Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier: Gs5oJQ4alvDYEO/MxJ8WQVFuKRq/ldPn7rv5c/C7azY=
Subject key identifier: A9:A3:9E:A8:BC:FB:25:32:A9:47:1C:FC:AF:A8:2F:97:4B:3F:7E:87
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 0198477748F864A29DA54802AE5370BB52C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 16:00:56 +0000
Manifest this update: Sat 26 Jul 2025 16:00:56 +0000
Manifest next update: Sun 27 Jul 2025 16:00:56 +0000
Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: ttg0BDF83+Ed/OLLpkXaMhKlRyTWPKktefJzoYZ8Xos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:48:f8:64:a2:9d:a5:48:02:ae:53:70:bb:52:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Jul 26 16:00:56 2025 GMT
Not After : Jul 27 16:00:56 2025 GMT
Subject: CN=a9a39ea8bcfb2532a9471cfcafa82f974b3f7e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:5e:98:36:1f:df:14:e7:1a:89:3c:15:eb:
96:c3:e7:60:3e:b5:85:32:01:98:67:fc:e8:7e:01:
67:85:3f:23:5b:7a:b2:13:6d:c0:3f:66:fe:03:a6:
75:2e:de:47:e9:49:9a:a7:d4:d0:bd:61:b3:b9:6b:
62:20:87:c8:17:73:db:0a:3b:99:db:b5:92:a8:7d:
5a:9a:2b:f1:4d:c1:34:3b:ab:da:b3:6d:1e:a9:69:
5f:f4:e7:74:88:43:08:d6:37:88:05:10:f4:1b:30:
75:32:a3:b9:31:ea:26:a8:03:c7:0a:ce:2d:27:03:
1b:99:cd:a4:8a:5b:13:05:04:ab:e7:6e:c7:4e:6d:
74:6f:9f:16:50:80:f5:24:20:d8:6c:57:df:81:f8:
6b:19:6f:18:bc:69:0a:fd:2a:b2:e7:1e:fd:ae:fc:
6b:98:1f:9f:db:ab:32:83:d1:4b:8f:ba:c2:0c:40:
4f:dd:07:01:fc:08:d8:25:bb:9a:f9:e5:9d:95:70:
59:7c:30:f0:c1:55:29:10:4c:1b:00:eb:65:0c:07:
de:03:c6:3c:a5:e6:fc:54:09:e4:c7:39:db:5f:45:
05:9a:42:42:08:db:c6:5c:74:97:85:d9:d6:c1:1f:
d9:8b:8d:0c:3f:84:e5:09:74:b1:25:fe:fd:71:7c:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:9E:A8:BC:FB:25:32:A9:47:1C:FC:AF:A8:2F:97:4B:3F:7E:87
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:75:03:ad:bf:f0:94:75:7b:f0:25:a3:d6:85:91:24:c6:
68:53:0a:43:a2:3d:b5:f2:75:7b:13:6c:b4:a0:cf:51:98:17:
49:3c:ab:9b:8d:91:89:20:e8:c8:99:05:5a:0a:af:47:ee:df:
ed:a1:48:3b:56:72:f4:ab:88:01:61:9b:41:e7:44:26:57:2a:
8a:b1:c6:a4:3c:0e:70:66:29:5e:67:e3:2e:8c:ed:a9:c5:31:
f2:2b:81:d0:d8:19:02:df:f5:71:37:61:92:48:c0:af:b7:12:
17:bd:9d:47:c1:83:e1:12:97:a8:4a:32:ac:96:c2:bf:78:05:
1d:13:69:1c:69:b6:c5:e3:37:6d:9e:af:5a:1a:1c:18:a7:82:
20:04:4e:87:af:6f:2e:9b:97:6d:56:76:dd:db:6a:a6:89:75:
e4:ca:27:a0:fd:cc:eb:83:e6:87:1d:f7:15:c5:5b:78:c8:c6:
e0:b6:e8:c1:ca:f7:81:b4:ea:76:a0:4a:93:42:b0:a1:6f:d1:
3e:47:37:2d:16:e9:70:58:eb:07:ba:ee:81:34:93:31:87:60:
b5:d5:95:6a:96:3f:a7:42:17:92:b7:eb:03:72:19:e1:af:66:
8f:e0:8d:29:f7:5d:33:b2:d4:7a:a3:09:17:8c:dd:50:4a:44:
4c:33:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:15 2025 by rpki-client