Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: ZMNcN/kUiThaEleI8q3KumjJrDRzjLeb0tLltvyq4PE=
Subject key identifier: 52:30:80:4A:26:9F:2D:39:22:F4:ED:CA:C9:9A:A5:0E:5A:97:7B:79
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 01984B547DF8AC425FFACB7C258FC8C46F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 10:01:25 +0000
Manifest this update: Sun 27 Jul 2025 10:01:25 +0000
Manifest next update: Mon 28 Jul 2025 10:01:25 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: c7LasTkRQTzkCd5Fj8ufWiYoptSj5YWAA83deEeYPPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:7d:f8:ac:42:5f:fa:cb:7c:25:8f:c8:c4:6f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Jul 27 10:01:25 2025 GMT
Not After : Jul 28 10:01:25 2025 GMT
Subject: CN=5230804a269f2d3922f4edcac99aa50e5a977b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:dc:4c:89:8d:ce:08:fb:07:92:5b:99:cb:
d0:a6:21:9f:8a:49:07:fd:60:d1:00:e1:d0:5e:33:
1b:87:29:7c:2c:71:f6:51:74:91:47:5c:d3:8c:95:
9c:27:15:d5:87:c1:e5:86:f7:44:09:43:30:11:4e:
d7:9d:f6:21:f2:b0:c0:af:12:c5:ed:ab:07:f2:1a:
a7:4b:10:f0:6b:4b:3d:8c:07:bb:d5:4c:5b:db:34:
d1:a9:51:44:cd:96:31:1c:f1:8a:89:ec:ae:ff:dd:
c8:8e:55:39:a7:5f:30:15:5a:4a:5c:24:58:5d:ba:
a1:e9:81:82:b5:a5:dc:4c:72:f7:3f:66:81:76:e7:
9a:0c:a5:88:90:2a:d3:05:f9:88:f5:4c:c1:d1:08:
01:17:12:6d:4e:89:d6:2e:fa:ea:a0:16:34:92:bd:
6f:93:39:75:3c:d5:3e:09:e5:2b:b5:a5:db:e9:2f:
67:d0:ee:34:9a:3c:eb:6e:b5:76:4d:91:65:d6:b5:
fd:6f:33:c8:ec:6a:19:0a:ab:ad:9c:1c:ac:09:c9:
ef:e6:45:80:44:b0:21:94:8a:a0:a2:91:00:e1:a4:
f0:84:0f:68:27:e1:f1:df:1e:d0:ea:4f:84:64:c0:
dd:24:b0:43:36:b4:a3:5c:81:b0:11:0d:a8:10:06:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:80:4A:26:9F:2D:39:22:F4:ED:CA:C9:9A:A5:0E:5A:97:7B:79
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:13:3a:e1:75:92:83:32:32:af:d7:f8:ce:a3:f2:5c:1a:d3:
a2:bb:ed:13:de:dd:ff:93:39:d5:6b:b4:22:ce:5e:2d:11:ee:
a7:b8:cc:64:64:66:ba:02:35:53:5c:01:be:2e:43:2b:8c:1d:
84:3e:0e:89:3c:c6:f7:df:30:e8:de:9d:eb:c9:d0:6b:fb:c9:
d9:b0:0a:80:a5:36:ca:3f:92:1d:89:07:ff:fe:9e:b3:7a:91:
c3:11:3a:05:b2:f3:90:d4:1a:99:79:a0:7f:c4:98:12:dc:29:
75:48:cf:6d:00:1f:54:82:b2:c9:a0:9a:81:82:65:d5:57:54:
00:ea:2e:63:69:7d:2e:81:4f:77:75:92:a2:52:9d:13:66:cd:
0f:a9:41:a3:d4:a7:8d:e0:eb:97:64:31:06:95:a5:fe:be:65:
3d:7f:39:97:96:9f:67:2b:9f:9b:15:e3:85:05:4d:3c:36:6c:
a7:e6:6d:d2:ed:93:e2:a4:d8:e2:25:ad:99:30:21:fb:c0:af:
57:22:73:58:64:88:38:32:44:c0:0b:a2:e3:8d:b0:9b:2b:78:
b0:65:98:88:80:e9:15:73:8c:ed:42:e6:31:1c:f0:78:91:c9:
ca:5b:f8:21:54:e3:a1:20:24:6e:40:df:fa:a4:2d:6e:67:17:
c1:84:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:30 2025 by rpki-client