Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: eR8Q219pkKmpHMfGjhCaeoSdaij8iefKGemF8AjIRKA=
Subject key identifier: 36:EB:7D:D5:FC:94:B0:CD:1F:DE:AD:3C:18:CE:83:BC:0B:65:49:E8
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 019853B1C5FB9FA9D1AF32559775F1FFDDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0CFA
Signing time: Tue 29 Jul 2025 01:00:16 +0000
Manifest this update: Tue 29 Jul 2025 01:00:16 +0000
Manifest next update: Wed 30 Jul 2025 01:00:16 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: QG0UoXB4UoSRBiuRwaMYJCGkt+k1ENZdTfziCGbi9QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:c5:fb:9f:a9:d1:af:32:55:97:75:f1:ff:dd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Jul 29 01:00:16 2025 GMT
Not After : Jul 30 01:00:16 2025 GMT
Subject: CN=36eb7dd5fc94b0cd1fdead3c18ce83bc0b6549e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:c2:bf:d3:bd:c6:09:31:66:19:b7:19:39:
7d:87:8b:ce:f8:66:5e:a2:19:d4:d3:fe:c1:a8:5c:
36:32:08:9a:8b:73:ee:a3:34:8e:98:2f:5f:86:83:
04:44:58:e1:79:4b:e1:fb:38:e1:55:62:5a:db:f2:
d3:1a:85:a5:5d:d3:8e:1f:05:80:60:32:97:aa:18:
a7:95:8c:a1:93:d5:68:9b:7f:59:64:f8:d5:08:4b:
49:8e:2c:3d:2c:24:8c:6d:fd:68:11:08:ce:4e:f3:
5f:ce:89:5c:c9:b6:e8:17:7b:c7:23:c3:70:fa:27:
2f:d2:52:04:6b:58:a2:60:07:e3:bb:c6:d0:90:c9:
97:cd:d4:2e:5a:1b:9d:9f:1b:3f:19:2c:3e:93:7d:
20:0b:89:78:b3:c5:49:4c:fb:a6:7b:44:94:b4:bc:
4c:cc:87:e5:3c:75:98:36:08:3f:02:0a:40:bc:3f:
db:fe:7d:a5:37:46:4c:73:41:2a:78:db:33:20:f0:
64:82:c1:77:ef:e1:43:6b:09:cb:77:3a:32:90:d7:
ef:c3:84:3a:32:08:28:78:a1:6e:84:16:cd:d2:90:
41:08:2b:e2:d9:b0:29:58:f0:b5:5e:83:e6:e8:94:
ed:46:82:0f:5a:2a:22:a3:73:da:15:ee:98:b6:e4:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:7D:D5:FC:94:B0:CD:1F:DE:AD:3C:18:CE:83:BC:0B:65:49:E8
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3c:b0:e7:71:ea:6e:11:b6:ca:e2:3c:06:79:b8:e3:e3:2e:
9b:25:d9:32:11:15:a4:ad:8b:45:2f:18:40:75:f8:09:03:2e:
e7:72:3d:71:48:99:3f:29:04:0a:2b:7f:0e:9a:d1:bb:36:c3:
1b:87:98:dc:55:b4:3e:03:85:a5:ee:6e:87:f1:bc:bf:fb:4f:
11:57:b0:8d:64:c7:ff:59:66:f7:60:28:ed:d6:5e:11:26:ac:
bd:7a:be:ea:48:2e:5b:b6:4b:85:70:9b:02:57:10:68:b8:45:
ff:d3:1f:c2:30:79:47:0c:44:38:d4:d3:2d:d0:f5:48:13:62:
fa:38:54:49:12:b1:22:fb:c5:89:00:38:57:9e:c3:8b:8c:a7:
12:5d:83:3c:09:4e:1e:d8:cd:27:93:b4:db:1d:b8:d7:e8:3d:
74:37:8c:09:d4:f4:23:7c:d0:d4:06:b2:2f:3d:e2:58:52:7b:
d5:5f:f8:cb:69:a0:35:8b:d9:03:b7:7f:98:1c:a9:72:6f:18:
b1:90:d1:b2:99:92:c1:25:dc:84:51:c9:af:5a:57:72:01:74:
78:cc:7b:57:54:e1:bc:be:38:a0:01:6b:73:17:e0:a5:cd:81:
26:9d:fa:53:64:ae:91:64:c6:8e:6a:08:e4:8f:39:07:38:5f:
96:ce:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:58 2025 by rpki-client