Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
File: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft (raw, json)
Hash identifier: TQIgj/sDP4JdFRjwm2Wo4Led0vO5LFdfgiOjICgMHuc=
Subject key identifier: 3F:84:81:D0:36:D8:91:F7:05:C9:32:22:E5:27:FC:8C:B6:38:D1:96
Authority key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
Certificate issuer: /CN=c95998989fdb5a5f932147ad7162c63004e067a4
Certificate serial: 0198E29BE8A53DF0D4D16AAF1A8E20B89C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
Manifest number: 0B33
Signing time: Mon 25 Aug 2025 19:02:04 +0000
Manifest this update: Mon 25 Aug 2025 19:02:04 +0000
Manifest next update: Tue 26 Aug 2025 19:02:04 +0000
Files and hashes: 1: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl (hash: 2OPrDLAK118+6lRYCTRi5rwbE7aWhLiH1xhtJh5/WjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:9b:e8:a5:3d:f0:d4:d1:6a:af:1a:8e:20:b8:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c95998989fdb5a5f932147ad7162c63004e067a4
Validity
Not Before: Aug 25 19:02:04 2025 GMT
Not After : Aug 26 19:02:04 2025 GMT
Subject: CN=3f8481d036d891f705c93222e527fc8cb638d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:bc:fc:1e:67:dc:70:7d:03:61:a1:c8:fc:
9b:3e:44:59:95:af:3d:86:5f:ac:4a:14:de:56:45:
e6:06:41:02:2a:95:b2:e3:bc:2a:b5:0f:d7:84:61:
6c:3b:76:19:38:a2:a5:2e:d1:ec:27:cb:4e:be:bb:
e7:e8:19:86:d6:82:29:2f:61:03:58:81:8b:28:49:
0f:f7:0c:b5:4c:4a:c3:4a:e9:92:4e:6f:b6:e4:6d:
42:77:69:be:3e:4f:d0:29:0e:ab:45:1d:73:9a:f6:
41:0e:64:a2:38:07:d9:be:56:f3:f8:dc:da:40:f5:
e0:53:bb:74:63:c4:9a:3e:c8:02:1c:96:49:2b:98:
5f:2f:1f:f7:4c:3e:63:c7:62:8a:b6:96:3a:d8:94:
08:35:cf:aa:bf:b3:07:5b:39:b1:c7:12:fe:cb:d1:
0f:2a:df:36:64:9e:34:4b:c1:99:a4:1d:11:0d:22:
e9:d2:77:76:c6:15:25:d9:c1:6e:63:fc:de:12:7a:
da:3d:43:72:e0:9f:90:fc:07:84:a0:5b:f7:db:ec:
58:0f:a7:7f:29:b6:50:ac:9f:3a:6c:e0:b6:41:89:
75:32:40:44:af:a1:b6:74:80:a0:be:74:1d:63:58:
d3:8e:dd:b6:4f:3b:a6:91:15:56:c9:db:59:4c:a6:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:81:D0:36:D8:91:F7:05:C9:32:22:E5:27:FC:8C:B6:38:D1:96
X509v3 Authority Key Identifier:
keyid:C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:96:fd:cf:12:a9:62:9c:f3:9f:55:39:76:ec:c1:84:db:
7a:99:28:2e:4a:52:af:cb:f7:f6:d3:da:5e:03:d6:10:4c:9b:
0c:5b:0a:79:d3:59:71:64:f8:7d:7c:fa:2d:dc:cc:f6:e5:31:
5f:d9:fb:01:44:3a:8a:a8:cc:2d:e8:21:9e:7c:53:3b:24:88:
15:6a:17:cb:0a:91:73:7c:c0:9c:4c:c6:72:61:e1:61:58:bb:
81:c7:b1:9e:a3:19:1e:72:f3:e1:77:01:f0:5b:77:68:90:b1:
d9:12:c2:89:07:54:24:81:90:32:27:89:5e:df:37:09:54:4d:
d7:1c:69:c0:d4:c6:74:39:7c:04:7a:24:37:bb:1c:c3:42:ef:
1a:c8:43:f0:5f:ad:cf:c8:8c:6e:32:97:35:fa:5c:d9:30:15:
80:c8:eb:9d:dd:07:7f:fa:af:51:23:9f:fd:9e:97:e4:e1:01:
9f:8b:29:f4:1c:e5:b1:d9:fe:0f:28:ed:f5:89:c1:8f:96:31:
51:71:cc:fa:3f:f4:6b:45:59:9b:07:8d:d7:e6:57:e2:67:5a:
7c:6e:0b:f7:85:dc:f7:0a:d2:e6:76:a6:95:ea:14:73:e4:f9:
c5:98:ee:7c:cc:81:30:3e:ae:19:0a:46:49:6f:de:94:1f:72:
3f:79:71:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:12:19 2025 by rpki-client