Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
File: YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft (raw, json)
Hash identifier: MgGLXIDHgqxScdBaEUOt8GIpUc6x4akwJ4KZhnoZjz8=
Subject key identifier: B2:5D:EB:A2:1E:7A:FF:82:0C:AD:6C:DC:28:4A:2C:56:A2:BF:8A:62
Authority key identifier: 61:17:D6:15:80:43:15:0B:0A:D2:24:A0:64:8D:F0:18:57:06:01:9C
Certificate issuer: /CN=6117d6158043150b0ad224a0648df0185706019c
Certificate serial: 01984B542044512731DFEC71A8B33C51C0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRfWFYBDFQsK0iSgZI3wGFcGAZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
Manifest number: 1090
Signing time: Sun 27 Jul 2025 10:01:01 +0000
Manifest this update: Sun 27 Jul 2025 10:01:01 +0000
Manifest next update: Mon 28 Jul 2025 10:01:01 +0000
Files and hashes: 1: YRfWFYBDFQsK0iSgZI3wGFcGAZw.crl (hash: MsjbyiykXhcFE93sFrZ1uUz45Lw800e4vZMosZPsOhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRfWFYBDFQsK0iSgZI3wGFcGAZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:20:44:51:27:31:df:ec:71:a8:b3:3c:51:c0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6117d6158043150b0ad224a0648df0185706019c
Validity
Not Before: Jul 27 10:01:01 2025 GMT
Not After : Jul 28 10:01:01 2025 GMT
Subject: CN=b25deba21e7aff820cad6cdc284a2c56a2bf8a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:55:09:29:af:ae:1e:d8:51:24:74:b3:4b:
28:54:d7:99:e7:5d:ef:e0:dc:d4:07:18:9f:e7:58:
0a:7a:8a:e1:7b:13:ce:a4:cb:ea:7f:41:31:99:dd:
8f:99:5f:3b:b0:7a:ad:4f:f0:3e:b9:c4:8a:d0:9c:
40:dd:f5:c4:b1:48:50:5f:6a:90:5a:a5:75:db:3b:
1b:41:ae:86:fe:d0:80:0a:c5:2b:ec:6e:0d:41:87:
5a:5e:88:a1:76:99:b3:05:83:9a:86:44:dc:78:eb:
f9:59:d9:b8:b5:93:9b:aa:a3:c3:12:ed:7e:fe:a3:
ee:1f:1b:85:d7:db:6b:36:2f:13:16:c6:c1:be:d8:
2d:1b:94:97:a4:dc:6a:01:d0:57:1e:0f:0f:20:c0:
77:6d:4e:3d:84:6c:2a:7f:a5:b4:0e:0f:47:85:f7:
d9:cb:5f:b8:a6:b8:5e:31:40:ae:95:7f:93:37:fd:
83:03:63:6d:5e:57:6d:f7:df:5f:43:a8:12:36:ff:
b3:12:ce:9d:34:d1:5a:1c:9c:15:a7:e3:84:87:ef:
76:39:59:eb:a6:df:12:ec:21:64:49:3f:38:0d:2e:
d6:5d:34:ba:2d:de:b0:7e:1b:03:c7:b7:a3:35:f8:
d8:ad:9a:4a:11:01:b5:08:9b:91:37:0e:5c:f7:75:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:EB:A2:1E:7A:FF:82:0C:AD:6C:DC:28:4A:2C:56:A2:BF:8A:62
X509v3 Authority Key Identifier:
keyid:61:17:D6:15:80:43:15:0B:0A:D2:24:A0:64:8D:F0:18:57:06:01:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRfWFYBDFQsK0iSgZI3wGFcGAZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:92:a5:11:fd:4a:6b:ec:93:02:fe:ac:da:2e:92:f1:51:
d4:b4:69:2e:0f:d4:aa:fc:5d:ac:eb:db:b2:41:9c:55:83:0e:
b1:71:ee:e7:00:ce:24:f4:69:83:ca:c1:cd:c9:fb:3a:be:37:
40:63:81:18:06:8b:3d:75:b5:54:de:42:aa:ad:44:c4:bd:b0:
b4:60:c7:c6:d3:aa:13:2c:ce:7a:0b:44:11:e0:1c:97:4d:3e:
14:56:e8:d7:f2:bf:9f:d5:67:1c:b6:35:3a:52:bf:97:c9:aa:
7b:82:ad:d0:10:41:2d:78:0a:16:dd:4a:01:a8:fd:71:58:fa:
9b:62:71:03:92:73:eb:58:59:bf:3f:a9:96:b8:6d:bb:8e:a5:
da:d8:1f:2b:7f:0f:e7:c9:e2:9b:ff:2e:e5:7c:77:c2:22:51:
ea:f7:b9:b0:bc:c3:fe:08:59:8b:32:12:26:6b:1f:4b:bb:d1:
ef:ab:bc:0d:17:d2:44:f1:55:46:32:a0:2e:0e:81:53:9c:6f:
fc:19:24:10:30:f7:88:a5:23:3d:b0:8a:46:0a:fa:20:00:4b:
0a:cb:65:47:d5:b8:e8:66:e7:e3:91:29:cc:0b:b1:5c:a1:7f:
8a:cb:e7:77:84:13:c0:54:f0:6e:f4:00:f4:aa:53:90:95:b4:
44:a0:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:56:39 2025 by rpki-client