Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: Uolm31fYm2bUROMZU6yXkgFkzpMZh5hAC9O0PrRXpLE=
Subject key identifier: 66:58:FA:48:C4:BC:5F:40:E7:4A:97:CC:F1:0F:E3:68:4C:68:BF:B3
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 01984966927156BB9E7C8671D2BB2B3E156F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:01:55 +0000
Manifest this update: Sun 27 Jul 2025 01:01:55 +0000
Manifest next update: Mon 28 Jul 2025 01:01:55 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: WfhqDx1XvvKUkOTWO6L9CQsfHK5bAIPr8A5pO3wqCGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:92:71:56:bb:9e:7c:86:71:d2:bb:2b:3e:15:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Jul 27 01:01:55 2025 GMT
Not After : Jul 28 01:01:55 2025 GMT
Subject: CN=6658fa48c4bc5f40e74a97ccf10fe3684c68bfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:58:85:7a:96:cd:0f:41:ae:13:58:c9:2e:
32:b4:e0:b6:e0:27:24:17:f6:57:39:59:7a:c5:af:
eb:4a:7a:78:4a:d1:bf:c6:24:3c:78:c4:a2:8d:4b:
d4:74:36:61:f5:0e:7a:e0:b4:08:c2:4e:d6:ad:a3:
1a:7b:a3:f3:cf:3a:98:c9:42:b9:ca:70:5e:58:e5:
85:46:42:ba:3a:7a:8a:c5:c4:86:e1:b3:31:bd:22:
d1:94:a2:fd:6f:3a:af:2f:48:cb:bd:16:f7:ac:c4:
ce:8d:46:52:fb:05:5a:ef:36:00:24:9a:b8:3a:72:
76:02:9d:7a:86:35:18:94:ea:7e:c8:59:49:00:44:
7a:34:25:2e:28:db:57:c3:09:84:dc:7e:a0:95:14:
60:d1:d7:24:a5:93:09:0b:4e:03:95:bf:37:0b:b2:
2b:db:eb:d5:93:d0:1f:47:52:3b:19:eb:4c:5c:cc:
79:cb:2f:55:67:2e:23:37:d8:b4:14:60:c1:ab:74:
fe:f8:32:e1:c5:9a:f4:b4:f9:d2:42:19:f9:3f:32:
78:1d:c1:cd:2a:f9:f8:a9:7e:2f:74:5b:18:3b:5c:
c4:7e:ec:e8:f2:6a:73:8e:87:b6:eb:cd:50:15:94:
a6:d1:63:93:49:a1:d9:2c:48:c1:2a:84:c2:47:cb:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:58:FA:48:C4:BC:5F:40:E7:4A:97:CC:F1:0F:E3:68:4C:68:BF:B3
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a5:ad:a7:86:9f:e9:7a:b1:e5:92:c5:54:0d:e1:55:6a:48:
c8:22:21:2d:0c:f7:b3:c5:dd:10:95:2c:6a:5e:7a:d7:48:34:
40:e1:2b:78:01:08:5b:5c:91:9e:f3:aa:bd:b3:84:06:2f:f3:
6c:a4:bf:f0:1a:c2:b7:0a:c5:20:ee:d4:00:0b:d0:69:11:36:
eb:c7:a8:cd:7c:e6:88:3a:c8:0a:9d:cd:a7:8b:38:e6:9e:d2:
15:74:59:87:95:29:8b:c6:5e:ec:b9:ca:72:7d:d4:13:56:6c:
03:e6:1d:dc:e3:9d:d6:f0:09:01:45:59:04:e2:57:07:b3:2b:
28:64:69:28:e8:4a:a0:45:19:a3:88:e1:5f:90:6b:cd:b5:7a:
db:5a:6e:89:8c:93:1f:da:42:b3:8f:aa:9d:54:70:90:01:c2:
ed:0e:ea:a6:74:da:4b:fa:0f:8d:ed:84:91:ea:b7:1f:8c:09:
65:45:b5:14:a3:6a:b7:c5:ac:af:44:92:c0:9e:0c:b0:09:ce:
ea:fa:0b:fe:f3:8e:d0:a9:61:c4:91:39:75:84:33:81:e1:bb:
67:95:ab:a6:1e:38:26:c6:2e:d3:06:30:b3:3d:3d:7a:b7:a2:
fd:c1:bc:01:fc:79:98:19:59:e9:41:37:ac:d3:61:4b:36:8f:
eb:1e:00:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:37 2025 by rpki-client