Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
File: Yonrndlo7aSnlWTC4GpoOEIpegQ.mft (raw, json)
Hash identifier: X2hCId/UljxnQiYRNKC/4wm9JfLsqPgqDmdFtM+NBOw=
Subject key identifier: 9E:4C:47:D0:9C:B1:5A:1F:56:FE:95:74:7B:A5:DE:C5:39:D4:47:35
Authority key identifier: 62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04
Certificate issuer: /CN=6289eb9dd968eda4a79564c2e06a683842297a04
Certificate serial: 0199183F7B1FD4EFA5058FCF788D2E051677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
Manifest number: 038B
Signing time: Fri 05 Sep 2025 05:00:37 +0000
Manifest this update: Fri 05 Sep 2025 05:00:37 +0000
Manifest next update: Sat 06 Sep 2025 05:00:37 +0000
Files and hashes: 1: Yonrndlo7aSnlWTC4GpoOEIpegQ.crl (hash: KyVRYqiDLTdUJJLXm2ZXacqjBSgXadJFO++TFrRcNTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:7b:1f:d4:ef:a5:05:8f:cf:78:8d:2e:05:16:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6289eb9dd968eda4a79564c2e06a683842297a04
Validity
Not Before: Sep 5 05:00:37 2025 GMT
Not After : Sep 6 05:00:37 2025 GMT
Subject: CN=9e4c47d09cb15a1f56fe95747ba5dec539d44735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:48:7d:c9:b2:b7:74:02:bf:ed:5a:43:85:
96:61:d7:c2:b7:75:50:67:ff:89:8c:9d:90:11:f1:
5e:28:a1:0a:96:ba:c6:81:87:40:35:06:7f:3c:0c:
e9:82:a8:7f:c9:65:ba:a6:06:e5:82:a6:7f:fa:8c:
e9:13:c6:7e:53:dd:11:4a:df:66:e4:b4:14:01:9d:
a0:d4:db:53:83:3b:fa:d3:99:aa:5b:62:ee:58:62:
9d:b4:c4:b8:df:0b:b9:36:42:53:14:74:20:f2:ac:
04:4a:62:6c:eb:78:de:a5:bd:1b:a8:8b:cd:37:ba:
16:2d:84:40:5b:53:47:59:12:4b:0b:10:3b:4b:a3:
20:5f:b5:17:ea:70:1a:39:c7:47:07:84:43:56:05:
7a:f4:60:37:a3:f9:96:c4:d8:b3:3f:b7:aa:5d:f0:
94:a0:e9:e0:20:bf:75:c7:54:2e:f4:b4:bb:b6:22:
b4:31:0f:aa:7e:4d:4f:e5:cb:fe:30:72:f4:69:cd:
25:5d:5d:bb:e3:2c:41:70:09:8b:6d:25:cf:d9:87:
46:8a:e9:09:66:14:4c:3e:0f:b9:6a:c1:53:ff:fd:
ad:e5:bd:f5:3f:e5:d7:90:af:6d:6c:0c:49:b8:24:
9e:18:55:c5:08:0c:6a:1e:a5:63:27:d6:40:05:ff:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:47:D0:9C:B1:5A:1F:56:FE:95:74:7B:A5:DE:C5:39:D4:47:35
X509v3 Authority Key Identifier:
keyid:62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:a5:2d:4e:1c:ac:93:e5:84:d1:c5:b6:90:98:18:20:7d:
fd:9b:80:4f:25:ee:9c:38:52:54:46:1e:d2:b6:65:04:7c:60:
e4:9a:92:93:67:f8:cf:28:c5:61:ef:cf:50:d0:c3:2c:93:a8:
84:c9:69:bc:37:fb:61:26:62:e4:f1:06:9e:9c:38:41:93:2d:
c6:68:77:8c:cb:0b:c4:c8:99:19:6c:bf:73:97:80:4e:4f:df:
2f:34:c7:87:66:a0:6f:9b:1e:f7:e5:a5:5e:54:d0:a8:e0:85:
97:0e:f7:b6:61:91:bc:53:3c:05:61:57:81:9b:42:6b:86:bd:
51:9b:52:d4:c9:e2:67:de:71:c9:3a:c0:5f:0a:b7:b2:9b:4c:
b1:97:f6:63:f2:ee:06:d8:66:8b:b3:54:80:30:03:da:d3:51:
ef:e7:d4:2a:81:70:58:43:f7:c8:ed:0a:8d:c6:d3:12:06:42:
ef:8b:c0:99:19:a2:c0:2c:5b:6c:c6:97:cf:7c:6a:26:cc:97:
96:64:52:9f:8c:80:03:d9:2b:c8:17:d3:82:c7:61:dd:92:52:
e4:36:16:98:d0:5f:b5:48:1b:d7:ac:5e:43:54:c6:c1:01:93:
2d:55:af:0f:ee:0d:2d:1e:84:a1:7e:c9:85:2b:f9:42:6a:88:
24:05:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:34 2025 by rpki-client