Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier: y4dpRqODDXE+YPKYO30/vGsIct6F6ttEF8HnqZfI6ng=
Subject key identifier: B5:18:2D:2F:46:5C:6B:8C:50:D0:B3:9C:0E:FA:D6:B1:56:36:17:33
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial: 019880C26747612DFEC28CA14DF2CFF9B05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number: 1238
Signing time: Wed 06 Aug 2025 19:01:20 +0000
Manifest this update: Wed 06 Aug 2025 19:01:20 +0000
Manifest next update: Thu 07 Aug 2025 19:01:20 +0000
Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: sydtwEStE82APpHDmBy2mLpD7ZoB3p+9qi1ypDsZbTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:67:47:61:2d:fe:c2:8c:a1:4d:f2:cf:f9:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Validity
Not Before: Aug 6 19:01:20 2025 GMT
Not After : Aug 7 19:01:20 2025 GMT
Subject: CN=b5182d2f465c6b8c50d0b39c0efad6b156361733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:62:82:fb:d0:e0:85:30:7e:3c:2e:83:30:
ec:5d:6f:f7:4d:ff:39:cc:1e:11:36:34:1c:d2:40:
21:3e:81:a0:1f:7d:e8:5f:a2:de:e4:7b:65:77:8f:
29:9d:d2:90:f5:3b:d4:2a:88:d4:ba:33:97:d3:3b:
64:97:56:0d:ff:74:34:53:32:3a:3a:91:4c:8d:fc:
dd:de:8c:74:59:ea:fa:29:dc:55:56:e9:dd:48:43:
df:e7:61:da:6c:c4:a4:17:0e:a9:c1:a3:d4:e4:da:
b9:10:31:c0:d5:6f:77:90:c3:96:f0:8c:35:e5:08:
2f:eb:a1:82:a8:6e:de:d7:55:81:c2:ee:d4:12:c3:
16:81:d1:5e:54:3c:65:c4:7a:f0:a8:1c:0a:4a:bd:
c4:f7:c6:a5:c0:f2:c4:f4:84:44:84:31:55:62:f9:
41:b3:42:b0:73:f0:38:e5:eb:fa:02:9a:28:96:7c:
65:41:a9:88:3d:5b:23:73:ea:d8:92:e8:89:f9:34:
ef:dc:e1:81:18:6f:f6:25:1a:ab:6e:60:1b:47:d2:
8f:42:6e:0c:02:e5:9e:ad:26:04:31:af:cf:06:9a:
e3:16:b1:43:de:51:88:2c:1f:23:d5:60:87:d2:5d:
16:42:3f:a1:2c:4a:d7:16:05:f5:86:80:c8:df:80:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:2D:2F:46:5C:6B:8C:50:D0:B3:9C:0E:FA:D6:B1:56:36:17:33
X509v3 Authority Key Identifier:
keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:62:77:71:c5:af:a9:37:e4:f1:81:3d:04:f3:58:04:42:4c:
80:2d:4a:a5:60:c8:48:24:9b:ae:5a:d7:94:f0:77:85:89:3d:
e0:21:d6:2b:25:6f:73:67:6d:e1:d1:e6:9f:97:5b:1c:f3:cb:
8f:74:60:36:32:f6:2d:cc:15:43:bd:39:eb:fb:e6:65:f2:31:
e2:c1:d0:e5:67:1c:39:6c:c9:52:9f:af:af:1c:5b:ee:c4:e1:
25:43:3b:a7:f5:5a:2c:50:99:14:98:b6:da:6c:71:c5:a4:80:
59:7d:e8:2b:38:6d:06:e4:ee:52:6e:e1:6f:2f:d9:46:1a:fe:
17:b3:05:1e:99:50:10:25:c4:c8:79:73:57:b6:81:15:15:f4:
50:da:70:6a:50:ef:89:99:5c:9b:d1:ac:d3:84:07:41:2e:b6:
0f:b3:01:91:d6:c8:d7:10:ed:18:33:65:58:c4:f4:92:ff:68:
fa:35:2c:72:7c:53:a7:cf:a7:68:ff:ce:03:12:0d:86:f1:8f:
0c:78:5f:73:c4:ae:d6:4d:6b:b3:05:7c:67:d4:fc:ae:c7:1f:
20:0e:3a:0e:5a:bc:5c:99:b2:d3:ac:2b:36:95:27:ad:79:6a:
8d:69:23:bd:52:92:db:00:d0:cd:e0:95:2d:19:b6:5c:2c:ca:
bb:64:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:47 2025 by rpki-client