Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: PNIUS6d//9oOdKlZK++dhP7LUzd2KKcMMoSRj7HNA2k=
Subject key identifier: 1F:1A:2C:6E:74:2F:AD:A0:08:28:CE:6D:48:F6:5A:3E:A9:B7:81:64
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 01984776FBA03BFD7909807174B118268606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0D05
Signing time: Sat 26 Jul 2025 16:00:36 +0000
Manifest this update: Sat 26 Jul 2025 16:00:36 +0000
Manifest next update: Sun 27 Jul 2025 16:00:36 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: MV4YBhktDII9vHDjYou3FC7WfuWomptnlEe7bmPpv9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:fb:a0:3b:fd:79:09:80:71:74:b1:18:26:86:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Jul 26 16:00:36 2025 GMT
Not After : Jul 27 16:00:36 2025 GMT
Subject: CN=1f1a2c6e742fada00828ce6d48f65a3ea9b78164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:41:e0:e5:a7:21:2e:22:e3:79:f9:29:08:
67:16:dd:e4:bb:eb:8f:d1:9c:a9:bb:82:9c:61:2e:
29:54:1c:42:16:56:27:1e:fd:f6:dc:6d:7d:e3:68:
40:2c:7e:70:3d:ec:6c:38:e6:5e:c9:0c:1f:f7:f4:
ab:59:99:b4:47:22:4f:6b:16:9e:7a:16:98:97:02:
92:f7:ce:ef:79:ef:60:0f:38:30:07:e5:91:dc:e8:
c6:63:75:bc:d0:88:25:14:b2:0c:e0:23:7c:27:51:
97:de:7b:9d:66:e9:9d:38:43:f5:77:e1:03:30:50:
3f:8d:09:bf:cc:15:ae:91:15:82:01:3b:03:19:7e:
bf:1e:81:89:25:f4:12:15:d2:b1:9b:69:e5:0c:8c:
6a:83:84:d2:33:4a:c7:dd:89:f1:c7:11:7e:62:f9:
9b:2c:45:2b:2c:f7:f6:d5:a4:b5:15:00:e5:85:97:
b1:fd:a6:ef:7d:b5:4b:6d:49:31:8d:68:d0:c7:36:
c6:f7:d8:e4:e2:b8:71:35:0d:ed:48:35:1c:ce:de:
e4:31:0b:ba:2d:df:b7:11:cb:7c:3e:c8:2d:49:d5:
ed:f9:bd:0d:b7:1e:e1:d4:51:83:9b:26:3c:2a:16:
a3:52:08:66:7b:45:a5:d9:07:93:c2:7b:a7:1c:1b:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1A:2C:6E:74:2F:AD:A0:08:28:CE:6D:48:F6:5A:3E:A9:B7:81:64
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b3:13:86:38:c3:f7:ec:66:b4:8e:02:98:7d:4a:44:1b:e9:
bf:59:55:d7:a4:33:22:74:77:49:ab:9f:b5:4a:44:a8:ee:8b:
97:4c:f7:34:e7:77:cd:76:35:20:86:97:69:6c:6e:24:b8:5b:
11:91:7f:66:6c:2c:0d:f5:1e:1c:14:21:bc:b0:51:57:34:f1:
1a:db:ab:28:e1:8e:d4:b4:82:da:62:c3:ee:3d:6b:e8:33:cb:
18:1a:b3:45:49:8b:ca:be:6d:52:aa:5b:87:a1:b9:1e:27:ea:
53:fb:b2:a2:c8:d4:78:dc:85:0c:31:be:10:d8:dd:79:b7:a4:
2f:93:81:ad:e3:c7:d1:d2:67:47:5b:9c:a6:e6:33:6d:bc:bb:
c1:71:39:52:dd:12:ef:a6:8f:93:0a:32:e5:2a:ad:cd:3c:15:
c1:cd:9a:81:d5:2b:4b:be:74:9d:2c:79:cf:b7:b2:0e:ea:c9:
6f:94:4d:01:d3:82:22:f7:1c:9e:6f:4a:e9:b5:62:bf:a8:f0:
7b:9b:ce:43:7c:cd:e6:e7:01:d5:e4:f2:15:f4:2d:33:ec:1b:
c5:a9:f6:62:78:4a:7b:55:2a:e7:9a:ae:3b:d6:c8:7e:e6:01:
29:48:6b:08:ba:a7:47:89:3b:5f:61:1b:ea:41:ce:6c:bc:f6:
b1:8c:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:45:18 2025 by rpki-client