Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File: YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier: /85OSekHipH0ymNWpwaH3s6wcf+PtP+bg3Mv2+2TSRg=
Subject key identifier: 24:63:95:4F:3D:DE:0E:D6:EB:C1:2D:33:84:74:5B:44:DF:9B:A9:33
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer: /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial: 019923A0994DACE9CCA021BDF3835318D4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number: 0A5C
Signing time: Sun 07 Sep 2025 10:02:31 +0000
Manifest this update: Sun 07 Sep 2025 10:02:31 +0000
Manifest next update: Mon 08 Sep 2025 10:02:31 +0000
Files and hashes: 1: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: P+a6Eo+VTVzJ0Ouez0fmOAOa+LiSDpOn1Z/a9P0QECo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:99:4d:ac:e9:cc:a0:21:bd:f3:83:53:18:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
Validity
Not Before: Sep 7 10:02:31 2025 GMT
Not After : Sep 8 10:02:31 2025 GMT
Subject: CN=2463954f3dde0ed6ebc12d3384745b44df9ba933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:16:cf:ad:60:29:cf:7b:63:62:57:c4:15:
11:f7:4c:ed:a5:1c:97:9c:a7:7d:38:58:f1:02:8a:
3d:7f:ee:37:2d:3d:59:49:42:11:ee:8e:82:87:e7:
4b:8b:86:ac:bb:ba:90:2b:c9:e8:75:ab:f1:73:52:
8b:b7:4d:53:00:ca:6d:ba:26:12:bc:d3:2b:dd:6e:
36:12:f0:92:22:ad:fd:b0:ef:e5:cc:10:3c:e4:b4:
c5:e6:cc:e1:ab:9d:f7:b0:76:d1:a4:49:ae:52:c0:
8e:ee:8d:4a:70:8c:7d:8b:2e:1e:47:e3:c2:cf:33:
54:d8:77:c3:49:fc:6d:fa:c0:a2:bd:93:77:39:43:
4c:ce:1e:09:77:97:14:ef:6c:28:16:62:1f:b7:67:
38:4c:4e:a6:3d:f1:c1:8c:3b:6e:40:27:39:0d:40:
e8:11:42:6f:a8:01:c6:4b:8c:9c:9d:c5:e3:9d:0f:
09:a9:86:bb:4c:6c:b2:eb:66:fd:26:10:90:09:55:
92:6f:59:d7:c8:bf:4b:8d:8e:3e:96:23:ab:82:f9:
61:38:77:38:f4:7f:21:c8:01:75:51:d8:34:df:9d:
a1:6b:a8:21:d2:e4:dd:84:fb:5f:6c:78:a5:50:a6:
32:31:40:88:2e:03:00:12:24:65:5e:1a:03:f7:cd:
50:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:95:4F:3D:DE:0E:D6:EB:C1:2D:33:84:74:5B:44:DF:9B:A9:33
X509v3 Authority Key Identifier:
keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:80:c2:7a:cb:8c:05:b5:66:4a:e8:67:66:e4:01:00:d4:
df:ed:72:7e:18:8c:ee:58:3b:df:d6:7a:74:b3:42:75:a0:17:
70:1c:b4:b2:4f:b5:80:9e:f5:48:25:1c:9d:1b:d7:c7:71:a1:
3d:72:f3:70:b5:64:e7:53:5b:6e:1d:66:36:b7:9d:21:3f:a0:
70:fb:61:fc:b1:2e:79:48:44:9d:a3:b8:8f:67:1d:76:87:66:
1c:22:58:6b:d8:dd:f8:c1:86:e7:d2:41:8a:06:13:e0:dd:7b:
d9:4b:f8:39:5d:92:84:b0:90:d0:d6:34:2c:d9:08:6f:da:f4:
8b:9a:4d:6d:d5:77:e3:47:68:3e:40:12:fb:8f:ff:71:ce:94:
87:c5:e5:7f:9d:29:99:b4:ae:91:b6:64:6e:6d:3b:f4:42:fc:
6c:3a:b8:54:d4:f7:88:21:d1:dc:d2:55:be:e7:66:01:25:21:
f2:01:6d:3c:d5:60:b3:85:eb:b6:88:ed:03:64:12:7d:ab:bf:
f9:e1:07:a8:36:e4:29:1e:b4:63:01:0a:2f:0f:52:28:8c:5e:
ca:9a:a0:d0:c0:93:66:8f:51:fd:a1:60:8a:19:e9:3a:d8:fd:
2f:c6:47:76:99:1c:3c:af:47:ed:dd:f9:d6:62:cf:d9:db:06:
8e:1a:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:09 2025 by rpki-client