Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
File: YDe79svKAic6peIbuIjj4exnZ98.mft (raw, json)
Hash identifier: TbypV2+cZJy9/tGdd3DTq/kSMrN9XFBhrdcL3UauEoY=
Subject key identifier: B9:33:55:79:3C:1F:CC:78:EB:EC:3C:7B:4E:9C:00:D6:FE:13:C7:BA
Authority key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
Certificate issuer: /CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Certificate serial: 01984777C48BBD426801554538D045E4981D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
Manifest number: 0B21
Signing time: Sat 26 Jul 2025 16:01:27 +0000
Manifest this update: Sat 26 Jul 2025 16:01:27 +0000
Manifest next update: Sun 27 Jul 2025 16:01:27 +0000
Files and hashes: 1: YDe79svKAic6peIbuIjj4exnZ98.crl (hash: iQp0P7lXv67mCuKt3vlXIkbqlzB6diL7UwKR2SqypcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:c4:8b:bd:42:68:01:55:45:38:d0:45:e4:98:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Validity
Not Before: Jul 26 16:01:27 2025 GMT
Not After : Jul 27 16:01:27 2025 GMT
Subject: CN=b93355793c1fcc78ebec3c7b4e9c00d6fe13c7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:52:13:9a:32:e4:47:b9:c9:a3:23:e6:30:
08:d4:2f:c5:d7:d1:b8:62:87:4e:61:57:15:17:37:
67:bc:5a:d7:d4:51:9c:8f:24:ac:a7:a8:3e:30:a4:
96:13:96:93:fb:ce:c7:54:38:06:d5:ed:a2:36:a7:
70:8d:0f:89:5c:c9:cb:c4:e7:86:9c:2f:d6:46:1a:
37:29:6a:fc:9b:b7:f8:09:c2:b8:de:61:4e:81:86:
b0:06:48:8f:24:cd:8b:98:09:6a:73:cb:c7:c5:42:
b2:6f:6a:99:8d:da:01:13:29:d6:a4:2a:fb:db:72:
e9:87:4b:c7:1a:ba:78:cd:2b:21:ba:0d:bd:17:ed:
a4:6b:83:b5:79:2b:e9:11:4e:a1:03:77:0b:38:d5:
24:60:32:25:08:da:fa:a5:98:c4:8c:41:45:c3:2d:
94:b2:7a:81:0a:f9:57:c9:2e:bb:41:1c:2e:63:d7:
d8:26:ea:78:34:5c:12:1a:ee:bf:51:ca:c8:1f:a1:
c1:df:c5:8f:f6:1b:dc:29:80:34:51:a9:16:8d:7c:
23:52:aa:34:8c:5f:24:c5:4e:37:c7:69:1f:00:f6:
77:f3:c9:ce:41:73:0c:a8:58:fd:08:fc:17:52:da:
59:e9:30:b4:d1:ab:4e:3a:9c:0a:b1:99:14:37:08:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:55:79:3C:1F:CC:78:EB:EC:3C:7B:4E:9C:00:D6:FE:13:C7:BA
X509v3 Authority Key Identifier:
keyid:60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:29:df:41:89:0b:7c:c8:60:37:25:84:1f:be:de:7d:fb:0a:
66:db:e5:40:e5:31:e8:34:ec:12:4d:61:23:c1:d7:de:8c:11:
4a:39:93:14:b5:ff:4b:12:da:c8:c5:12:f6:c7:7b:46:d7:4a:
53:d2:25:eb:42:11:e5:49:f7:66:65:e0:9a:47:c8:ec:28:a8:
d3:42:60:41:9d:25:93:ec:b7:f5:6d:ac:fe:a2:6f:38:11:0e:
7a:b5:b2:7f:f1:60:4c:b2:ec:0f:ac:19:fe:63:2f:06:4a:cf:
42:c7:b6:c1:91:d6:95:da:d9:32:05:0a:b1:11:8e:88:3e:70:
dd:c0:fa:1d:ab:02:69:f0:0e:1e:b2:c7:f6:3a:0c:5d:c3:bf:
f1:35:d7:21:51:21:27:7d:fb:a9:f8:71:02:de:c8:03:3d:6a:
88:e5:89:99:3d:b6:c2:e0:c5:3c:77:87:86:96:f3:3f:17:2e:
cd:9e:99:b3:3b:fc:11:55:7e:16:1a:42:f4:47:e4:ad:a0:de:
e5:3f:11:f5:0f:6a:77:78:7a:3e:a1:1e:8c:cb:ac:be:3c:17:
99:2e:df:4e:f8:0d:d6:66:ae:59:0f:23:fa:50:33:aa:c4:fb:
78:50:34:f0:2f:95:1e:51:54:f0:9d:55:1d:c0:61:f5:c0:7a:
06:7b:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:41 2025 by rpki-client