Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: lv1Lgp6h7F1yr1TOlXdQ6sc7WcUBfFyZ5SlmpzgD+t8=
Subject key identifier: 2D:7C:84:20:86:58:18:38:55:26:37:D2:4F:11:10:9E:B7:66:B6:6C
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 01984E1D9241C8C9A711DBE1ABF28AABC6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0A6D
Signing time: Sun 27 Jul 2025 23:00:17 +0000
Manifest this update: Sun 27 Jul 2025 23:00:17 +0000
Manifest next update: Mon 28 Jul 2025 23:00:17 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: YJf7OEKv0fVxXV7fvojX8XfNrcwq39dorvGBPn/DeLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1d:92:41:c8:c9:a7:11:db:e1:ab:f2:8a:ab:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Jul 27 23:00:17 2025 GMT
Not After : Jul 28 23:00:17 2025 GMT
Subject: CN=2d7c842086581838552637d24f11109eb766b66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:b8:ed:dc:15:60:7a:43:65:78:bd:58:5e:
1e:98:c5:4c:77:ba:36:73:6f:2f:cf:ad:5c:6f:dc:
7f:21:71:ed:63:69:d1:f4:a8:bb:73:d3:73:e2:9b:
3a:47:81:18:a4:e7:e0:cc:9a:d4:5b:e1:e8:e4:87:
39:96:25:7d:15:db:b8:ca:e8:6c:af:7c:01:e0:29:
27:d0:43:bc:26:e5:38:db:15:34:59:49:78:53:39:
68:0d:5b:7a:db:22:11:43:89:2d:b0:2d:d3:06:c1:
93:5b:0d:a2:a3:2c:62:fb:ad:61:be:42:d6:3d:8f:
bd:c2:60:7a:5f:ef:d0:e1:fb:f8:be:ef:2b:fd:54:
0a:47:f9:64:b0:ea:f1:a7:d8:ed:90:09:89:52:c1:
57:31:10:b8:fd:d1:18:e1:06:74:e7:8a:4e:c7:25:
16:a9:5a:a9:25:46:ea:b7:3a:d6:f6:06:55:89:96:
4f:bb:26:65:94:71:3d:57:75:f8:25:25:75:27:8c:
97:23:2e:0b:50:c6:36:06:a1:fd:22:dc:f7:89:d2:
ba:26:76:97:fd:a0:c4:82:e4:ba:5d:16:d0:b3:13:
5c:ec:d7:a6:e0:ad:b3:18:80:c3:5f:7d:2f:82:91:
0f:72:ba:3b:27:68:15:92:f3:3f:8d:99:32:84:7d:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7C:84:20:86:58:18:38:55:26:37:D2:4F:11:10:9E:B7:66:B6:6C
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3c:ca:26:92:2d:e1:46:95:10:1b:5e:91:b1:21:c0:86:a4:
c2:9f:04:be:8e:74:49:7e:2e:25:a3:4b:58:b2:7e:fc:98:c9:
15:a3:9e:df:9c:ca:ba:4f:67:ba:c3:b1:14:61:43:50:1f:e7:
75:0f:6f:6e:d9:39:89:a3:f0:0c:fb:fa:9e:fe:7d:db:71:89:
e0:68:09:09:1f:ed:d9:e8:c4:12:14:8c:04:c1:ea:77:34:19:
15:aa:a2:3c:74:3e:37:a3:e2:7b:4a:1b:2e:8d:fa:27:c4:c0:
d8:16:cc:24:3e:13:48:ae:79:af:9d:d8:9f:0e:ab:b0:ef:12:
00:7d:b9:1c:0d:88:40:f0:1f:cc:a0:92:c7:06:b8:7c:da:97:
44:70:2e:f9:d5:a1:23:09:44:d0:ed:b4:f6:0c:44:31:5c:d9:
89:cb:55:8a:d2:8a:d3:72:fe:7b:d7:64:fd:b4:7d:6e:d8:24:
33:e1:27:8c:f6:89:08:76:69:1d:bc:5a:2a:2f:27:2e:cb:a3:
8e:2a:0d:49:d6:6a:d7:e9:5c:7b:ad:7b:bb:ee:a1:bf:30:b4:
fd:3f:be:23:47:4c:8d:6d:75:19:13:c5:4f:14:38:5a:5f:ca:
77:36:ba:27:b6:bf:fc:5a:bd:a5:c8:1d:f8:ef:ef:bb:cc:db:
09:4c:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:51:57 2025 by rpki-client