Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: zWi/ltKGz/9u2+7o6VEdsv/kM8QutAW3Eav0G0UjMPw=
Subject key identifier: A6:92:BC:C9:A4:45:66:3B:81:04:85:A9:31:BF:E4:1E:73:DF:25:44
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 0198496546E7826B7F34B8C2E2ED8599D3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 10FF
Signing time: Sun 27 Jul 2025 01:00:30 +0000
Manifest this update: Sun 27 Jul 2025 01:00:30 +0000
Manifest next update: Mon 28 Jul 2025 01:00:30 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: +OetvyCKOgj39pGwIeHHdWJeC/02iBSwipYvkVY+S3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:46:e7:82:6b:7f:34:b8:c2:e2:ed:85:99:d3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Jul 27 01:00:30 2025 GMT
Not After : Jul 28 01:00:30 2025 GMT
Subject: CN=a692bcc9a445663b810485a931bfe41e73df2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:94:bf:17:8b:82:44:bd:70:4a:b4:70:93:
ee:37:21:25:0e:6a:aa:6e:9e:e8:9a:a7:2e:ff:db:
e7:f1:f7:8f:a5:59:1a:da:03:12:da:89:b1:b3:29:
41:7f:02:97:8d:39:3a:c1:4f:4d:e1:19:ca:03:51:
46:d0:26:8b:e2:51:96:cf:06:86:f5:b0:f3:41:0e:
24:25:82:aa:f7:1e:4e:41:70:32:78:75:7f:5c:b6:
b9:ec:d9:cb:2e:4d:0b:aa:14:72:f4:a8:a2:cc:62:
61:1b:02:6e:20:37:36:45:3d:89:2b:69:82:10:61:
12:69:6d:3c:53:e3:fd:20:21:47:eb:ef:7f:34:e5:
a8:49:3c:28:17:79:0e:1f:8c:97:3a:b9:18:e1:4d:
28:9b:35:db:47:03:d9:09:56:a1:ff:64:22:96:90:
66:2b:9b:13:4c:9c:8a:4f:a2:db:1d:87:59:a9:44:
c9:7e:89:c2:ef:60:3e:70:5d:5c:cf:71:a7:f4:62:
13:0c:14:ea:5f:ff:18:cb:e4:3c:db:3d:45:45:08:
1a:85:d8:15:d5:5c:0c:25:60:82:ee:aa:84:a0:26:
42:f8:1a:f1:c8:ba:c6:db:d8:fe:1b:a3:3b:b1:da:
69:1f:37:ed:e7:53:30:a8:a6:1b:ca:d4:ff:22:6c:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:BC:C9:A4:45:66:3B:81:04:85:A9:31:BF:E4:1E:73:DF:25:44
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:21:47:3b:80:16:5f:25:77:f9:a1:31:cd:91:12:29:f5:fb:
33:ea:42:7f:83:d0:4d:32:42:8a:c1:4c:ff:6e:69:b7:df:e4:
2b:34:5c:0d:6f:e4:6c:f4:31:08:e4:f1:6a:64:2a:38:65:5e:
77:26:72:9f:da:28:44:8b:5c:c0:61:8a:de:1f:69:ff:4f:29:
f9:b7:02:dd:c5:05:43:ff:2b:88:b9:f0:ae:5c:6a:11:b7:02:
a9:34:eb:79:b7:60:c4:ab:f9:b1:f3:0c:9f:2e:b5:5c:bc:05:
81:ba:a4:d4:f6:a2:cc:45:ed:be:19:9f:30:c6:1a:72:03:0c:
86:c3:6c:7c:d3:4d:bf:44:f3:02:b2:e0:6f:c4:12:92:38:df:
c0:64:bd:e1:65:18:03:23:a8:fb:f0:65:95:8d:0e:71:da:6a:
5e:9f:2f:58:bf:73:e1:d6:d3:77:73:f9:ca:79:d0:ef:5b:90:
ca:4c:20:d8:3c:44:8b:aa:3f:71:f5:96:d7:5d:92:5e:2f:0f:
fd:d3:c8:3c:f9:52:52:77:f8:71:bb:33:f9:87:6c:b3:d2:cc:
28:ad:32:c3:6a:bc:4b:dd:c8:83:0a:b8:a4:22:37:f4:12:74:
d6:1a:d5:a3:af:3b:57:4a:95:9a:e5:67:93:4a:c5:2a:70:4b:
da:ad:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:17 2025 by rpki-client