Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
File: Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json)
Hash identifier: PnfkliyaLuLJoQNl2H4rV57tpLZESin74s8FtA19qOk=
Subject key identifier: D5:0A:44:12:55:86:FE:B6:87:28:F5:25:0A:27:C3:F7:90:A6:B8:18
Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
Certificate issuer: /CN=63850055f27ec40756297ffcd759eb861eef73c1
Certificate serial: 019845889B8F97E40B37D4F63592F7A9F5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
Manifest number: B3
Signing time: Sat 26 Jul 2025 07:00:37 +0000
Manifest this update: Sat 26 Jul 2025 07:00:37 +0000
Manifest next update: Sun 27 Jul 2025 07:00:37 +0000
Files and hashes: 1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: IXTAYQPU54VQg8Y7vDXl2jL17J5xlZEgtc6JUtGN4AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:9b:8f:97:e4:0b:37:d4:f6:35:92:f7:a9:f5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1
Validity
Not Before: Jul 26 07:00:37 2025 GMT
Not After : Jul 27 07:00:37 2025 GMT
Subject: CN=d50a44125586feb68728f5250a27c3f790a6b818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:02:3f:f6:4b:5f:ed:b6:38:91:e5:f2:5f:
c5:2b:77:1a:32:e8:60:26:10:8b:39:17:36:2c:1f:
ca:bc:6b:c6:ea:b4:8a:8a:f7:0f:85:7d:5f:9c:ba:
09:03:eb:90:f6:15:8d:fa:c0:df:cd:1a:d6:76:0e:
85:67:36:b4:1b:aa:f2:cd:a0:5d:66:a0:c1:cc:a3:
16:15:49:b5:e8:1b:00:33:05:00:22:26:ce:30:ea:
27:e2:1a:54:b3:cc:23:35:4a:95:41:b1:e4:65:75:
a6:2b:37:5d:6f:53:e9:c3:91:f9:1d:7d:56:29:b1:
87:c1:46:7a:e6:e8:39:41:bc:79:ca:c4:06:09:ab:
13:48:f4:9c:5b:94:91:a0:29:77:cc:b1:21:1d:b5:
33:aa:54:8f:6f:fa:2b:04:9e:5b:93:d3:87:a8:9c:
ed:f9:2a:51:9a:55:a1:00:1b:72:ce:de:f6:7b:37:
ee:a4:af:42:52:17:f4:c1:7d:a8:72:86:73:e2:74:
80:9c:3a:62:40:fa:4a:bf:b2:c9:0d:87:c6:15:ab:
0f:80:0d:6b:d4:2e:03:3c:92:c3:51:0d:ca:ab:85:
b4:c7:24:5d:e4:9a:25:00:8c:05:5f:d6:3f:52:a4:
dd:7b:53:24:2b:8b:db:c0:7b:58:0a:c1:d3:1c:47:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:44:12:55:86:FE:B6:87:28:F5:25:0A:27:C3:F7:90:A6:B8:18
X509v3 Authority Key Identifier:
keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fe:7d:33:fc:22:df:ca:33:d9:68:eb:b2:d9:d0:8d:bc:f8:
72:2c:eb:20:e2:b9:a4:cb:f0:b9:64:ab:cc:6c:4c:0b:47:76:
dc:2c:48:17:c7:f0:92:2e:c7:c3:0d:b6:85:4b:a7:ff:2d:6c:
2e:42:11:68:72:f3:40:2e:2a:6a:f2:26:87:06:9f:d8:cd:84:
bc:19:9f:95:5d:f0:0c:8d:51:42:a1:3b:59:3b:17:bb:ca:2b:
b8:86:db:20:0a:f1:a7:7f:ed:75:c6:9a:2d:db:43:01:f1:97:
0d:55:c7:7f:ea:8b:4b:f0:95:96:b1:26:05:9c:6f:e0:2d:7e:
67:f7:a4:b9:ac:90:0c:0b:68:5b:9c:67:3d:47:97:24:f8:52:
49:15:30:3a:ee:a7:81:a5:ac:59:ac:f2:58:a5:3a:25:5e:d3:
a9:d4:58:2d:c7:71:e7:ce:0e:0e:7a:38:1a:14:4e:76:76:b2:
4a:e8:82:c5:64:d4:f9:02:b1:a4:a1:c0:00:b7:b5:6e:4b:8b:
fe:57:c8:33:a0:c7:6c:ee:39:d8:47:12:68:72:ad:ed:d6:2b:
c5:9a:54:7f:a0:77:7b:80:1a:2d:11:7e:d1:75:be:61:b4:27:
3e:38:9c:b5:ff:24:8f:2d:62:bd:59:12:07:8b:26:e9:a6:99:
15:5d:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:25:20 2025 by rpki-client