Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File: yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier: xDHLzUptbEBrvIVoVNEefzHaWUFcIOAMxm7uVX6ukx4=
Subject key identifier: E9:24:2C:23:B9:13:05:C3:65:48:5D:EA:55:F4:5D:71:4B:0F:F5:BE
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 0198541F9C658ABD00D72FC7F982F7F5C92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number: 059D
Signing time: Tue 29 Jul 2025 03:00:14 +0000
Manifest this update: Tue 29 Jul 2025 03:00:14 +0000
Manifest next update: Wed 30 Jul 2025 03:00:14 +0000
Files and hashes: 1: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: 0FDwotWBHOhed0SHkM/e3GM/sfR0516Y6IAVUMkaSqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:9c:65:8a:bd:00:d7:2f:c7:f9:82:f7:f5:c9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Jul 29 03:00:14 2025 GMT
Not After : Jul 30 03:00:14 2025 GMT
Subject: CN=e9242c23b91305c365485dea55f45d714b0ff5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:d3:ea:fb:f4:7b:72:4d:7c:c6:00:e5:72:
40:ec:2c:a8:cd:d0:74:bd:f6:34:58:05:47:81:f9:
74:a6:7f:ef:86:61:95:9f:c0:8a:35:ff:55:51:ef:
14:8f:bd:8b:e1:e8:db:93:86:92:8a:17:86:6f:40:
af:54:1b:3e:6a:7c:bb:55:08:c1:36:c0:38:bf:1c:
9b:15:36:0a:57:3b:48:ee:4b:09:5c:76:4d:2e:7d:
f6:b8:3d:82:41:e4:1f:76:a5:53:11:4c:ee:f3:81:
54:a7:13:3f:9b:9b:a2:5c:a0:e4:88:47:49:4d:ea:
e7:ed:7b:29:7b:6d:52:73:d8:28:31:13:86:01:7d:
bb:98:ee:cd:1b:92:aa:56:74:8b:77:be:92:49:47:
ba:81:f6:78:5d:46:24:4c:97:82:88:57:bb:a4:31:
1c:a6:b5:8c:83:d3:b9:7e:77:db:e8:ad:56:d6:b2:
6f:a4:53:25:6b:95:9e:7a:05:f3:54:4f:28:90:86:
ac:f2:d7:94:be:8a:2b:ae:f8:39:77:fb:3e:a4:04:
54:e9:da:2f:da:3d:1b:94:f8:29:6e:2d:ad:5a:db:
55:3a:4d:43:0c:25:41:b3:79:72:58:c9:27:2b:ce:
64:1f:a4:ba:e1:cf:a2:df:3e:7c:78:f0:ba:0d:0d:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:2C:23:B9:13:05:C3:65:48:5D:EA:55:F4:5D:71:4B:0F:F5:BE
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f4:79:a0:1b:b6:48:f9:d2:7e:c3:18:89:51:ff:5d:0c:34:
66:df:fb:2e:21:0d:6e:56:e2:c6:55:89:0b:f5:7a:0c:5e:c7:
37:cf:08:02:8e:70:fa:ec:56:e8:e0:7a:24:f1:30:b5:b5:c9:
ed:f9:15:01:df:ba:4a:10:c8:99:a9:56:85:87:51:c6:c8:9d:
98:83:53:07:2a:8a:61:aa:cc:48:93:74:a2:25:f2:23:51:74:
dd:da:a6:4e:9d:dc:59:a3:91:c9:2c:d3:ac:de:62:73:91:59:
d1:80:d5:25:8e:dd:cb:58:9f:01:b3:11:5e:35:97:e5:b8:82:
82:b5:be:f2:f7:86:f8:5e:9d:24:fd:dd:8d:98:dd:7f:f3:43:
1b:b2:7d:36:5c:1e:2c:3a:77:f2:bd:8e:e4:5d:95:14:b2:3b:
1f:6f:41:b4:5b:69:1e:e9:e0:1e:c4:e4:27:38:24:5c:fc:4c:
4f:ca:ca:6d:0c:24:a2:b3:25:3b:32:ac:a3:ce:34:c7:9a:62:
f9:82:4d:0d:e5:f6:7f:53:fa:7c:36:a3:ee:60:2c:05:c6:19:
a4:de:71:2e:a0:b9:07:b0:57:b5:00:7c:e5:c8:8f:89:90:07:
9e:41:05:5a:f3:d0:e7:c6:1e:90:1c:0f:4e:e7:31:13:c6:26:
18:f3:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:50 2025 by rpki-client