Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
File: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft (raw, json)
Hash identifier: yatofEBmF+Kto7F+t60AXdJHoPo9cqANR2tcUjPYeIY=
Subject key identifier: 0A:36:CD:F9:3D:37:8B:50:2A:79:39:C6:6E:23:21:EE:D2:E5:28:B5
Authority key identifier: C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81
Certificate issuer: /CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581
Certificate serial: 0199228C6ED5489E9C571801CE35F3C1CAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
Manifest number: 0E3F
Signing time: Sun 07 Sep 2025 05:00:52 +0000
Manifest this update: Sun 07 Sep 2025 05:00:52 +0000
Manifest next update: Mon 08 Sep 2025 05:00:52 +0000
Files and hashes: 1: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl (hash: lJBA6k+LrlbjHJkPKk//1n62ehvkL7XF8FB+cQ+YDjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6e:d5:48:9e:9c:57:18:01:ce:35:f3:c1:ca:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581
Validity
Not Before: Sep 7 05:00:52 2025 GMT
Not After : Sep 8 05:00:52 2025 GMT
Subject: CN=0a36cdf93d378b502a7939c66e2321eed2e528b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:d0:ce:76:bf:07:ef:27:4c:85:6c:a6:63:
d9:de:c0:c2:61:a9:73:8e:d3:cd:5b:ad:72:9b:3c:
d4:a9:e3:45:4e:2a:8f:c9:13:dd:b0:d6:18:d9:df:
e5:bb:85:bf:97:fe:ee:c2:84:89:59:dd:29:6e:9d:
d7:67:09:e4:4d:87:5c:d5:82:e3:ea:34:45:a7:c3:
b7:95:54:0d:bd:67:10:40:b6:0d:0a:03:b8:76:d2:
88:2b:87:50:3e:bf:00:54:ca:c9:79:f2:cf:80:68:
d2:a9:e5:dd:e6:2a:91:c9:fc:f4:77:b6:87:4b:90:
c3:16:4e:48:55:97:30:82:9e:c4:a9:21:58:f7:ec:
34:e4:3e:5c:92:5b:5c:75:b7:f5:8b:df:76:e1:aa:
46:5f:95:7b:f2:a4:39:f1:04:22:ec:4b:ce:c8:a0:
b9:22:7e:bf:5f:7d:f3:89:d8:74:60:85:13:95:89:
5d:75:02:e2:f4:c3:98:e0:cb:65:a0:fd:44:08:c9:
33:4d:ae:3d:7e:59:e9:d7:a3:d0:b4:b0:69:58:60:
72:d7:ea:dc:fe:97:96:d4:df:4d:ad:b1:a7:f4:95:
d7:ad:9b:90:c0:30:e4:c8:08:62:12:78:e6:84:79:
82:60:42:de:9e:74:59:e7:3b:92:ad:ad:5b:3f:83:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:CD:F9:3D:37:8B:50:2A:79:39:C6:6E:23:21:EE:D2:E5:28:B5
X509v3 Authority Key Identifier:
keyid:C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9a:19:b1:cc:10:9d:9c:02:5f:22:87:cc:3f:fc:53:11:20:
cd:74:8d:bc:1f:85:57:9e:d7:c7:bb:df:55:81:9a:13:d4:b1:
26:c2:8b:e2:66:3e:63:31:63:e4:6c:42:57:af:cb:bf:06:07:
4a:21:36:fd:52:c8:80:bc:cb:8e:15:83:bb:8a:a5:f8:31:ea:
1a:96:47:c4:6a:1c:57:1c:cf:e2:c4:2b:33:d7:4c:70:1a:84:
25:da:8b:64:af:ba:e8:67:ed:83:7c:1a:5c:5b:cf:1f:13:0a:
e1:6a:4b:fb:a2:01:96:03:10:07:8b:f2:5f:80:4a:a6:b4:6b:
d7:a8:74:b4:b2:8c:b4:6a:c5:31:8d:02:9b:3b:90:fa:b8:c8:
a9:9d:9e:1d:24:a3:04:f1:35:0a:a1:56:46:36:50:e0:9d:71:
99:5c:d8:52:6e:ef:cb:f3:9b:c1:6f:9f:50:b0:c8:ff:d1:14:
41:11:75:f2:08:cf:62:be:b7:34:93:ca:ba:ad:b3:ad:60:92:
25:72:8b:60:bc:ce:2f:3f:29:a4:67:95:f2:ac:14:08:90:46:
d0:99:93:9f:de:74:df:af:de:66:39:0c:1a:ec:55:52:6c:34:
c5:c0:de:d2:0c:04:ee:96:36:e4:9f:c4:2b:c4:2b:71:ef:3d:
76:93:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:38 2025 by rpki-client