36:37:b3:cf:c2:73:6d:d1:2d:8e:d0:c7:ea:
ba:1d:27:c9:c5:a0:0c:89:a6:61:a9:a8:e6:f7:b3:d1:4d:8d:
aa:e1:59:2e:0d:2c:0d:68:ae:1b:24:56:3e:2d:e9:ed:e1:8c:
5d:ae:ea:5f:f5:dc:0e:c6:e9:81:db:e4:19:47:f7:da:a9:87:
0b:d4:31:09:7f:24:88:8b:93:8a:29:cb:fd:17:df:fd:7f:fa:
58:d1:e0:c6:cd:42:7a:0e:8a:f6:1d:18:25:21:d0:9d:68:50:
dd:50:36:77:27:85:59:c5:e6:24:d6:c0:42:80:00:3b:4d:9a:
74:87:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:21 2025 by rpki-client