Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: Wa7e+1jh7+txf2r4O7HuZvbUHUsYG81feTVxkYNOs+k=
Subject key identifier: 29:63:3A:C3:FD:FB:47:68:3F:AD:1B:1F:12:9F:CA:DF:AF:B7:A9:DC
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 019873E2B669B41B354F41E92214AAAA9315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:01:34 +0000
Manifest this update: Mon 04 Aug 2025 07:01:34 +0000
Manifest next update: Tue 05 Aug 2025 07:01:34 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: ezX/qcyaUs1U13CWUSqCKkI+13/46dgjuHBdReWKB+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b6:69:b4:1b:35:4f:41:e9:22:14:aa:aa:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Aug 4 07:01:34 2025 GMT
Not After : Aug 5 07:01:34 2025 GMT
Subject: CN=29633ac3fdfb47683fad1b1f129fcadfafb7a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:51:1a:1e:a3:21:9f:45:a5:22:c3:ba:cf:
cd:1f:db:b0:2c:6a:4c:09:67:1b:c1:af:fb:7d:3d:
3e:c5:c9:26:06:1e:07:57:56:5c:96:07:40:c9:fc:
b6:4a:a9:c8:86:06:dc:0b:d9:46:46:8e:a1:3c:df:
04:9d:6c:ad:f9:9e:3b:a8:69:92:41:77:25:f8:96:
95:51:4d:24:27:b5:2b:16:26:b1:35:83:d2:ab:47:
87:c2:f0:9d:ea:3c:0e:81:d9:d2:1b:b3:81:4c:25:
0d:15:55:48:0c:15:f5:4f:4e:b8:3a:3a:96:50:8c:
5e:9a:40:ad:39:64:f4:a8:e3:3a:29:55:39:da:19:
1c:ae:5f:f6:11:41:3b:9a:c3:74:e5:5e:1d:5d:1a:
be:c1:1f:ac:ae:02:d4:9c:11:26:30:f7:9d:e3:75:
66:b3:d9:8a:06:05:2d:df:36:e7:3b:5a:da:a9:8c:
89:ab:c5:16:cf:c2:37:5a:20:1e:f7:60:0e:a4:bd:
0e:ad:e3:d0:e4:4c:cf:34:69:e0:e3:c4:9c:fc:dd:
57:3e:d6:7f:d1:78:17:e7:18:6d:eb:85:e5:bf:83:
e6:4d:56:02:6e:af:f3:06:e5:ca:f0:75:ba:c1:ed:
cf:17:fb:32:a9:e6:2c:ef:5e:83:bf:12:62:9c:70:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:63:3A:C3:FD:FB:47:68:3F:AD:1B:1F:12:9F:CA:DF:AF:B7:A9:DC
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b1:6b:72:b1:6b:03:3c:58:0e:fb:70:b3:16:94:64:87:9b:
4f:e1:f3:0a:91:71:99:07:64:e7:de:4c:fe:d6:15:85:7c:fb:
3c:15:73:23:a0:09:71:78:46:2f:b2:64:ff:2f:fc:9a:16:ca:
94:ec:bd:ba:10:39:47:fb:c8:60:4e:79:f7:fe:99:ee:22:9c:
ec:5b:21:d9:e6:bb:6f:1b:30:c9:8a:55:dc:ee:37:94:42:e2:
a7:ed:bc:e7:7e:0f:66:43:57:1c:06:5f:a5:5a:80:11:ab:23:
ed:8e:a2:32:ea:b9:32:5b:94:9a:3d:a9:65:7e:73:97:43:6c:
06:38:9d:a7:9c:e9:eb:30:a4:66:dc:7e:cc:54:f3:1e:31:77:
45:be:e0:31:6e:94:08:96:f3:8d:12:01:5a:ac:24:7b:bc:cf:
b6:b0:91:2e:ba:63:74:4e:66:8c:8b:13:2d:00:57:d8:c8:68:
8f:c8:af:58:90:1a:50:67:c3:78:54:e8:ae:44:68:1c:8d:c6:
66:41:45:f8:8f:a4:a1:95:31:bb:6c:13:8f:3e:e2:47:44:9c:
b4:cc:8d:11:56:fc:fd:d3:a5:35:9a:e8:9b:88:cc:9e:67:11:
d0:a1:cb:de:54:4e:5b:b6:dc:66:15:1e:92:64:d5:1f:ac:c4:
b0:8c:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:31 2025 by rpki-client