Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: qqHANBhSeamZhgT8fOHsy6bJSz21RdAlZ+oEjCc3ihw=
Subject key identifier: 1E:CD:88:F2:95:CB:3F:F4:86:36:B3:93:80:09:CB:5C:A0:1C:05:E9
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 0199161AC73F595E68A28CBF645BF5B2B031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0A30
Signing time: Thu 04 Sep 2025 19:01:17 +0000
Manifest this update: Thu 04 Sep 2025 19:01:17 +0000
Manifest next update: Fri 05 Sep 2025 19:01:17 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: sHdxDX70NlpprxjOAMgS/60XplGsVdh2SFJdR/3IvoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:c7:3f:59:5e:68:a2:8c:bf:64:5b:f5:b2:b0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Sep 4 19:01:17 2025 GMT
Not After : Sep 5 19:01:17 2025 GMT
Subject: CN=1ecd88f295cb3ff48636b3938009cb5ca01c05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:0e:80:0f:6b:c2:33:02:a3:94:37:48:f0:
b3:df:d4:e8:57:32:7f:63:55:d2:79:36:72:f2:db:
8b:9f:7d:00:81:94:82:eb:23:13:3e:eb:ce:61:a2:
34:04:b6:07:18:01:f1:82:47:5b:83:c4:7c:10:53:
b7:f8:b0:e6:6e:c7:7e:20:99:2c:36:a7:fb:97:5e:
3d:a6:95:da:1b:ed:63:61:29:5f:57:9e:49:08:c5:
b1:35:6d:11:11:04:f2:10:e1:23:d7:5d:c2:f5:70:
50:09:d5:db:9d:c2:35:8a:50:45:37:64:0b:89:c4:
86:9d:93:7f:0c:3a:b7:61:80:9b:4e:da:9f:9c:ae:
fd:64:61:5b:f9:bc:49:2e:9e:ef:91:d1:2f:40:f8:
f8:fc:6d:02:9e:d2:83:ee:da:4b:10:7a:fc:80:e2:
ff:90:62:2a:d5:7b:95:51:2d:30:d8:19:52:c7:a7:
32:16:40:a8:58:2e:82:d0:f2:b2:03:00:6d:47:df:
35:80:4e:64:d6:42:1c:eb:d5:3c:a5:bd:96:21:43:
b3:b8:50:99:63:b4:90:76:9e:cb:01:12:cf:89:4c:
f3:91:2c:ae:5b:4d:ac:43:73:a4:01:fa:f6:ee:69:
93:a1:fa:68:7a:e3:59:4e:8e:00:a0:d7:ac:77:6b:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:88:F2:95:CB:3F:F4:86:36:B3:93:80:09:CB:5C:A0:1C:05:E9
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:57:e2:5c:e1:9f:0e:8f:0d:2f:b6:1f:f1:92:1a:9f:49:f7:
bc:19:4c:37:6e:11:59:b3:7a:b0:3b:99:f6:f8:08:1b:58:b6:
65:d3:36:18:a7:d1:e8:95:3d:6d:68:70:b4:a3:ad:66:10:b2:
83:47:ec:22:d5:df:10:ba:2c:c1:80:ef:11:6a:33:28:c0:bf:
63:94:15:2b:16:67:63:e6:da:a5:43:d6:99:a6:58:14:b7:6f:
1b:19:7b:3f:ce:9a:9f:7e:32:ed:5c:7e:14:43:89:70:1f:69:
f5:c2:eb:f6:69:23:d5:3c:d3:e3:ae:45:a5:cf:bf:3f:0b:82:
b0:dc:87:56:69:57:42:d9:fa:19:f7:a8:7f:dc:72:c7:bc:60:
b4:ce:4c:cc:04:b1:af:c2:84:f1:f2:28:26:fb:08:d9:ad:8f:
4a:5c:70:f6:02:a6:70:1d:89:fe:11:6b:62:fd:ce:d9:a1:4f:
3c:36:b1:ac:df:9b:85:19:00:43:c5:ff:2a:88:77:f8:ce:f3:
7f:8a:bc:b4:70:85:77:c3:fb:c9:5d:0d:99:63:3d:6c:24:12:
56:25:c9:30:93:d5:73:b0:c4:53:f9:cd:61:2c:19:4f:80:cb:
87:b8:6d:95:8d:8b:4f:aa:1a:6c:db:48:41:e2:80:7b:1f:ca:
d1:eb:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:22 2025 by rpki-client