Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: 0Lcav9hotYQIjlL/vp9NKKeni7I4M+FfX8qva8n0iVk=
Subject key identifier: 75:B6:8F:35:84:E6:C8:18:33:C2:FE:73:1C:56:21:E3:66:0A:61:CA
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 0199228D02A115D1DEADC6E0616D3E35B3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: C6
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: 9EIcIGciYUosGSx7pAGKefvNTpwHbhcilic97/PW1b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:02:a1:15:d1:de:ad:c6:e0:61:6d:3e:35:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=75b68f3584e6c81833c2fe731c5621e3660a61ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:55:cf:32:42:94:9e:8c:e5:77:5e:ef:e1:
2f:c6:cd:f1:f1:ee:cc:cb:61:08:e7:f6:5b:fe:b5:
8c:2d:f2:9b:d4:e7:9e:b8:a8:f2:6e:ed:22:2c:fa:
c7:93:8d:8e:02:5b:97:e5:ae:39:2a:28:49:25:b2:
2c:b7:ba:0e:32:d9:4c:85:29:39:6c:e4:dc:fb:37:
09:30:94:02:2f:59:d0:83:23:ab:5b:16:e3:f3:37:
95:d7:1f:09:9c:d4:db:02:33:0a:1a:c9:07:76:cc:
ee:ab:2d:0c:7b:04:a0:4d:13:f3:f9:64:0e:de:9a:
4e:11:ef:a9:7f:4a:1a:93:bc:4b:36:c8:85:63:4f:
06:76:32:c7:ca:59:50:e2:83:f3:ab:f8:66:56:1c:
40:06:50:a3:50:f1:09:9b:1b:32:f5:01:54:80:09:
37:b7:b5:e8:cd:00:82:21:a0:fd:ee:6f:ea:75:c5:
b3:2d:84:3c:96:26:f2:9d:9a:1a:0a:0f:79:14:08:
b0:c1:ee:2e:10:01:e2:89:8b:25:88:3c:4a:c1:ab:
00:74:b9:94:8a:25:03:09:85:72:05:ab:ca:87:18:
d7:2c:f3:ce:9c:73:14:99:1e:de:88:63:72:cf:84:
de:04:9f:ca:8c:75:e5:fd:31:e6:4d:0f:7c:3c:45:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B6:8F:35:84:E6:C8:18:33:C2:FE:73:1C:56:21:E3:66:0A:61:CA
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ce:20:d2:10:91:a8:df:80:76:3a:8e:b7:33:21:ed:12:b3:
84:45:06:21:eb:4d:8e:41:eb:1e:22:4b:5e:44:ae:23:3d:12:
ef:01:4a:02:3b:f3:9c:4a:fd:42:82:37:de:cd:63:12:86:2f:
00:d8:6f:70:3c:a9:52:e0:11:05:fd:bb:30:7a:49:0c:03:70:
43:eb:0b:29:f9:60:14:20:7d:a1:11:3d:0c:02:c4:12:29:db:
25:3e:93:e0:2a:0b:c8:7e:3e:10:13:aa:4e:73:0c:81:a2:fd:
c2:cb:c7:8a:2b:cb:71:cc:bd:99:a1:5b:9d:45:13:c1:02:05:
b0:18:fa:76:c3:32:6a:dc:a0:88:7b:f3:3e:ca:9e:a4:fe:3d:
5b:9d:c2:b5:d8:8e:3f:11:2b:af:e6:ee:cc:00:9a:4f:d9:14:
13:f2:6f:53:94:04:12:cf:06:8d:48:df:a2:01:82:06:46:2b:
5d:aa:86:c9:36:39:66:e7:aa:ca:04:4a:7e:47:4f:cc:b8:b6:
4b:36:d1:4b:66:fd:c2:e5:72:37:83:57:fd:c2:62:ee:e5:97:
87:54:a9:e1:b0:46:95:f4:44:c4:36:72:e8:2e:b9:93:b2:4a:
47:97:eb:22:f6:f2:ce:78:fc:b0:02:c4:8d:22:bc:19:2a:79:
26:b2:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:42 2025 by rpki-client