Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: woAQaIH4RK97uIN6sai++ddqHAHROvJcJnyDzGgSMXg=
Subject key identifier: DF:1C:51:D9:78:98:58:03:DB:E0:BE:CF:CE:63:62:97:96:DC:7C:5D
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 0198530E8761F62781AD83F93B5DAD219E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 06AD
Signing time: Mon 28 Jul 2025 22:01:57 +0000
Manifest this update: Mon 28 Jul 2025 22:01:57 +0000
Manifest next update: Tue 29 Jul 2025 22:01:57 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: Cw3UIb0nocSpXShd/7DaCvgRSRMjXSE/LvBgbj4NoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:87:61:f6:27:81:ad:83:f9:3b:5d:ad:21:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Jul 28 22:01:57 2025 GMT
Not After : Jul 29 22:01:57 2025 GMT
Subject: CN=df1c51d978985803dbe0becfce63629796dc7c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:a2:a6:65:92:bc:de:19:4b:e0:7d:16:e0:
cb:5a:34:fc:f0:fa:f2:18:23:4d:d2:1a:df:9d:65:
60:12:c9:43:c8:0f:52:38:08:2b:1b:18:d6:05:ba:
54:7a:8a:49:5d:47:45:a5:4c:c8:a7:2b:da:42:1e:
ca:fa:2f:00:64:08:31:70:b9:37:d1:0b:11:5f:12:
18:cf:af:92:99:73:58:b6:14:0e:98:dc:5f:61:b3:
64:4a:3a:19:ab:04:fd:4d:33:69:26:a7:87:63:88:
3d:b1:4f:ad:20:5e:11:08:5b:04:42:55:f8:ed:70:
d0:90:63:0a:d1:05:cc:ea:81:9f:4a:ab:eb:0a:55:
9e:17:06:0c:37:e5:1b:03:bc:35:9f:2a:b7:72:30:
cb:9e:f7:30:a9:f3:1a:10:39:5a:04:8d:e2:ed:77:
ed:a9:9a:d1:e0:db:1d:d6:e6:af:3e:e3:6f:4d:04:
8c:e7:5a:fb:a5:69:b7:84:27:5c:a2:00:f4:07:f1:
fb:85:95:cb:78:93:30:5c:76:be:82:08:70:20:04:
9e:02:3f:c3:7b:d6:b9:fb:65:34:ff:47:bf:27:fd:
0e:12:35:81:fd:94:01:3b:91:5d:dd:c6:da:a3:3c:
64:64:f2:a1:bb:0d:e3:07:a1:2e:d1:06:4b:05:05:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:51:D9:78:98:58:03:DB:E0:BE:CF:CE:63:62:97:96:DC:7C:5D
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a7:30:28:77:d2:46:07:a0:35:2f:29:f1:f2:22:f6:60:de:
d2:f6:29:f8:0f:ca:75:28:91:06:c5:60:30:72:33:92:07:e0:
5c:0d:6f:0e:50:c4:fb:0e:09:e4:17:71:6c:63:c9:c9:b5:61:
8d:c3:ab:7d:cd:26:e3:71:45:0c:2d:74:c3:15:7f:a3:df:75:
81:28:fd:32:23:a0:e9:80:4e:a2:95:53:0c:ec:4c:a4:1f:8b:
5f:41:ce:16:0e:1b:0d:a7:a1:4a:35:be:7a:77:25:19:32:b2:
6e:02:c5:98:44:3e:16:f4:c3:9a:dc:b4:66:9c:4c:11:b0:72:
8e:71:03:3e:fd:55:57:8c:08:4c:8c:6e:53:4a:84:72:c5:28:
58:ad:4c:e0:27:15:22:79:db:5a:ae:74:73:dd:40:51:37:c7:
f7:cf:3d:88:e1:d7:6a:3e:f8:b8:b5:74:5e:23:0f:ff:d8:0a:
03:7c:76:5c:95:89:ab:50:78:3b:b0:6c:e1:ec:6c:c4:cb:d5:
50:f0:83:2e:7d:04:4e:c2:8e:b2:0f:db:bf:01:bc:da:f3:05:
b9:6d:9c:36:1c:42:0c:f1:04:cb:68:64:6e:34:6f:3a:9a:df:
df:b9:38:b0:9c:eb:1a:c3:f3:51:eb:00:ab:6f:e1:05:af:cb:
1e:5b:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:26 2025 by rpki-client