Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: /+8SLqJJw47nnEgAsjW0dIRrze2zA7E9bfaJi2SLLx0=
Subject key identifier: F4:8D:B3:8E:EC:9D:2C:7A:8D:AD:A6:41:1D:B1:FC:35:70:83:61:30
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 0199239F2706F677C49C03F4A20BA3475010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:00:56 +0000
Manifest this update: Sun 07 Sep 2025 10:00:56 +0000
Manifest next update: Mon 08 Sep 2025 10:00:56 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: UJdNIqeOxsdH+i8Q23bcq5nQ4+mDq1DDk23+SNzam54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:27:06:f6:77:c4:9c:03:f4:a2:0b:a3:47:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: Sep 7 10:00:56 2025 GMT
Not After : Sep 8 10:00:56 2025 GMT
Subject: CN=f48db38eec9d2c7a8dada6411db1fc3570836130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c0:f6:99:04:bd:6c:e8:94:ca:41:cf:12:a6:
af:bb:59:6c:bf:a7:38:9c:9c:b0:9b:42:b5:cc:ee:
d0:ff:97:d1:4f:5a:52:a9:56:50:6e:c5:63:a9:fa:
82:97:f5:ce:8c:20:ff:83:a7:8a:69:a7:af:bf:5b:
1d:0b:5d:5d:bb:96:60:99:42:d7:9b:84:3a:dd:16:
b0:93:67:d9:a5:79:43:17:10:f3:81:5f:bf:8c:93:
6f:b3:30:36:0a:59:0d:24:cd:b6:ba:4b:e1:7a:29:
a2:3e:5c:c8:f8:5d:5a:ac:e0:7b:a2:43:07:0d:04:
a4:56:6d:5d:73:ed:c8:8a:83:c7:8a:28:49:09:61:
11:c1:98:3d:0a:dc:9c:36:24:1e:73:6f:60:62:40:
a6:58:2a:06:9d:13:6f:b4:bc:28:ed:d6:02:8e:9e:
0d:ff:9d:19:33:6d:15:ee:ce:a4:b7:f0:c0:13:1a:
c7:5b:7f:a3:52:c8:66:72:1c:08:06:95:77:af:99:
20:09:d7:65:24:81:08:92:48:35:d6:69:73:13:61:
3a:82:fd:7b:2d:b2:13:42:72:82:13:e6:6c:f6:2f:
db:32:99:b9:93:f9:c5:e0:14:1e:3a:01:15:e8:24:
42:d0:20:82:91:0f:fa:03:d4:88:be:52:d6:8e:fa:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8D:B3:8E:EC:9D:2C:7A:8D:AD:A6:41:1D:B1:FC:35:70:83:61:30
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:15:de:72:29:35:53:60:70:25:12:ec:28:3b:82:ce:3a:aa:
7b:d1:f7:c2:a9:66:fd:ec:a6:1f:93:50:d9:db:f0:50:5a:35:
5e:0b:5c:c5:d7:76:e9:48:5a:09:78:aa:4a:81:40:20:a2:8e:
c4:1a:74:40:b4:98:2e:e3:bf:37:53:79:9b:8f:b5:75:86:f1:
d5:b5:f9:88:79:f3:bb:0b:d8:3d:66:4a:6f:79:8a:a2:09:ed:
6b:b1:5e:1c:34:22:86:d0:62:a9:b9:ef:db:61:26:ef:cf:4a:
8a:07:5d:c7:26:67:1f:fe:ef:f3:69:c5:a2:36:37:aa:62:ba:
a5:9f:09:53:6f:26:e1:55:c0:84:1a:b2:db:d3:49:e5:46:22:
7b:82:ff:30:28:73:dc:fa:44:f2:20:dd:6f:7c:6e:ab:29:7d:
51:24:ca:ab:a3:ba:c3:4f:3e:65:a2:41:a8:e4:35:5e:12:22:
49:57:d3:e9:bd:6d:6d:8b:ad:b2:53:43:99:63:1c:c2:c9:04:
13:df:f3:e4:63:7b:b3:bf:91:1b:39:b4:b9:a1:4e:50:d6:9b:
82:c6:14:90:1a:1f:e0:35:ed:44:c3:24:92:35:da:1a:f3:9b:
51:9a:f2:09:84:80:5b:35:22:48:12:f5:67:9b:f3:2a:71:74:
a7:f5:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:02:58 2025 by rpki-client