Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier: +FoX2Fn0JxyT7Fi0R14jci6bXc9PXLryTutRoX2FfMQ=
Subject key identifier: 93:EB:C4:C6:CE:49:61:D5:C1:4B:89:95:E9:09:2F:CF:B5:26:E0:92
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial: 0199228D183E8C7722A002AC693DB97FA019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number: 0FD2
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: HcBJrbp1lK13yx4RTr2D/2fgNunkYTxhUlkrS12I2Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:18:3e:8c:77:22:a0:02:ac:69:3d:b9:7f:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=93ebc4c6ce4961d5c14b8995e9092fcfb526e092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:57:92:4b:b1:50:3b:fe:7c:8c:4b:4f:51:
71:9e:70:ed:4a:50:9f:31:d5:27:c3:49:cd:3a:0f:
ac:c3:d3:e6:a3:e8:d3:6f:2d:d6:97:e7:e3:7a:5c:
9f:43:ce:90:49:a9:ad:24:a6:02:57:46:c9:53:95:
29:73:ce:48:62:47:78:82:b6:b5:77:df:0e:93:e6:
9e:c3:4a:ee:fd:63:6a:d8:57:0a:4c:13:70:bc:30:
05:c7:1b:97:57:32:cb:49:1d:e5:1a:36:90:a8:b3:
f2:ef:ef:aa:21:8e:10:69:14:bd:24:95:6e:ec:78:
b4:b8:75:06:74:ec:0a:37:05:71:c9:40:dd:7e:4a:
ec:36:94:44:14:42:6d:b4:4b:f0:a1:1d:57:21:1f:
0e:1c:96:dc:14:85:23:9d:37:02:64:c4:cd:49:e5:
f5:cb:d5:dc:fb:34:5a:01:7b:40:c8:a2:b8:dd:11:
45:04:82:dc:66:e4:31:9e:98:ce:e1:09:d9:90:43:
9a:9d:d6:68:c2:ab:e8:10:56:ca:16:5b:c2:2f:9f:
fd:ca:ad:8e:a5:92:bc:d1:9b:69:61:9a:17:57:21:
06:8d:a7:bd:e6:c6:d6:64:96:1d:93:da:b1:b6:50:
66:57:fd:d1:66:ff:a1:6f:39:f7:1c:a9:3e:75:59:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EB:C4:C6:CE:49:61:D5:C1:4B:89:95:E9:09:2F:CF:B5:26:E0:92
X509v3 Authority Key Identifier:
keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:22:a1:38:52:3c:f1:d3:2f:3c:da:24:81:75:40:53:de:a7:
8d:4d:9c:2b:79:ce:f1:53:52:89:52:6c:27:08:b6:2a:8b:1e:
5f:f7:19:b1:2a:5b:3f:46:e2:5f:78:8c:4c:cb:27:62:ba:c6:
8c:14:77:f8:c3:ad:d1:ad:52:97:78:49:0b:98:d6:0a:25:e0:
f7:5f:27:00:46:5e:26:14:c8:41:f8:c2:1c:19:44:db:b3:28:
4d:cd:a6:32:48:39:d5:2f:06:1d:c8:2e:19:14:00:89:7d:eb:
a6:78:10:4f:46:c8:c9:14:15:cf:7c:92:69:54:5f:80:61:c0:
04:c2:76:15:f0:d8:52:7a:99:4f:40:06:52:33:2a:b4:47:96:
82:f7:28:be:a2:cf:fd:da:63:42:e4:34:81:f9:93:0c:bb:2e:
5e:89:ab:2f:f6:b5:84:c4:18:19:c5:dd:cf:b4:23:9d:d3:42:
78:fe:b0:36:4f:d8:ff:3f:54:27:a8:c3:61:0f:33:66:55:4a:
7c:fc:35:88:df:03:aa:e1:19:d4:8b:d2:17:89:04:ee:c9:94:
cb:bd:97:b2:58:c3:10:fc:25:29:e3:75:a6:11:48:1f:f9:01:
7b:67:a7:07:ca:d2:89:02:bd:1f:02:a9:4b:f3:6e:73:ef:a8:
f5:08:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:24 2025 by rpki-client