Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: tQ9Jt9SPuJFH/h/HunF3eERAr/eDv01JUYbBGb2funk=
Subject key identifier: 6E:48:83:80:2B:EA:80:6F:04:37:44:0C:D5:0C:2D:94:07:FB:05:B9
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 019922FAE467DF2E7C15C799BC27752FFDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0DDF
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: ZiyA0VThydn9UbhVEhhNBOwhKp77G580+8NKVNOycQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e4:67:df:2e:7c:15:c7:99:bc:27:75:2f:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=6e4883802bea806f0437440cd50c2d9407fb05b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:e1:df:f3:ad:6a:d3:1f:5f:fa:e7:1b:cb:
32:30:00:cd:a6:25:05:e5:cb:fe:c0:b9:cf:7c:5c:
25:ad:ab:dd:d9:c8:74:28:24:9d:4c:25:3d:bf:66:
d5:c1:0e:e0:2d:b4:99:21:65:7c:f7:fc:b2:4a:de:
49:7f:58:18:b4:3a:fc:ec:31:b8:3f:0c:bf:5a:07:
d9:94:3f:26:af:8c:a6:66:d2:15:99:e8:03:e6:89:
18:f5:73:1e:fb:da:32:ce:3c:8d:55:4e:95:aa:44:
24:a8:a8:43:10:19:cd:03:92:38:ce:1c:a6:ad:cc:
9d:90:90:7f:51:4e:be:b2:60:5f:83:62:c8:97:1b:
e6:4d:00:a9:98:ce:16:fb:9b:bc:a8:eb:6a:88:37:
11:72:a7:56:76:df:8d:6a:40:a3:8d:cd:a6:2c:12:
d0:0a:6e:4a:55:15:b1:fc:e8:8b:b8:90:8b:11:3d:
37:0d:d4:86:1f:c6:45:a5:44:ce:c2:21:e1:b3:86:
33:7f:b2:19:a3:b7:df:cc:b4:44:29:67:91:de:44:
db:6e:1a:e0:d8:31:48:01:8c:d9:d7:4a:31:6f:f2:
39:86:59:6d:96:51:df:8b:6d:05:9d:78:54:85:6a:
5b:ac:71:66:59:51:f3:05:cb:7b:b6:ea:53:4a:e4:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:83:80:2B:EA:80:6F:04:37:44:0C:D5:0C:2D:94:07:FB:05:B9
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b2:b8:e7:05:25:fa:1d:b2:42:9f:19:5c:d8:ab:37:69:0b:
de:f1:3c:73:07:ea:52:7d:7e:d6:9a:92:5b:18:a5:69:ff:13:
2b:22:73:3d:db:ab:19:8b:7c:9e:91:b1:21:ba:63:03:50:53:
c7:5f:66:a4:04:aa:b2:c5:5b:a7:34:c9:0c:30:1b:3f:e5:18:
2d:bb:e6:6c:ed:0b:a3:68:2b:6c:c6:df:b2:7e:c6:75:ad:32:
a4:9d:ca:d7:b4:1f:ff:3d:d5:71:33:a3:a2:07:da:39:7f:d0:
82:5a:9c:85:27:27:a7:37:9e:b7:4f:87:71:fd:42:ef:fa:6a:
1f:06:03:45:07:01:97:fa:d6:f7:dd:23:b9:4d:20:8d:1a:af:
bc:3e:15:47:13:4a:6b:a9:3e:84:be:55:27:83:48:1c:90:63:
35:7e:88:10:23:99:93:b4:17:e3:c5:67:0b:04:76:f8:9b:be:
0a:b6:00:94:a1:ba:58:4b:eb:c2:ab:8a:02:e7:82:b0:54:8f:
b8:1a:00:be:98:7f:eb:d6:81:b0:36:d2:cd:72:58:56:7e:10:
bb:e7:d3:82:01:66:20:48:41:a2:9b:50:36:05:05:e5:00:3c:
72:f6:aa:72:cf:98:d0:c5:c8:ea:75:1d:d5:5d:72:46:11:72:
64:72:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:21 2025 by rpki-client