Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier: PrT5H+TlEDzVypvVq+aidKRuuw19w4NLYocKJvl1epo=
Subject key identifier: F9:C3:2E:FF:D5:E8:B8:A2:44:CF:76:9C:8F:0B:F2:7B:36:F4:0F:0A
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial: 01984776F2DD51440F953E9FE9D447EA1AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 16:00:34 +0000
Manifest this update: Sat 26 Jul 2025 16:00:34 +0000
Manifest next update: Sun 27 Jul 2025 16:00:34 +0000
Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: LfdCf0EbQSxu5pIaHCtzxacLsV5irWivFDX3l5JnlQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f2:dd:51:44:0f:95:3e:9f:e9:d4:47:ea:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9187af710f6285e13553071328b9d994852c471
Validity
Not Before: Jul 26 16:00:34 2025 GMT
Not After : Jul 27 16:00:34 2025 GMT
Subject: CN=f9c32effd5e8b8a244cf769c8f0bf27b36f40f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:42:01:cf:b2:b0:ab:66:5b:a5:4e:76:7b:
d9:a0:56:27:2d:16:e0:ef:69:99:cf:89:65:52:62:
f4:e0:b5:90:10:e2:78:86:62:60:7e:3a:ab:d0:21:
d1:20:0f:e5:9c:29:ec:e0:a9:5b:41:6c:97:e0:21:
55:bd:af:81:44:fe:4d:83:6e:d4:9a:4c:2e:8f:9b:
83:7a:ab:fb:cc:61:99:a4:3b:2e:d4:36:e4:80:ee:
be:05:e0:9f:11:b9:7b:18:4d:a9:14:bd:ea:d5:b4:
39:b6:2d:90:11:fd:fc:2e:81:30:19:b8:97:ee:b0:
ad:e7:69:c5:2f:ef:2f:55:e2:9b:61:8d:7b:34:43:
8e:99:24:3a:77:96:ca:a3:f6:10:91:29:c3:88:ed:
c0:ba:ec:0f:18:a4:8c:94:e7:32:ad:8f:94:99:dc:
55:d8:c9:22:40:d0:55:96:07:89:71:3e:01:0f:15:
47:a4:2c:28:3f:99:e8:78:bd:e2:39:f6:c5:2a:b5:
6b:a5:c3:6b:96:a2:bb:bd:37:c2:ea:d1:de:9f:cd:
1f:2a:30:2c:24:96:ce:c4:57:d2:ae:f6:a8:e6:7d:
d4:70:a4:02:29:0b:be:94:43:2e:fc:75:9c:57:a8:
49:0f:7b:b1:dc:3a:4f:fe:92:08:dc:5a:db:91:af:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:2E:FF:D5:E8:B8:A2:44:CF:76:9C:8F:0B:F2:7B:36:F4:0F:0A
X509v3 Authority Key Identifier:
keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:b7:37:c4:ca:b5:6b:ba:02:22:41:0b:16:96:77:01:08:
92:dd:71:64:ad:53:97:e6:f7:fa:90:44:99:61:1b:ce:e2:27:
69:09:c6:c8:51:69:ef:e2:7f:31:b9:92:e7:9d:7c:8d:19:15:
6d:86:48:24:34:b3:e4:68:f6:d0:85:80:1f:de:34:27:18:11:
27:2d:e8:d0:9f:25:1c:79:c5:4f:06:46:84:1f:cf:d5:24:a0:
42:95:d9:a5:07:ca:bd:f9:15:aa:d1:ee:8f:82:8e:c4:7f:2d:
70:7d:59:a4:cb:0f:1a:cd:ee:9f:ba:b9:37:1b:e9:fb:c7:d7:
88:3e:d3:e0:b8:2e:30:d0:3e:d9:4a:ab:d2:45:4a:5d:89:77:
2a:0c:8f:c0:64:dd:25:e2:b3:d2:e5:51:de:22:72:9c:07:93:
73:5b:e1:79:29:40:0d:70:e8:08:4d:27:d3:a8:58:a7:ed:17:
f7:c2:83:64:ce:bf:e9:71:54:36:04:dd:54:cb:fa:f4:76:20:
9f:2c:d5:34:8d:e1:81:8d:2b:a4:78:af:be:6b:29:07:18:25:
19:49:ca:e6:2d:c6:df:18:f3:98:08:b3:54:4c:4a:13:32:31:
f2:be:8b:24:00:3a:3e:a2:59:99:75:0d:bd:b2:f4:3b:61:13:
a4:4e:54:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdvLdUUQPlT6f6dRH6hqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTg3YWY3MTBmNjI4NWUxMzU1MzA3MTMyOGI5ZDk5NDg1
MmM0NzEwHhcNMjUwNzI2MTYwMDM0WhcNMjUwNzI3MTYwMDM0WjAzMTEwLwYDVQQD
EyhmOWMzMmVmZmQ1ZThiOGEyNDRjZjc2OWM4ZjBiZjI3YjM2ZjQwZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnZCAc+ysKtmW6VOdnvZoFYnLRbg
72mZz4llUmL04LWQEOJ4hmJgfjqr0CHRIA/lnCns4KlbQWyX4CFVva+BRP5Ng27U
mkwuj5uDeqv7zGGZpDsu1DbkgO6+BeCfEbl7GE2pFL3q1bQ5ti2QEf38LoEwGbiX
7rCt52nFL+8vVeKbYY17NEOOmSQ6d5bKo/YQkSnDiO3AuuwPGKSMlOcyrY+UmdxV
2MkiQNBVlgeJcT4BDxVHpCwoP5noeL3iOfbFKrVrpcNrlqK7vTfC6tHen80fKjAs
JJbOxFfSrvao5n3UcKQCKQu+lEMu/HWcV6hJD3ux3DpP/pII3Frbka/YkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnDLv/V6LiiRM92nI8L8ns29A8KMB8GA1UdIwQY
MBaAFMkYevcQ9iheE1UwcTKLnZlIUsRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zMzBmNmItMmVhNS00OGEwLTg0MTUt
NDY0ZTU5YzhmNDg1LzEveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zMzBmNmItMmVhNS00OGEwLTg0MTUtNDY0ZTU5YzhmNDg1
LzEveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELG3N8TK
tWu6AiJBCxaWdwEIkt1xZK1Tl+b3+pBEmWEbzuInaQnGyFFp7+J/MbmS5518jRkV
bYZIJDSz5Gj20IWAH940JxgRJy3o0J8lHHnFTwZGhB/P1SSgQpXZpQfKvfkVqtHu
j4KOxH8tcH1ZpMsPGs3un7q5Nxvp+8fXiD7T4LguMNA+2Uqr0kVKXYl3KgyPwGTd
JeKz0uVR3iJynAeTc1vheSlADXDoCE0n06hYp+0X98KDZM6/6XFUNgTdVMv69HYg
nyzVNI3hgY0rpHivvmspBxglGUnK5i3G3xjzmAizVExKEzIx8r6LJAA6PqJZmXUN
vbL0O2ETpE5UAQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:03:45 2025 by rpki-client