Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: SFSkE7fPoyZfmpR3fxUqdJTmfwe4nzn4yeBc8TqcsB0=
Subject key identifier: 93:CB:BE:95:D0:9E:89:B1:52:6F:A0:63:B6:D9:56:F6:00:22:60:3C
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 0199233137648C7E036FF3B05F846E400A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 029D
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: MSIiwP1HcYc9tkSZhOHCdu4s5WX5kNWHSuDIf+WJ9Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:37:64:8c:7e:03:6f:f3:b0:5f:84:6e:40:0a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=93cbbe95d09e89b1526fa063b6d956f60022603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:da:49:bb:29:ab:8d:37:be:f4:71:05:3a:
49:58:23:b6:47:b3:e8:b1:f5:85:f1:8c:bc:f9:b9:
3a:3a:79:c4:2d:d4:bf:81:b6:3a:f0:91:9e:e6:04:
ef:71:8a:18:55:e9:98:02:af:50:38:4d:04:a1:6f:
2a:41:4d:5b:a1:c2:c5:a1:bd:f0:20:be:70:78:26:
5c:14:55:b2:b1:11:9f:dd:d9:af:19:22:2a:e3:bd:
59:29:da:dd:45:f4:83:7d:72:84:2a:f3:d0:b6:02:
8a:b8:5b:08:9b:cc:3d:8c:a5:09:33:7e:95:ee:ce:
5a:bb:13:6d:dd:59:37:ee:61:f8:8e:61:80:64:84:
2f:ae:45:0f:be:b4:f0:a3:ef:e7:4c:8c:16:5f:d1:
d1:fd:97:4f:09:a8:19:1d:17:71:90:bc:09:2d:24:
99:c3:aa:7e:19:1f:8f:ca:18:8e:9c:58:85:d1:3b:
20:6b:89:77:89:59:97:4d:0e:e3:54:b9:a1:a2:8b:
c9:af:09:cd:ec:d2:0b:de:2c:16:00:79:13:3d:40:
af:7f:fd:cf:0e:85:97:41:73:4c:40:54:d0:21:f5:
1c:a4:48:38:ea:2b:81:09:64:bd:6c:90:c4:00:93:
e8:e7:de:72:27:ad:d0:55:07:4b:f4:99:87:9b:13:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:BE:95:D0:9E:89:B1:52:6F:A0:63:B6:D9:56:F6:00:22:60:3C
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:73:fe:bc:b2:60:88:4b:62:7d:c2:d9:73:60:93:d1:c1:cc:
70:fe:66:a8:1d:2e:11:c1:20:2b:72:d3:bb:2e:ef:ac:88:08:
48:1d:84:b1:12:44:12:6c:a3:99:71:9b:0c:5d:88:26:36:a7:
d5:a8:0d:88:8f:2a:ec:5a:f0:42:f6:05:d5:30:bc:32:cc:aa:
4d:49:ba:6a:0a:8d:41:eb:d1:b5:eb:5e:38:d3:d5:3a:d4:3d:
64:00:6a:78:f3:de:91:24:d2:87:b5:58:41:a6:32:da:a8:bd:
b2:1d:d7:84:69:f8:99:60:bf:ef:72:d0:78:93:1f:14:97:1e:
02:00:0a:61:16:61:91:b9:de:67:a3:0b:94:4d:81:02:e9:6d:
c5:dd:e0:e1:00:56:37:4b:7c:a9:fe:12:a6:ae:1c:0e:a9:b6:
1d:70:c7:8c:58:ca:33:1a:1e:b7:50:86:f1:23:bf:7b:8f:f5:
7e:62:16:a4:50:32:74:1e:d9:3a:c3:67:48:a8:c3:d5:2e:c6:
b4:26:2b:57:f9:76:97:97:18:94:c2:83:c8:50:5a:1d:64:28:
fd:8d:4e:3b:07:ea:c6:00:0f:3f:26:f2:ab:3c:44:3c:d9:d2:
eb:bc:4a:a3:ea:f3:c5:60:82:48:4e:48:34:2f:e5:b4:4e:8b:
a3:f1:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:43 2025 by rpki-client