Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
File: yFiMcrJRDxd7g18gHjNl7PnkWh0.mft (raw, json)
Hash identifier: TpM8e6uFeRHQXSVnRlwYMfQ0yt1PwNwjdZOZExTMwFI=
Subject key identifier: 2C:35:5F:E4:39:4F:3D:45:D2:57:75:CC:D9:34:55:78:05:A3:8D:E9
Authority key identifier: C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
Certificate issuer: /CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Certificate serial: 01984DE70CAEDB8F175EA55103F819FEF883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
Manifest number: 0FB4
Signing time: Sun 27 Jul 2025 22:00:44 +0000
Manifest this update: Sun 27 Jul 2025 22:00:44 +0000
Manifest next update: Mon 28 Jul 2025 22:00:44 +0000
Files and hashes: 1: yFiMcrJRDxd7g18gHjNl7PnkWh0.crl (hash: CZW+AYOXHGopqfPAiZMSABuL4WDNb+UO3r7DTqiEqHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e7:0c:ae:db:8f:17:5e:a5:51:03:f8:19:fe:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Validity
Not Before: Jul 27 22:00:44 2025 GMT
Not After : Jul 28 22:00:44 2025 GMT
Subject: CN=2c355fe4394f3d45d25775ccd934557805a38de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:70:b5:ec:cb:5c:6d:c0:51:82:b0:c9:39:
25:54:b6:66:58:f4:5c:82:fc:f8:dd:03:c7:68:49:
00:7e:71:96:42:39:8f:69:f1:02:f1:b2:f1:b2:05:
32:48:2e:44:34:2e:32:c3:c6:e6:df:67:f6:78:67:
f4:be:5d:c8:52:81:cb:ac:be:a2:8f:71:2f:26:45:
81:f8:ef:68:3c:56:97:34:e4:48:dd:b1:0a:5c:67:
61:ca:ba:e9:fd:00:96:85:c4:a1:e7:1f:34:27:48:
69:74:7f:22:a0:58:89:51:45:00:c8:b6:33:a3:b7:
ae:24:7d:4a:52:d7:48:45:d1:08:fd:f9:6c:78:18:
9e:a3:4e:8a:9d:eb:5f:7f:08:48:a1:e9:93:97:94:
eb:2f:a6:d7:dd:80:49:31:d3:60:a2:34:c9:72:a9:
42:a8:96:0e:8e:6c:77:ea:f3:df:c9:32:30:4d:64:
de:34:89:9f:b8:1e:0f:ce:a3:15:71:f1:b6:32:92:
8d:e5:2c:5b:71:8e:5e:6e:72:38:99:49:f7:c0:c1:
80:45:f3:7b:b2:ef:f6:7b:38:f0:21:7c:fd:7c:c0:
00:72:b4:41:27:2d:b5:b0:e7:35:f6:6d:60:5a:5e:
93:64:5b:5d:00:3d:c3:7c:c8:db:e5:28:84:7d:d4:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:5F:E4:39:4F:3D:45:D2:57:75:CC:D9:34:55:78:05:A3:8D:E9
X509v3 Authority Key Identifier:
keyid:C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:11:cd:7d:59:7e:8a:26:1a:34:7c:83:c1:9a:7b:c6:81:b4:
ce:75:a8:f7:43:68:04:f6:7b:55:3b:7f:94:3f:79:a1:a7:1e:
0c:90:f3:27:33:9b:f2:b7:67:d1:66:a3:97:16:ea:83:c0:c2:
95:12:00:70:84:88:ee:c6:83:fc:c6:76:ba:88:2e:8d:f8:fc:
72:da:51:a9:e0:e3:6d:95:5c:be:e7:68:e2:5c:17:e6:3e:4b:
a9:f2:d0:0e:5c:31:bf:c6:11:0c:a0:5d:2e:4e:e1:32:63:0d:
32:a4:fa:f4:23:70:87:34:0b:15:d2:9f:94:db:cd:3d:86:7f:
ab:60:2b:0a:2a:68:e4:05:66:2f:f9:01:76:53:be:cd:fe:d8:
5d:14:1a:df:39:02:55:c2:fe:43:87:b8:33:47:b8:53:6c:44:
b8:33:66:ee:f8:77:b4:98:c9:6f:df:e8:9b:3f:96:b7:21:04:
0c:c4:93:96:3a:b9:f6:fd:ba:91:86:4c:a9:a3:25:a4:ca:24:
e6:cb:1f:f9:13:ce:06:54:ca:3a:99:f0:7b:69:25:e6:9a:40:
6a:20:82:5c:5a:90:c5:b1:a4:ea:5c:3a:fc:69:ff:ab:fc:72:
d5:02:3c:8c:3e:f2:e8:2d:79:22:48:1a:81:cb:16:98:a2:14:
e2:7e:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:56:41 2025 by rpki-client