Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: XkYk13U7QAO6aLrsEdgygbdb/RDElqCIn8Gt3diISTw=
Subject key identifier: 13:EF:52:5D:8F:B6:AE:82:E9:38:85:F2:1F:3E:0D:24:D4:53:D0:E3
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 0197D5F44DC70056B29F77BC0D8C1F2E5D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: 3A
Signing time: Fri 04 Jul 2025 15:00:47 +0000
Manifest this update: Fri 04 Jul 2025 15:00:47 +0000
Manifest next update: Sat 05 Jul 2025 15:00:47 +0000
Files and hashes: 1: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: bSrlA+zaVVI3BYcDWqEN3Rtm4jns2ubk3Uw7xYAK/ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:f4:4d:c7:00:56:b2:9f:77:bc:0d:8c:1f:2e:5d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Jul 4 15:00:47 2025 GMT
Not After : Jul 5 15:00:47 2025 GMT
Subject: CN=13ef525d8fb6ae82e93885f21f3e0d24d453d0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:58:fb:7b:26:14:83:c7:19:c0:b2:c3:8d:
e0:15:fb:f5:6a:24:cb:80:0b:8e:8a:2a:43:16:9e:
e2:7d:89:0d:2e:80:29:8b:89:94:ac:e9:12:d4:3e:
26:07:48:a0:71:a2:24:70:39:8f:33:66:a1:34:30:
7f:50:5f:fe:68:57:b0:54:e9:2a:f0:b8:a6:62:89:
1b:c4:45:6e:e1:5d:a6:fd:99:95:24:7b:66:15:e0:
55:4c:95:f5:64:cf:fa:0d:32:f3:44:ba:d3:27:59:
11:27:57:7e:0b:3f:cd:b7:53:df:36:ff:f7:13:85:
1b:4f:84:ab:1c:cf:70:89:ec:d5:fb:e8:85:95:47:
06:61:43:8b:4f:8c:df:0f:a3:ad:8f:05:45:dd:74:
de:f4:33:4d:de:52:a6:be:f0:e4:16:02:73:05:2b:
43:b4:e0:29:9a:29:92:59:d5:d6:b2:ea:7d:a8:65:
3b:a6:ee:09:a5:f2:63:91:d0:66:13:a9:4d:97:c8:
2a:ab:16:6a:91:f5:bb:ba:7b:fd:65:a3:3d:22:a1:
d0:66:9c:2c:30:5a:7c:8c:7e:f0:cb:9c:44:05:24:
cd:fa:a2:99:0b:f9:b5:3d:e2:59:76:ca:51:33:b4:
c0:8e:55:99:6e:27:dc:62:d1:52:12:24:d2:54:d5:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EF:52:5D:8F:B6:AE:82:E9:38:85:F2:1F:3E:0D:24:D4:53:D0:E3
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bb:c7:bd:dd:42:4c:76:f8:d5:9d:70:95:54:2c:e2:fe:9d:
09:5b:0a:1e:15:2d:2f:87:f7:81:55:0f:4c:be:73:90:d9:95:
fb:dd:3f:ff:a6:36:99:85:6f:8f:1f:cc:a0:02:ef:6a:0a:01:
68:11:f6:61:03:18:76:48:87:49:59:eb:99:2f:d4:cd:7e:2f:
4c:02:3f:c7:ce:b2:91:d5:92:e1:4a:ef:f2:28:ac:f2:5d:86:
3d:ca:e6:93:87:79:25:76:54:7d:ab:cb:9f:73:9f:58:3c:bc:
6e:97:77:12:df:e7:4c:bb:5b:0a:1a:34:38:3d:7c:c7:58:84:
95:c7:e3:69:90:f6:b1:0a:a8:65:3b:ab:59:19:9a:72:9a:47:
f0:70:6d:88:d8:5b:34:56:09:3e:1f:90:a0:3c:0a:f3:1d:6a:
43:eb:4c:2e:4e:2e:43:ce:20:a5:60:8b:25:cd:aa:b4:f3:f7:
9d:5e:da:06:65:eb:f8:40:84:1c:9d:35:04:7b:79:5e:66:56:
4e:12:b3:ea:30:24:06:1a:c9:82:f2:30:03:32:43:b0:61:fb:
10:83:57:70:d8:c7:62:ca:58:68:18:e4:0e:be:cc:b7:68:37:
9c:13:e2:0d:d9:b0:00:63:2b:62:00:e5:f0:a2:c3:c2:79:c7:
bc:e4:75:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:13:33 2025 by rpki-client