Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
File: YxB3zMSCuRtFmfUslKiJABOSSf8.mft (raw, json)
Hash identifier: UjG9ffnXc7TkVn6iFAhTV/EiFZGVJuzBzue/g8PKCj8=
Subject key identifier: 93:29:A2:A0:3F:C2:51:A7:8B:72:21:AA:F1:FB:3E:B1:8C:EE:5F:9D
Authority key identifier: 63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
Certificate issuer: /CN=631077ccc482b91b4599f52c94a88900139249ff
Certificate serial: 0199228C67ABCC665ABD01AC3C640F71DC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
Manifest number: EA
Signing time: Sun 07 Sep 2025 05:00:50 +0000
Manifest this update: Sun 07 Sep 2025 05:00:50 +0000
Manifest next update: Mon 08 Sep 2025 05:00:50 +0000
Files and hashes: 1: YxB3zMSCuRtFmfUslKiJABOSSf8.crl (hash: tjbU/C3wPXlsWWis0lpV5ykANi/YdcM8g76rtRo2B4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:67:ab:cc:66:5a:bd:01:ac:3c:64:0f:71:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631077ccc482b91b4599f52c94a88900139249ff
Validity
Not Before: Sep 7 05:00:50 2025 GMT
Not After : Sep 8 05:00:50 2025 GMT
Subject: CN=9329a2a03fc251a78b7221aaf1fb3eb18cee5f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:19:db:df:20:f9:22:3f:f2:e3:d6:6f:49:
03:47:11:89:4e:26:69:d3:9b:f8:3e:62:64:d6:f6:
72:d1:92:26:a1:76:5c:95:ff:19:53:2e:fb:b3:29:
7d:1f:94:ff:77:dd:4a:b0:7d:ed:9c:ac:53:c0:54:
e2:7c:d3:e7:66:71:fb:fd:a7:0b:6b:03:71:cc:eb:
43:16:13:9e:d1:43:3a:ce:46:a5:64:6a:7b:c1:51:
76:90:f7:9d:9a:a6:d3:40:c0:28:c4:77:f1:4c:95:
e6:36:83:87:7c:f5:ee:93:19:35:2c:33:fd:bf:bd:
bf:eb:07:f2:08:25:ba:8b:e9:ed:f9:dc:d9:ce:ba:
a2:a3:59:b8:e0:21:80:3b:35:29:13:40:9d:ac:0c:
cf:39:7f:c6:65:0f:ea:1d:9b:a2:05:7b:af:b3:54:
79:ba:36:11:16:fc:3c:b4:80:fc:bf:5b:6f:d4:47:
fd:40:35:85:ef:bb:61:6b:a8:8d:20:c3:88:59:b4:
29:91:d2:49:fd:df:60:e5:a5:4d:82:4c:bb:7c:21:
49:99:d6:0e:a5:ce:12:99:f1:51:53:d8:af:09:6b:
ec:cd:7d:1f:bf:d6:19:14:52:fc:a0:58:1d:55:99:
11:dd:ae:3e:d4:6e:5e:e2:16:bc:1e:b0:bc:a4:cd:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:A2:A0:3F:C2:51:A7:8B:72:21:AA:F1:FB:3E:B1:8C:EE:5F:9D
X509v3 Authority Key Identifier:
keyid:63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e7:09:83:f7:c5:10:ea:6a:bf:42:4e:4f:7c:ec:dd:1e:c3:
59:d8:83:40:48:7c:1c:14:ea:69:c7:3f:a9:99:46:83:34:c0:
d8:a9:07:20:48:ea:6f:a6:b5:11:06:9d:81:b5:84:6a:26:24:
1a:18:a1:90:39:79:42:35:1b:30:ff:2c:53:5d:26:09:56:75:
57:0f:ed:4c:97:09:cf:ee:18:a3:ad:8b:d3:d2:9d:7b:76:9a:
5c:34:2d:3a:14:0a:fe:aa:a0:68:e6:75:c7:d5:c0:f7:b7:91:
2e:22:2b:6e:d4:80:5f:8d:a0:8c:78:45:49:f6:6c:83:74:40:
f4:d4:57:04:d1:98:bb:e4:c9:4f:d9:a2:3c:b4:49:b9:e3:f7:
14:aa:53:73:45:dd:5a:ef:ae:f2:9e:9b:e0:f6:a7:bf:c1:4e:
cc:9b:d3:3e:91:e6:ef:04:e9:c5:69:e3:0a:a1:4d:59:47:94:
68:3b:f4:24:b4:93:96:fa:24:58:a1:de:ec:3b:04:62:6c:88:
f0:20:13:fd:38:e3:2a:13:74:7b:42:fa:d9:ca:52:e8:e0:cd:
cd:57:77:da:22:44:d1:f1:28:13:b1:85:2a:84:cf:90:fc:f8:
46:2b:31:2b:e7:c2:12:e1:0a:e8:ed:db:0d:6e:8f:80:e5:6f:
18:ca:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:35 2025 by rpki-client