
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
File: Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json)
Hash identifier: UX8eVMOVQft+x/hr5xCpXg/guvidIM4z58h0smzso34=
Subject key identifier: 5D:51:79:B8:32:48:AB:74:12:41:2D:EF:A0:FC:F7:65:F1:E3:EB:FB
Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Certificate issuer: /CN=638cc407ceff57b13b49455f30c20b761c7912b5
Certificate serial: 019922FA1CDFC0692DAB55B5100F47FA98B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
Manifest number: 0133
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: 81kON/5oNAb66X0nc2NFmq/dkRhZLid3c7rgS4je8Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1c:df:c0:69:2d:ab:55:b5:10:0f:47:fa:98:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=5d5179b83248ab7412412defa0fcf765f1e3ebfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:ba:94:15:37:84:cf:76:18:b6:7a:d3:7d:
19:50:4f:49:9b:57:da:a0:6e:44:45:aa:51:45:dd:
e5:46:9e:6c:15:ce:24:b7:16:80:88:37:6d:f9:11:
61:a0:8e:a6:f1:81:d5:ff:e2:d9:be:98:04:6d:9f:
2b:89:f7:b3:a8:24:40:f8:a9:68:b8:ee:ca:69:54:
67:69:cb:ff:9f:8e:ca:55:3a:d5:66:a8:50:68:27:
b1:25:c0:0f:a9:53:71:63:f5:11:f3:2f:fd:0d:44:
90:25:22:85:79:3d:e6:98:82:59:78:bd:60:d4:2f:
22:e4:05:35:bc:f1:c0:ac:76:14:d8:bc:fd:d9:da:
48:8d:de:cb:81:26:c5:80:8d:45:ce:41:01:ea:83:
91:3d:45:ca:f7:bb:ab:8d:97:dc:a1:53:92:19:d6:
f3:f2:3b:70:96:f0:46:30:42:b2:72:e0:6b:c5:ef:
e4:74:d1:70:38:c6:2c:b0:e0:fe:7f:c6:2c:46:39:
4b:4e:4e:3c:c6:c5:7d:8f:d9:16:f0:44:f5:24:0c:
b5:7f:16:b3:5c:c1:2c:22:21:ea:43:53:be:93:b3:
e0:c8:40:ed:ee:63:fb:8f:c0:14:fa:20:e8:cc:8e:
7f:eb:76:d3:84:24:7a:c2:35:0b:76:bc:25:bf:84:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:79:B8:32:48:AB:74:12:41:2D:EF:A0:FC:F7:65:F1:E3:EB:FB
X509v3 Authority Key Identifier:
keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:73:4d:d9:f0:25:10:22:70:9f:b9:44:5d:1f:45:07:96:
cc:4a:79:e1:d6:34:05:85:de:bf:31:7f:78:17:cf:3b:b7:1f:
f3:6d:62:83:9a:53:b1:a2:96:b8:06:74:b2:b8:e7:a1:68:ff:
7c:5c:ee:49:23:fe:de:f5:d7:b5:77:b6:fb:c4:24:a7:f0:ae:
70:7e:5c:24:51:a4:59:b4:86:53:05:a3:a8:cd:e1:a1:80:ce:
e6:4d:e5:91:a9:6b:f1:bd:b3:19:a3:3d:d9:a3:9d:3e:c9:77:
b4:98:13:67:e4:a1:d8:00:5a:f0:bb:5b:00:a4:b4:40:28:6b:
ea:66:cf:60:b2:dd:47:12:f0:f4:eb:cd:dc:42:71:6f:b1:fe:
41:18:31:0e:87:56:71:62:b7:1f:fa:27:70:dc:d8:92:3c:70:
00:2e:7d:32:e8:b4:e2:96:b4:18:0c:60:57:c9:25:7c:0f:bc:
c8:05:c8:60:b2:93:6a:22:90:34:94:54:ba:e5:88:e0:26:a8:
c1:3b:c1:96:3b:27:c2:3d:23:54:04:a5:ff:f0:a6:fd:c2:a9:
07:ac:fb:3f:77:c4:26:11:75:58:ed:4a:8e:1e:df:74:58:40:
a6:9c:69:8a:3a:c2:8c:c0:3d:8f:63:ad:21:39:31:09:06:c3:
8b:d2:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:31 2025 by rpki-client