Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier: eWtH/2CEH8C68mTUfIUxh/ykpazEpS80QRrP/qBiV1g=
Subject key identifier: 14:31:55:66:5D:CE:AD:93:BA:FF:62:E9:D6:FE:48:6E:3A:E1:96:65
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial: 01984AAF21FC772527D6609BDFAF5E011632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number: 121C
Signing time: Sun 27 Jul 2025 07:00:48 +0000
Manifest this update: Sun 27 Jul 2025 07:00:48 +0000
Manifest next update: Mon 28 Jul 2025 07:00:48 +0000
Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: huJBPlyTbCSVLw9FjLQB7G8cEaLAC5w+RYFvUjvd18c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:21:fc:77:25:27:d6:60:9b:df:af:5e:01:16:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Validity
Not Before: Jul 27 07:00:48 2025 GMT
Not After : Jul 28 07:00:48 2025 GMT
Subject: CN=143155665dcead93baff62e9d6fe486e3ae19665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6e:70:2a:53:28:0d:5a:b4:3e:fb:25:a6:72:
a3:ee:ec:29:3a:79:85:4f:b5:10:26:da:61:27:9a:
62:40:fc:d6:8a:94:bf:11:87:74:b0:1a:cb:1e:ff:
be:5f:ad:2c:b4:cf:53:fa:9c:d5:30:ba:ad:5f:7a:
b3:7f:18:a3:0e:e8:a7:b6:94:40:da:45:82:bb:84:
89:93:2c:aa:89:65:bd:d2:a8:77:2f:85:a1:ff:76:
79:48:46:c2:2e:2a:31:80:32:ca:7e:2e:94:4a:b5:
3f:b5:7a:5e:7f:99:51:42:6e:10:f2:ff:6f:53:b8:
16:17:34:2f:21:d3:e2:a5:1b:d0:17:0b:bb:d6:77:
61:2f:ec:26:17:a6:93:e6:e1:a2:ed:b3:dc:18:2b:
77:10:40:ea:cb:cb:c3:24:ee:0e:26:af:49:94:7b:
fa:e6:2d:ae:a2:d1:ed:97:39:0a:5e:16:cc:87:86:
06:0d:ea:b3:3e:ec:ec:23:bc:78:e6:23:31:2a:81:
ba:09:53:c5:92:08:37:5d:6c:b5:8f:cd:c4:96:fd:
81:a1:9f:55:81:c9:90:ba:14:7c:63:fd:1f:6d:8b:
b9:6b:00:5e:8b:51:07:7f:9e:f1:56:a2:b1:02:11:
7a:9e:cb:b7:21:89:c2:33:c7:44:6e:ff:89:e8:61:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:31:55:66:5D:CE:AD:93:BA:FF:62:E9:D6:FE:48:6E:3A:E1:96:65
X509v3 Authority Key Identifier:
keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:5e:58:1a:38:a7:6f:ee:d6:19:c8:a5:fe:6e:63:71:f6:
7f:ee:c5:fd:32:02:7e:be:98:8f:54:f5:d3:8b:cd:eb:fc:09:
33:13:c8:f0:db:a9:80:b5:00:7a:84:f6:51:49:17:bd:77:10:
33:2c:1d:82:f9:7e:cd:5c:57:5d:7d:4f:c3:07:cd:87:9e:19:
77:bd:3a:16:1d:27:6a:71:9b:9d:28:2c:7f:c9:7e:83:4d:ac:
5b:a4:a8:7e:4d:6d:a9:c9:b6:57:21:f6:61:f9:19:f1:58:18:
b4:8b:f5:2e:a5:73:b1:bb:73:b5:86:91:7b:9e:f5:91:ac:4c:
7e:dc:2c:b0:2d:62:15:45:5a:20:38:a6:68:56:41:07:6c:d6:
2c:d6:29:09:2e:bd:84:43:bf:d7:6f:f9:ed:18:4d:b3:95:a0:
29:99:cf:94:91:79:40:eb:d7:69:3d:40:35:03:44:c5:7f:e2:
09:3f:01:b6:9a:6b:52:86:58:c4:a3:5e:3c:e9:08:ff:a6:da:
a3:66:94:41:86:0e:1b:fd:44:e9:4b:7b:0f:97:cb:ae:f5:32:
f8:c7:63:f6:dc:07:e3:8e:1a:b2:f7:2a:43:d1:c5:85:16:b9:
68:15:25:8b:14:a5:24:f5:bf:e7:a2:d5:5b:79:80:9d:60:85:
eb:ce:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:51:55 2025 by rpki-client