Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: +uaeifQSZkUBcShQPuvuj38tO4cylLXH8xRti4NBx4o=
Subject key identifier: 6D:BC:F0:AB:1C:37:AC:6E:6A:6D:EF:00:C6:86:A3:64:13:9E:0B:75
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019922FAD9734265489412E930B077CB7CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 0E15
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: otaFLyiBsI+LraWcDxJrEodzKlvSeDqguU8TWYfpBNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d9:73:42:65:48:94:12:e9:30:b0:77:cb:7c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=6dbcf0ab1c37ac6e6a6def00c686a364139e0b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:79:e4:4e:4c:a8:18:f8:bc:78:76:18:ff:
63:27:40:e0:8c:fa:23:ce:fd:b7:f6:c8:34:f7:81:
66:ae:54:83:d5:b2:16:c7:14:18:49:2c:4f:63:2f:
3c:5d:d7:9c:cc:93:89:bc:38:88:d2:d2:0f:52:13:
b6:97:b6:df:d4:bd:9c:59:d8:10:f6:94:e4:99:2d:
61:9d:cd:bf:77:65:28:66:d3:0d:d3:90:fc:03:73:
3e:9d:f4:01:ba:d8:c0:ec:1c:78:b6:a0:c5:58:7e:
b7:ba:ca:c0:d1:2f:ee:e9:a5:72:14:da:7c:5c:a9:
6f:b8:9c:c6:91:56:9e:da:9b:d9:7d:2f:8e:dd:b0:
10:4b:c3:e8:80:15:1e:58:68:2d:09:68:3d:fa:6b:
e4:29:5f:94:dc:6b:c0:c5:46:05:5a:84:78:f4:eb:
48:3a:f8:90:46:9e:8b:f1:f2:d3:bb:ef:13:18:4f:
10:c9:78:f2:74:65:c8:17:c8:a6:15:76:95:41:6a:
28:22:8f:f7:92:8c:60:a1:f0:b0:a5:fc:1e:be:e9:
4f:52:4d:93:25:f5:6e:70:60:ee:3b:4a:d0:c2:f6:
52:72:04:d0:2b:73:38:5b:82:be:42:89:86:88:c1:
46:79:4b:61:c7:99:05:48:a9:8c:4c:d3:f6:5e:17:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:F0:AB:1C:37:AC:6E:6A:6D:EF:00:C6:86:A3:64:13:9E:0B:75
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1a:d2:b4:e4:b7:9c:a2:c2:64:29:5a:28:49:0e:9a:e3:57:
c4:62:37:82:16:ce:4c:94:78:0e:16:63:3a:8a:3e:a1:60:c0:
1d:64:00:64:fc:7e:0b:c9:54:0e:b5:86:96:49:f7:f1:7f:72:
8b:9f:02:da:6b:93:ea:bb:44:6d:a4:d3:78:86:84:24:54:3a:
b5:cb:1e:ab:af:dd:59:7c:08:3c:31:29:1d:d9:e3:14:bc:21:
75:ee:5a:0b:b6:38:1c:69:89:a5:a5:73:a5:67:ec:cd:6f:4d:
ae:31:2e:fc:20:b5:ea:05:fc:b2:cc:f2:c4:87:6f:25:3d:a5:
ad:7f:68:8c:88:65:dc:94:39:21:0d:c9:c2:07:d9:e4:9e:f6:
92:d1:e0:d7:82:e1:ff:e0:01:28:e0:25:8a:a8:4e:ea:0a:87:
a7:de:9e:e5:32:fb:81:58:62:cf:c6:1e:d0:f5:c3:d7:de:3d:
05:b1:8a:94:e5:58:7d:0e:b3:df:7a:5d:7a:55:69:13:7b:52:
9d:76:81:41:81:f4:e2:53:d3:8d:e6:1d:ae:e4:98:24:a3:a3:
d6:91:22:2c:ea:56:5b:7a:c7:e7:53:47:b4:72:7b:e4:3e:b3:
e9:c2:4f:a6:ab:35:49:6c:b7:48:05:f9:49:8e:83:1e:bf:33:
de:a7:2f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:13 2025 by rpki-client