Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: EzwBbpDUsoJtR3krnXiSKbLC2ZEGMUSFpZMP6xsIXfY=
Subject key identifier: 72:5E:0A:A4:92:E0:19:51:77:DB:56:DF:FA:46:17:3C:15:7E:DE:51
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 0199228CF68BECBD8723C030F50DD6356A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 069B
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: EO3g0URhb/lCjzhwUg5oEd37EjpkVDzR6CvEZBV82cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f6:8b:ec:bd:87:23:c0:30:f5:0d:d6:35:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=725e0aa492e0195177db56dffa46173c157ede51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:45:bc:4c:a8:f4:3a:d9:03:1b:80:9c:b9:
12:b9:b8:02:b5:00:6d:8d:4e:56:f6:f3:7c:5f:c9:
91:09:e4:98:56:2b:dd:fb:3c:2f:ce:25:bc:81:c6:
9d:76:d2:15:d6:ac:1b:b6:10:4c:fe:42:0c:13:db:
84:34:83:68:b4:78:3a:5f:48:d8:05:b0:c5:f6:a0:
a2:e6:49:ef:1f:fa:c7:b2:c2:2b:c0:f7:ca:79:ed:
8d:ac:51:0a:08:46:d9:f8:f8:6c:ed:84:83:32:d2:
3f:7a:52:58:70:f8:5b:78:f9:26:a1:56:1f:50:b5:
a0:98:16:6b:f2:ad:16:82:90:75:2d:15:6f:5b:3c:
44:6f:97:4e:d3:8f:ff:73:f0:32:1c:47:9f:33:d0:
46:c4:20:52:b8:68:55:da:cf:3b:bb:e1:e0:e5:65:
2d:ef:9b:0e:d2:3e:3e:58:a8:5f:cb:17:c5:5e:42:
c3:75:f4:c5:1f:0c:b5:ec:d5:bc:70:5d:4a:23:86:
c4:97:c7:64:0a:05:57:9d:55:71:e6:63:f1:da:c7:
32:62:65:2b:02:ab:d0:56:74:2a:14:7e:5a:14:7a:
b4:8a:b4:ad:a7:51:13:39:50:90:13:72:e7:ed:45:
b5:f6:9f:88:9b:bd:bd:a5:a9:ac:19:57:51:02:ef:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:0A:A4:92:E0:19:51:77:DB:56:DF:FA:46:17:3C:15:7E:DE:51
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:13:38:87:1e:a3:ad:cb:b7:dc:89:18:bd:3a:b5:f3:ba:c5:
f4:eb:c3:be:8e:f6:87:c5:12:ac:b6:e2:0a:12:62:29:06:de:
92:15:d2:67:97:2a:31:f3:f3:9b:01:c5:f9:4a:7f:27:bd:ed:
37:93:53:9f:19:8d:0f:a5:c0:24:c5:c6:d9:7f:93:27:c6:4d:
b8:1e:59:10:b5:31:5b:c5:be:be:10:90:da:72:ec:3b:28:12:
a1:df:d7:e1:4f:f9:01:92:b4:f8:93:84:8a:07:37:cc:39:f1:
1c:9d:48:23:ec:5b:b2:18:b5:51:7c:99:37:60:f7:b1:03:46:
eb:ac:8f:3d:91:e7:87:3d:c7:de:f4:8a:00:dc:52:b2:95:cd:
d2:d1:33:3c:c4:01:76:d0:a9:02:3e:a4:92:1b:aa:dc:ab:07:
e6:05:1a:27:db:a3:22:ec:a4:51:53:e4:ed:ae:7c:68:4c:75:
20:d9:3c:27:62:32:35:f7:59:d0:b4:b9:d2:c9:92:08:99:62:
13:70:44:b1:c8:43:b0:d4:2b:2d:35:27:20:68:eb:33:d5:00:
a5:8b:3a:e3:82:05:65:9c:c0:b2:f9:8d:79:20:3b:40:fe:ba:
bb:3e:f0:4c:92:75:f0:1d:d6:24:28:89:27:e8:f7:cf:c9:62:
f7:54:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:58 2025 by rpki-client