Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: DDmm8fld2aJ0dYQK04/pr6XnqTnXBZoj+piXru78PUc=
Subject key identifier: E2:7B:87:79:A4:DD:7B:CD:21:E9:01:C1:B4:38:C4:F5:1E:6D:CF:4D
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 019849669AECD44B0E6A99288ABF1C90FD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 1259
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: /YiP5znCcbByI/3sukjzQn5QLd+0jiqh7HTLsSDqGY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9a:ec:d4:4b:0e:6a:99:28:8a:bf:1c:90:fd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=e27b8779a4dd7bcd21e901c1b438c4f51e6dcf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:65:92:f0:6f:e7:a5:b2:fd:8c:58:57:77:
cb:52:62:bb:1f:f8:0c:a3:ec:57:05:e1:38:6f:70:
ff:f3:c3:2f:36:1e:a0:66:1e:4e:52:ce:30:0a:68:
c3:66:80:fc:b5:4b:02:c0:48:ad:c2:2b:c8:6a:07:
dc:5a:62:b8:e6:39:cc:31:4b:50:c1:d5:db:7e:6b:
62:6a:9a:f8:5a:29:52:c3:55:3d:26:1b:c8:b2:ab:
24:fc:1c:51:74:fb:da:90:47:4c:e6:59:0c:14:ff:
83:17:3e:c3:40:89:a2:8a:e6:17:00:05:d6:1a:44:
d9:38:a4:64:55:49:48:64:f0:b8:dc:1a:d4:df:60:
e0:01:11:29:dd:d1:81:e4:5a:84:68:76:b7:38:c0:
50:d4:21:4a:52:d1:bb:26:d4:f4:31:e9:be:43:48:
84:93:a5:75:0e:a9:71:d4:2e:fa:d2:b5:e7:ce:bd:
fe:92:2d:64:e9:d5:1f:85:82:1e:34:11:db:44:c4:
58:c6:39:3e:08:fc:eb:a5:90:4e:b6:50:de:2c:3e:
33:8c:64:a0:76:5f:e3:c7:7a:5e:da:2e:fe:d5:50:
97:71:57:8e:22:b3:2c:df:30:51:7f:7f:4b:6e:5a:
7a:81:60:fc:fe:de:c9:94:d2:e4:85:35:b0:9d:23:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7B:87:79:A4:DD:7B:CD:21:E9:01:C1:B4:38:C4:F5:1E:6D:CF:4D
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:16:5f:49:38:0e:fc:a1:af:45:57:89:7d:5b:01:31:e5:
6e:4c:f1:69:21:1b:7f:b6:15:ab:ed:9e:21:96:5f:24:2f:0a:
a5:24:a9:a1:ad:13:b6:a8:fc:c5:88:d3:9b:de:f4:4d:97:16:
ef:a4:f3:ad:cf:48:10:23:bb:1f:40:1f:4b:32:ad:42:6b:e1:
2d:f6:37:a0:2d:40:19:84:27:b9:5a:24:f2:77:16:44:38:02:
2d:6c:c4:b9:28:2a:38:60:3a:3f:64:22:2e:48:c2:e8:34:91:
1a:1b:0d:82:b4:d0:7d:44:f3:c5:f4:7e:c8:32:ee:99:c4:c3:
f4:b6:28:3d:61:30:b5:cc:99:b2:9d:81:7c:14:58:98:a0:c2:
88:2e:9d:9a:0e:79:5c:00:29:60:15:e7:be:8a:a3:26:3c:3c:
9f:03:65:d9:88:29:44:3a:46:61:f0:24:ef:b8:c6:0a:4e:c5:
80:d1:ea:1c:5c:da:78:58:78:4d:4a:08:3c:dc:f6:c9:a5:e2:
7a:50:c1:20:48:20:39:aa:19:3b:d0:e2:e7:00:6d:a3:88:b8:
b5:55:ae:17:76:9e:51:dd:53:c1:a2:34:5f:c7:86:3b:4f:cf:
7f:33:fc:40:2e:29:28:27:d2:a3:69:ff:61:ab:74:0c:95:a5:
65:c1:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:14:01 2025 by rpki-client