Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
File: y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft (raw, json)
Hash identifier: ghb1R3Z9TF/o3vQ9nxggiO3LYAcKCTvbK6Gqb5/5Tm8=
Subject key identifier: 3E:CE:69:02:47:3C:86:4D:01:C5:EF:35:B4:D6:54:9B:62:87:8C:8E
Authority key identifier: CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
Certificate issuer: /CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Certificate serial: 0199221E2D5084BC147836C8E1BF4EFEB50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
Manifest number: 0389
Signing time: Sun 07 Sep 2025 03:00:26 +0000
Manifest this update: Sun 07 Sep 2025 03:00:26 +0000
Manifest next update: Mon 08 Sep 2025 03:00:26 +0000
Files and hashes: 1: y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl (hash: NuGWn8NxprZQQWr401O4qBkRl0IsawKm72Plqn8OjUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:2d:50:84:bc:14:78:36:c8:e1:bf:4e:fe:b5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Validity
Not Before: Sep 7 03:00:26 2025 GMT
Not After : Sep 8 03:00:26 2025 GMT
Subject: CN=3ece6902473c864d01c5ef35b4d6549b62878c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:d6:1a:5d:9d:df:4a:76:fa:2c:f7:1d:53:
31:75:49:d2:83:52:ac:92:6b:42:00:b4:43:99:bf:
c1:3c:95:80:39:99:4d:77:f1:32:63:9f:31:33:e6:
50:bf:a1:21:0b:4b:43:0c:30:5a:e8:53:21:9c:4a:
b0:cb:bf:58:bd:65:65:d4:10:14:47:ae:eb:2e:a0:
56:cd:7e:bb:3a:fa:80:6d:d3:ac:9e:07:f9:23:04:
7f:91:50:6e:47:bf:38:37:3a:bd:ff:e1:e1:b3:18:
9d:38:f4:68:8a:e4:48:cf:61:2b:2a:d4:7c:50:d4:
ac:f3:76:58:d4:6f:03:43:8c:88:3f:75:b2:85:4d:
5f:f3:e0:09:96:12:cc:3a:e4:39:f7:0f:8a:c1:2f:
76:ca:5d:52:c5:de:8e:99:e4:e8:6b:63:66:d4:d4:
de:36:b7:68:0c:3c:59:80:3a:dd:dd:ee:d1:71:1c:
22:3a:41:29:66:7b:45:3f:a9:0e:07:eb:ff:93:d0:
36:cb:03:22:d7:8b:8e:48:26:aa:9f:51:17:cc:f4:
5b:77:30:09:67:f1:dd:d1:e1:31:a1:7f:99:b3:30:
53:c1:67:83:98:36:eb:01:91:4a:e8:64:cb:d0:c4:
cb:aa:04:1c:a6:c7:66:7f:09:c4:5b:76:fa:8f:d9:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:69:02:47:3C:86:4D:01:C5:EF:35:B4:D6:54:9B:62:87:8C:8E
X509v3 Authority Key Identifier:
keyid:CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4c:ab:02:cd:7d:68:31:1d:34:8e:6e:eb:b3:56:c5:31:3c:
5c:c3:de:43:7c:d8:ac:9e:80:61:c1:82:12:63:cc:1e:21:3f:
10:27:52:80:6f:44:96:c5:b1:6c:4e:71:0b:6c:d7:62:e4:70:
d8:ae:2f:5e:1e:c5:f3:87:2a:20:3d:55:c1:c3:c3:13:e0:26:
df:03:33:48:49:2f:78:f2:5c:2a:0e:f3:4f:de:ee:ea:af:a9:
bc:83:39:4a:5f:c5:3b:86:c4:c2:f4:a0:ec:cf:e4:8f:27:f3:
51:9e:eb:e8:fd:e3:83:b6:99:93:4b:13:e8:4c:83:9a:07:6c:
80:42:7c:04:12:42:26:69:05:23:67:bd:72:c0:61:78:90:ef:
b2:d1:a3:94:4e:62:39:ed:62:0c:2c:63:5c:0a:e8:d3:4f:4c:
db:22:d4:11:f0:0c:00:c3:4d:6e:4b:f5:08:fd:f7:8c:62:bf:
5a:36:46:cc:91:e7:dc:02:9e:46:25:10:b5:4f:cb:ac:db:ef:
ef:1d:41:6e:2c:40:6d:cf:d4:f3:9d:51:1b:5b:16:d6:b2:d5:
3c:e6:bf:73:6a:a7:16:28:dd:0b:a6:56:63:a7:ae:71:15:39:
21:5e:d7:dd:21:b3:74:ad:ef:f1:66:75:e4:3f:b6:b6:70:7d:
90:50:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:23 2025 by rpki-client