Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: L79A31KYKwSgWX0Duk0BgUALZLXuyYz8G0QfK1TMecg=
Subject key identifier: 88:97:F7:A3:40:0B:77:91:57:8C:80:1E:E7:3F:F4:97:BF:09:58:28
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 01984B5491B58557A6164F34EE19A8D3CD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 1564
Signing time: Sun 27 Jul 2025 10:01:30 +0000
Manifest this update: Sun 27 Jul 2025 10:01:30 +0000
Manifest next update: Mon 28 Jul 2025 10:01:30 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: MsB6HSRW4SfEZcYwbNlgvNpUWyCLM8L+a9h/kMVXlwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:91:b5:85:57:a6:16:4f:34:ee:19:a8:d3:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: Jul 27 10:01:30 2025 GMT
Not After : Jul 28 10:01:30 2025 GMT
Subject: CN=8897f7a3400b7791578c801ee73ff497bf095828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:34:63:57:44:35:9d:15:b9:3d:54:7a:b5:
a4:ef:63:39:b4:2c:c6:f0:ef:36:f7:b6:13:3b:ab:
b1:3c:4a:fc:f3:fb:f3:6c:3b:82:f7:fe:3b:b1:22:
15:88:08:e5:76:98:fe:49:1b:09:f7:77:bf:48:86:
f6:b4:a1:4a:02:de:09:2d:8a:73:1d:7d:f0:de:23:
cb:bb:70:a0:3b:a3:83:55:13:9e:e4:f6:84:de:0c:
e8:b0:4e:83:e8:da:0d:64:b7:a4:99:7d:b1:1c:fb:
17:15:1e:c0:0a:b3:6e:be:83:83:22:84:bd:16:52:
33:a2:17:ce:29:e1:6d:fd:b2:33:c2:f6:9f:93:7c:
34:89:19:22:96:4f:1f:3b:8a:57:0f:6f:56:6f:a7:
01:c7:9c:a7:7c:1e:a7:9f:00:6f:b1:e8:d8:67:f5:
f9:66:2e:af:27:2d:93:b4:8d:3a:f6:72:5d:76:cf:
e2:68:d8:53:64:31:12:1c:0e:76:29:57:6c:2e:80:
1f:8c:ca:ea:ca:5a:34:a5:b3:5b:cf:fb:6d:83:3b:
80:0f:bb:af:05:e1:b0:ec:5d:17:a3:5b:52:48:93:
7e:6e:b6:13:3d:77:31:96:6a:63:95:57:fd:5b:c4:
e1:a7:7e:14:31:08:9f:46:87:bc:bd:55:d3:b2:8e:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:F7:A3:40:0B:77:91:57:8C:80:1E:E7:3F:F4:97:BF:09:58:28
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6c:cb:f2:7f:54:78:d0:80:7f:e4:53:b0:d9:97:9d:20:c1:
cf:b0:79:5d:d6:fb:83:19:5d:b0:4c:3a:44:bb:be:3c:bf:5d:
08:96:6b:ba:80:c0:72:a6:08:4c:8f:e7:17:a5:6b:e9:1c:de:
c7:c9:70:ba:44:32:f7:ed:6d:a5:35:76:c3:25:6e:6d:7c:54:
7f:87:59:64:89:d0:d2:f7:06:de:c7:94:b8:85:5b:fc:7a:4a:
b7:53:64:3d:25:ed:df:0e:74:ea:d3:95:f4:2c:0f:db:1a:65:
ed:96:9c:7e:12:48:21:04:92:54:94:8b:9d:4f:07:87:76:1f:
73:2d:45:20:74:90:44:15:51:e2:15:7b:4e:a3:7e:91:b4:1c:
07:a2:0c:03:41:2b:f4:d0:06:f0:e7:cf:d1:5d:00:2b:70:0d:
b9:07:8f:0e:9f:a8:cb:c2:4e:48:14:58:7d:35:9c:59:6d:ec:
d1:61:1f:c4:f9:2f:e6:06:f4:2a:ab:65:8a:3e:67:4f:02:45:
9b:f9:f0:1e:9a:04:0d:e6:ab:16:53:c7:d5:8b:96:03:df:1d:
34:2b:55:7f:d9:46:67:0a:6e:0b:51:d5:66:89:2c:40:a1:53:
35:6f:48:85:30:5d:23:b1:76:ec:59:18:0f:e0:4e:55:68:d5:
49:98:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:23 2025 by rpki-client