Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: TpfbQyLjN4PIeYEQjy6Q9aoUJ3wl4u3kcyg93hAl2Ms=
Subject key identifier: DD:16:6A:B1:85:88:B4:ED:E0:03:6E:29:61:A2:D4:A1:D2:49:B7:72
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 019848534B3C7BA98A9BA794DC2D9378F66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0CD2
Signing time: Sat 26 Jul 2025 20:01:14 +0000
Manifest this update: Sat 26 Jul 2025 20:01:14 +0000
Manifest next update: Sun 27 Jul 2025 20:01:14 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: 3M742EepBkFrkmR/dCO9UMp4kIL6xXeoOjrY97dlvq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:4b:3c:7b:a9:8a:9b:a7:94:dc:2d:93:78:f6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Jul 26 20:01:14 2025 GMT
Not After : Jul 27 20:01:14 2025 GMT
Subject: CN=dd166ab18588b4ede0036e2961a2d4a1d249b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:ca:96:79:3a:c0:3f:0b:ec:7e:6d:4d:72:
86:b7:63:a8:a1:44:b9:a4:fd:61:f2:d6:85:3b:18:
04:c6:61:49:fb:60:e6:88:c1:a3:91:b2:bc:57:52:
3b:a2:d5:b1:87:70:bb:71:88:65:d2:fa:a3:97:75:
3d:43:28:2a:73:df:c1:bf:eb:d9:4f:a5:13:b7:d2:
03:21:75:5c:b9:5c:e1:c1:8e:99:d0:6a:5e:f6:eb:
71:1f:21:e2:c5:da:1a:50:ff:e1:db:ee:21:2a:87:
c7:39:b2:6d:2a:48:e0:3b:57:a3:0d:c9:92:10:e7:
32:d8:86:a9:fc:7c:1f:4a:c1:71:4e:c4:67:4e:74:
ed:68:a3:ce:c5:ea:72:66:43:ec:16:e5:79:66:6c:
c1:74:78:7e:fe:c1:73:83:e6:d4:b1:31:ca:ae:4d:
3a:c4:31:b8:04:bc:1b:c3:dd:95:27:b8:93:db:a2:
ba:7a:26:6f:53:e6:ad:01:6a:f0:07:56:72:36:27:
b0:e8:ae:3f:73:e9:fa:ad:8f:35:72:cc:94:29:1c:
9f:c8:36:f4:28:08:71:cd:c4:97:f2:68:0f:74:cc:
67:24:be:28:0f:93:61:f5:6e:da:50:26:2d:9d:2b:
90:b9:eb:99:96:5b:b6:0b:5d:e8:2d:3a:4b:b2:53:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:6A:B1:85:88:B4:ED:E0:03:6E:29:61:A2:D4:A1:D2:49:B7:72
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:51:7b:5e:c9:e4:20:1c:df:8c:95:dc:76:25:d2:de:bb:
ae:72:f3:39:54:e9:6c:dc:1d:94:a2:40:83:65:3d:c0:7b:73:
49:5c:86:4c:5d:2d:14:90:bd:06:12:6d:dd:4e:16:64:25:15:
fb:03:24:15:a4:6a:eb:3d:b9:14:1e:65:f2:73:16:e7:a2:9c:
4c:1a:89:f3:5f:4f:73:6f:84:fb:16:51:55:4b:4c:81:a0:b7:
7c:60:60:00:33:84:18:cc:28:1e:09:10:1f:5a:7a:ae:ec:f0:
95:ac:a7:4a:6a:3d:da:05:77:a3:83:d3:db:8f:c3:f6:92:8e:
a8:40:14:88:73:f0:61:fa:4f:d3:f6:91:0d:ea:19:33:90:5a:
e1:92:13:3c:46:b6:29:d2:71:e9:ed:e8:45:6d:fa:ea:53:37:
e8:37:1c:5a:25:29:a6:38:dd:ba:df:79:d2:e1:da:cc:54:d5:
d3:8e:ec:d4:89:3c:57:a0:1c:a0:82:48:f2:2c:72:9c:21:dc:
3e:b4:fe:1e:59:38:5a:24:ff:8b:7a:e5:e0:cf:04:29:81:e8:
7c:24:c5:38:63:7d:69:b9:d7:de:a6:be:e2:ea:29:de:c0:31:
bb:59:8d:16:d1:b5:0a:2c:27:ba:ae:f5:57:03:eb:a8:f8:cf:
00:ed:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:36:54 2025 by rpki-client