Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: Cn98mbkBUb0ebfUsto9oK1qshXaxtQvGqc2cfgXUovw=
Subject key identifier: 25:AA:42:F6:0F:69:BE:F5:9E:42:66:96:37:CB:7F:D2:A3:A2:3E:27
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 01992255D3427FBC16E9485139C7D8AF0874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 0FF0
Signing time: Sun 07 Sep 2025 04:01:13 +0000
Manifest this update: Sun 07 Sep 2025 04:01:13 +0000
Manifest next update: Mon 08 Sep 2025 04:01:13 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: d/pLo0VvChy0s4JKFReqquN3EWozcp9wDOCyx+byfj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d3:42:7f:bc:16:e9:48:51:39:c7:d8:af:08:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Sep 7 04:01:13 2025 GMT
Not After : Sep 8 04:01:13 2025 GMT
Subject: CN=25aa42f60f69bef59e42669637cb7fd2a3a23e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:a9:af:b4:8f:8b:ef:a2:b0:fd:2d:81:ff:
ec:c0:fe:37:4e:e7:a8:4b:0a:5e:7d:e3:f1:ed:73:
ee:18:bd:83:e5:31:d0:e7:18:68:73:82:38:16:c6:
0c:17:34:bf:a3:9c:9c:0e:37:42:4a:00:21:81:0e:
f7:5b:36:9a:c9:52:39:92:5d:9b:4a:8b:b7:f9:9e:
33:f3:62:6e:03:4b:5e:dd:d5:3a:aa:f0:c9:24:ca:
f8:72:43:f2:26:d4:84:e8:06:b9:67:11:ac:20:3e:
fb:c4:cd:b0:64:78:ea:94:06:79:b7:ef:f2:00:13:
94:d3:fc:81:8a:ac:4b:a0:47:b7:73:ce:86:35:b7:
97:fc:3a:c0:ef:2f:ce:42:7f:39:4b:a3:30:3e:9f:
6a:0d:06:ba:c3:8b:87:3b:b9:69:80:2c:b1:4b:5f:
ea:b4:51:96:97:7d:a4:2b:c4:9d:cd:c2:dc:74:51:
b6:ce:d0:85:87:df:95:94:31:1d:0f:b8:7c:41:65:
2e:ed:8b:b9:ea:6c:78:66:72:e3:f5:fb:85:10:82:
5e:ee:21:6d:36:f7:59:f3:50:e8:30:37:b3:2b:fb:
3f:80:bd:c3:85:17:3c:42:d6:8d:cb:a3:fd:94:27:
f6:9d:b2:f4:c8:56:cb:67:20:2c:fc:e9:70:da:dc:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AA:42:F6:0F:69:BE:F5:9E:42:66:96:37:CB:7F:D2:A3:A2:3E:27
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:27:33:89:a5:36:55:b1:be:d3:48:02:22:b3:b4:6a:5b:93:
2b:08:ef:c7:5e:c2:24:94:8e:b1:df:63:58:33:ca:7f:2f:5b:
8d:b6:8c:71:ad:66:13:9b:8e:db:19:8b:d0:d1:31:e2:d4:3e:
64:e6:8e:d9:7b:36:fc:94:c3:0b:fe:fd:c2:91:75:7a:74:13:
e5:32:9e:fe:5b:2b:6d:88:e2:73:e0:d1:88:d7:7e:de:f1:f1:
ac:43:b1:13:e3:6d:f6:f6:98:48:55:c9:50:fb:c0:ae:20:bf:
50:7c:ab:c5:62:33:88:c1:5f:f5:1c:ff:2a:f3:ce:5a:ee:8b:
34:06:a8:3e:b2:2c:d4:da:d7:e5:e2:11:39:6c:b3:0d:e9:b7:
d3:2f:ea:06:14:29:7e:6b:d6:f1:de:d4:b6:c2:24:8e:11:ef:
c2:e7:25:23:7e:30:8a:88:5c:fe:59:05:cf:94:ce:ba:f3:d4:
6a:c1:84:dd:ed:5b:1a:27:7b:39:53:40:eb:a1:a1:e4:bc:fe:
f2:b0:50:c8:fa:ed:d7:d1:af:39:98:e5:07:c0:d9:85:5e:9a:
4f:3a:c7:05:fb:b8:7a:1b:ac:3e:3a:e8:94:6a:7f:e5:61:af:
5b:2d:8e:17:59:71:db:c0:53:83:b8:cc:b5:5b:97:d1:40:1e:
10:06:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:16 2025 by rpki-client