Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.mft
File: yO91rieylt0KS84TZH2LWJv06cM.mft (raw, json)
Hash identifier: hurNefdgUSQLCK2xWTct6t2CF4VgDIB2UWIzqeDdceU=
Subject key identifier: 71:FC:AE:79:03:44:24:77:BA:76:84:1A:CB:A2:E6:4A:50:BB:CF:95
Authority key identifier: C8:EF:75:AE:27:B2:96:DD:0A:4B:CE:13:64:7D:8B:58:9B:F4:E9:C3
Certificate issuer: /CN=c8ef75ae27b296dd0a4bce13647d8b589bf4e9c3
Certificate serial: 0198496689F2FC4954B6A0299EEFD03E27B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO91rieylt0KS84TZH2LWJv06cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.mft
Manifest number: 116E
Signing time: Sun 27 Jul 2025 01:01:53 +0000
Manifest this update: Sun 27 Jul 2025 01:01:53 +0000
Manifest next update: Mon 28 Jul 2025 01:01:53 +0000
Files and hashes: 1: yO91rieylt0KS84TZH2LWJv06cM.crl (hash: 3Pg5IJL7udm9PAhZMmzDg3Bun7Fpam8LLf91gV7rKY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO91rieylt0KS84TZH2LWJv06cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:89:f2:fc:49:54:b6:a0:29:9e:ef:d0:3e:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ef75ae27b296dd0a4bce13647d8b589bf4e9c3
Validity
Not Before: Jul 27 01:01:53 2025 GMT
Not After : Jul 28 01:01:53 2025 GMT
Subject: CN=71fcae7903442477ba76841acba2e64a50bbcf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:18:ad:97:91:c8:c8:6a:96:91:f6:36:aa:
d5:7f:ad:19:96:55:b9:3f:eb:6a:00:ab:80:0a:e6:
ae:25:8c:06:31:08:c5:30:8e:32:b5:7d:5f:e4:f3:
9d:7e:eb:18:00:f7:9b:56:cd:a7:ee:e1:8a:8c:06:
0b:99:90:f1:23:c4:2a:41:dd:4f:5b:52:6e:15:15:
9d:f9:fc:05:3e:2b:fa:ab:fd:c6:c8:4b:01:c0:c4:
fd:ce:c4:8d:b6:07:b7:cf:b2:36:c7:16:f2:68:ff:
cf:ce:52:37:dc:ed:0d:8c:d7:65:25:3a:dc:4f:79:
0b:d7:4a:10:8d:75:94:45:87:d9:f7:de:6a:70:a5:
85:73:bb:e4:fb:58:21:d2:2b:05:34:62:3b:d4:9a:
e8:14:6f:69:a7:f5:c8:e5:ff:e3:88:b4:e8:27:0a:
b3:42:9f:cc:70:d6:e7:91:ca:17:0c:0a:52:47:e7:
e1:a5:93:d6:01:4d:b8:ea:cc:70:60:16:93:2a:6e:
a1:35:c5:38:53:4d:94:f5:00:22:dd:4c:ff:e7:43:
fc:71:66:d2:91:05:bf:d2:a1:c4:bf:ed:d5:05:4b:
d6:33:f6:f2:d3:2d:24:13:29:0f:55:a8:d6:ee:d1:
1e:6e:36:ba:b1:f9:4f:2a:5e:6f:c8:86:e1:c0:bf:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:AE:79:03:44:24:77:BA:76:84:1A:CB:A2:E6:4A:50:BB:CF:95
X509v3 Authority Key Identifier:
keyid:C8:EF:75:AE:27:B2:96:DD:0A:4B:CE:13:64:7D:8B:58:9B:F4:E9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO91rieylt0KS84TZH2LWJv06cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:20:db:dc:00:2c:55:7e:b1:ca:3b:19:8d:ff:b2:98:3a:3b:
6e:28:b6:16:76:b7:ec:c7:46:af:78:2c:be:e6:d3:00:6d:d1:
19:8f:d4:49:c8:78:b4:47:6b:97:00:ed:d5:a3:99:d3:2a:85:
73:6b:80:a1:98:3b:6b:4f:7e:12:6c:06:8c:35:2e:37:a6:d7:
54:4b:2f:28:e5:a1:a6:4f:23:e0:b1:08:f8:4b:ab:b5:34:b0:
bb:09:be:8c:4c:76:aa:ef:af:16:3c:41:27:dd:7b:20:72:1c:
c0:ab:80:bb:ca:76:42:7c:fc:14:5c:d4:72:10:fe:b4:ae:2b:
d6:33:a8:2e:e9:55:d5:0a:3a:81:d1:7c:35:13:b1:b9:eb:42:
35:d1:aa:69:85:a5:97:54:8f:58:6a:51:dc:37:af:38:2f:d8:
e0:dd:f9:a0:72:e2:21:b7:12:30:e0:f9:47:7c:01:e2:f2:1a:
9d:77:3c:b1:22:9d:4c:0b:33:4c:44:2e:70:b0:47:39:3d:f6:
7f:ec:0c:94:b8:ff:bf:ea:dc:67:1b:61:ec:de:ef:fe:4d:21:
ad:96:76:f4:98:39:35:0d:52:57:f4:de:39:8a:bc:1a:41:91:
a9:c3:89:51:63:3e:cc:72:a6:b5:bd:c5:18:ae:c8:1b:06:cd:
4f:e2:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:36 2025 by rpki-client