Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: NINxICcQWHgaAPVExy/kRuwWXBzRur44SN5jaCKa+nA=
Subject key identifier: C9:9C:14:32:71:7A:99:81:F3:6F:F3:E9:9D:42:75:3F:A8:F9:51:A7
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 019849662CE9821D5C78659C924EEA60A110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 01:01:29 +0000
Manifest this update: Sun 27 Jul 2025 01:01:29 +0000
Manifest next update: Mon 28 Jul 2025 01:01:29 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: UELFjNzooetYu67ac9l5csCOQ4fJXd31YNHrqY1/vZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:2c:e9:82:1d:5c:78:65:9c:92:4e:ea:60:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Jul 27 01:01:29 2025 GMT
Not After : Jul 28 01:01:29 2025 GMT
Subject: CN=c99c1432717a9981f36ff3e99d42753fa8f951a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:a2:bb:58:4c:23:e2:0e:2b:eb:c8:2d:02:
ea:ee:40:13:1b:40:f9:26:79:21:58:33:da:bc:67:
f9:29:88:51:a4:a8:5d:1a:4d:b2:a5:2d:d4:0e:5e:
60:14:3b:2d:2f:78:c4:8a:03:06:4a:ee:0c:85:29:
de:16:c9:63:3d:54:51:31:cd:61:fd:8d:67:51:f1:
b2:ff:72:77:f9:91:72:5f:53:12:aa:ed:b1:52:85:
38:c8:44:1c:2d:1d:20:aa:33:49:01:5c:4c:32:0c:
ae:de:9a:38:0a:42:75:60:09:f0:0b:87:7e:04:0a:
34:e5:3a:ad:8f:ec:a7:e6:06:a3:ed:b6:03:b5:62:
90:0e:87:7c:4e:55:b8:d6:81:a3:e4:10:9a:81:e6:
46:ef:2d:da:cc:62:f3:79:92:17:a1:1f:f0:ec:ae:
b5:ed:0f:22:e3:77:31:d2:a7:83:02:6f:83:dc:a4:
f7:dc:42:ed:9c:fa:60:7b:61:1a:85:b5:2c:91:9c:
9e:97:f8:89:b1:6e:ba:a1:60:b2:88:f9:dd:f7:e0:
f9:6e:58:74:0c:38:07:3b:d9:49:1e:97:48:36:ae:
78:30:68:86:31:6a:9e:9d:a5:c0:90:da:23:d1:50:
0d:ab:c3:ae:6b:3b:80:d7:ed:63:b9:dc:a1:e6:21:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:14:32:71:7A:99:81:F3:6F:F3:E9:9D:42:75:3F:A8:F9:51:A7
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:eb:83:c9:0b:82:79:de:1a:ee:ed:7d:22:d7:d7:fb:2b:d5:
bb:2b:09:7d:2f:38:c9:13:7a:b3:1f:5d:48:64:3e:1d:36:5a:
c8:04:35:7a:06:04:3e:d4:57:fc:cf:30:1e:e7:e7:30:66:7e:
12:13:f0:22:58:95:56:ac:f5:df:0a:f8:fa:6e:bc:72:21:55:
8b:20:c2:25:45:0c:4f:8f:29:70:5c:8e:74:8d:02:67:a4:26:
a0:2d:5d:0a:56:41:64:d3:bc:0e:f7:58:82:05:fb:8d:ca:32:
f0:39:3c:2f:cb:9d:c3:80:36:58:60:77:21:a8:4a:06:ed:28:
40:28:33:2a:9b:c9:07:b3:2d:81:56:17:09:55:52:24:68:e9:
71:bf:59:52:74:25:9e:69:44:ce:e8:fc:4f:01:34:1b:3b:42:
a1:0d:93:a5:1d:d7:ae:1f:db:f4:1d:62:db:2e:28:b2:20:6f:
40:72:c9:fd:88:ba:e7:66:c7:95:31:25:2e:00:cd:d9:40:cd:
35:ca:17:76:f0:23:5e:98:6d:4d:9b:7b:e9:66:31:f8:1f:ae:
9a:b8:d2:20:c3:1d:72:5b:57:b7:ef:56:33:eb:5d:13:ac:87:
0f:30:c9:20:e6:10:ca:25:54:c8:67:3d:d4:f5:64:6e:55:2b:
29:98:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:12 2025 by rpki-client