Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
File: YLuQsWeR3lqwN3oafrgwds_rINo.mft (raw, json)
Hash identifier: rHbWth4KO4DyQe1DE9cS6yXHpiAP2QSSI34hlnblmSQ=
Subject key identifier: A5:68:E1:46:03:F2:7D:DD:F0:C4:78:38:80:9C:52:2D:25:04:0E:08
Authority key identifier: 60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
Certificate issuer: /CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Certificate serial: 019923A0E6EEA9AE0E86407734ACB6984FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
Manifest number: 1D
Signing time: Sun 07 Sep 2025 10:02:51 +0000
Manifest this update: Sun 07 Sep 2025 10:02:51 +0000
Manifest next update: Mon 08 Sep 2025 10:02:51 +0000
Files and hashes: 1: YLuQsWeR3lqwN3oafrgwds_rINo.crl (hash: jR7UGCaVFLHT4lcab4bZQjVORAFR32MmU3rkdxCJkRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e6:ee:a9:ae:0e:86:40:77:34:ac:b6:98:4f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Validity
Not Before: Sep 7 10:02:51 2025 GMT
Not After : Sep 8 10:02:51 2025 GMT
Subject: CN=a568e14603f27dddf0c47838809c522d25040e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:34:5d:f1:4c:7a:b0:8e:62:54:1a:85:f8:
e5:87:bb:a9:8a:1f:f7:ef:16:ad:f7:4e:93:e7:66:
78:bc:35:59:49:bb:f1:2e:1f:ca:bd:ff:97:82:e9:
3b:c8:74:d1:b2:14:35:93:24:07:22:da:71:fd:38:
29:04:95:93:73:bd:e4:89:b7:21:b9:21:77:2f:6e:
cb:23:78:3e:e3:d9:b8:e9:73:18:1e:3a:fc:96:57:
81:be:3f:0b:bd:ce:22:3b:2e:d3:2c:5c:de:50:47:
7a:bc:61:b1:14:fa:bc:96:87:82:79:49:12:7b:ea:
51:58:4c:31:20:c6:cd:31:cb:23:80:a2:95:db:6e:
d3:3b:cc:43:eb:71:f5:33:4f:10:8c:a4:7c:a1:ca:
55:7f:e6:80:78:17:dc:0e:f3:12:2f:09:7b:75:dd:
11:75:90:c1:a3:7b:4d:a6:da:5c:5a:6c:37:9d:d7:
c0:d5:88:0f:37:3a:ff:b6:8a:58:e4:5e:e8:7e:a7:
29:0b:eb:5f:c6:e3:ab:7f:1b:b4:0f:99:ce:9d:c6:
03:a9:bf:9b:2b:fe:31:fd:52:69:a5:9a:f6:da:70:
36:ea:bc:9e:02:1b:b6:ed:3b:04:64:1e:be:fe:02:
61:78:c8:ba:f5:b6:bc:2a:c6:b7:92:fb:cc:60:08:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:E1:46:03:F2:7D:DD:F0:C4:78:38:80:9C:52:2D:25:04:0E:08
X509v3 Authority Key Identifier:
keyid:60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:0e:07:6f:c3:c3:76:19:25:69:f4:70:95:16:62:3b:35:
08:6e:c0:0d:ba:86:2b:a3:b5:02:87:9d:d7:27:cd:d5:de:81:
91:50:87:0c:ca:fd:8c:07:e5:2b:0d:24:8f:31:eb:64:c2:c5:
55:07:a0:39:b5:86:44:c8:c1:bf:14:4b:49:f4:8a:e3:aa:c8:
cb:56:d7:a3:00:45:54:db:87:73:7d:ac:ad:c8:1a:0f:63:a1:
fa:05:35:3d:3a:a2:40:1d:4b:54:2b:d3:0d:1b:47:ba:4e:07:
c9:a2:17:f5:5e:fc:3b:f7:d6:a4:07:8f:4b:15:0c:96:9c:53:
9e:a3:d5:fa:de:87:ab:f6:fb:ab:0f:76:26:e0:7a:73:9c:af:
62:ae:6f:c5:27:de:85:b3:88:0d:e4:05:b8:44:07:95:04:99:
e8:8f:98:d9:31:ff:b8:95:34:ec:24:21:a0:56:bd:4e:dd:6a:
34:69:78:e2:d0:19:30:96:e3:13:da:4a:50:e7:d9:32:28:60:
a5:5b:89:d9:79:d5:77:ed:a1:ea:3b:8d:2d:e4:4e:60:80:2c:
0e:ae:34:af:c7:9d:74:73:bb:73:f2:ec:2e:4c:35:b8:eb:02:
70:0c:d3:12:9a:90:00:ae:c5:7e:ad:d2:a5:1d:53:0e:f8:2e:
fe:a0:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:39 2025 by rpki-client