Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
File: Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft (raw, json)
Hash identifier: ObavNRgqUKRJgyMW2c7a83+wlIR5NC+GAbllgw07Q4Y=
Subject key identifier: 3B:A0:34:C9:E3:55:B3:8F:FC:C0:02:E2:8F:04:C5:49:3F:2C:5E:4B
Authority key identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
Certificate issuer: /CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Certificate serial: 01983EE17549F6F338057DED5871956477CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
Manifest number: 52
Signing time: Fri 25 Jul 2025 00:00:19 +0000
Manifest this update: Fri 25 Jul 2025 00:00:19 +0000
Manifest next update: Sat 26 Jul 2025 00:00:19 +0000
Files and hashes: 1: Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl (hash: malZAju1LxWjC5Ygn/DD5THXxcTPMAoNmHtNPaWSssM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:e1:75:49:f6:f3:38:05:7d:ed:58:71:95:64:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Validity
Not Before: Jul 25 00:00:19 2025 GMT
Not After : Jul 26 00:00:19 2025 GMT
Subject: CN=3ba034c9e355b38ffcc002e28f04c5493f2c5e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:27:4f:31:e1:de:d0:c4:dd:f5:45:c5:ae:
71:67:a2:59:39:45:f6:97:db:d4:9b:c9:7c:5d:81:
09:38:11:50:ce:09:04:e4:b1:60:27:dc:56:5e:af:
f2:f5:4c:27:a7:27:23:e6:91:c7:99:b6:18:ee:a4:
bc:31:77:a0:b4:78:c6:84:32:4b:4b:b8:9c:1f:90:
59:43:9b:be:4f:bf:3b:f8:55:8b:e0:2a:83:77:ef:
cc:7b:ac:7d:06:47:53:51:09:28:60:94:e0:31:22:
9e:8d:0c:bc:fd:fd:b9:c3:7b:f6:df:56:51:47:13:
d8:9d:58:3a:4f:53:20:94:2c:8e:85:be:ef:b6:f9:
b9:4e:ae:39:6b:ee:af:d2:59:ad:4b:f2:3c:57:d3:
cc:6b:d6:ab:12:15:cc:42:e9:94:74:85:7a:a0:3f:
3f:3c:4c:1e:97:d9:da:d8:27:ab:c9:db:fb:fb:4d:
23:c5:ce:80:58:0d:3b:cb:7c:09:67:cb:db:23:6a:
da:27:54:47:a3:17:5a:b7:3c:f5:ec:8f:f0:05:8a:
67:6e:81:9d:81:47:84:40:8d:e1:a2:a6:a4:92:2b:
dc:7d:82:d4:a3:c3:82:0a:8a:6a:d7:6d:9c:3c:04:
98:94:6a:6d:67:70:58:5e:87:46:65:65:df:30:15:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:34:C9:E3:55:B3:8F:FC:C0:02:E2:8F:04:C5:49:3F:2C:5E:4B
X509v3 Authority Key Identifier:
keyid:62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a7:46:3e:b0:e6:bc:e4:f0:0b:cf:20:b8:64:6c:c1:f0:82:
b5:45:2a:8f:8e:42:39:0f:22:19:b2:c4:31:da:0a:2c:22:2c:
08:5c:33:f7:d8:74:71:ba:2b:41:8e:72:00:28:b2:2e:0e:b4:
34:65:66:a0:19:fd:0b:55:ef:ad:a5:5a:15:ce:e7:f7:32:8e:
fe:07:20:08:7b:4e:df:fd:4a:c7:f5:77:c3:e2:60:33:5e:55:
ee:6d:06:0d:f9:22:44:04:6a:14:34:1b:ac:0f:51:ff:67:80:
8a:a6:a8:7b:7a:59:20:30:ab:73:0d:d8:a9:5f:9f:92:e0:f8:
42:b1:e7:49:5c:f8:1a:7f:25:3a:bc:11:f1:e8:ae:92:6a:ed:
67:d9:d5:16:94:e7:81:d6:87:20:19:08:59:50:01:4b:88:16:
22:a0:a6:77:b3:c0:9c:9f:c2:00:8a:8a:13:13:be:4a:50:c9:
34:52:09:23:19:af:3a:41:13:ef:0c:d0:08:9e:e9:62:b3:10:
06:61:12:d6:af:07:51:e1:29:54:36:fc:ec:49:03:82:f4:c9:
5f:3a:0a:5e:60:5f:d4:76:df:f9:74:58:88:30:c5:0c:7a:1f:
44:e1:b1:ce:0e:3e:98:71:ab:34:da:c9:9c:e1:b7:2d:76:73:
12:5c:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 05:27:20 2025 by rpki-client