Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: 18LYG7xf7lbV4fs9f2WRkGqJsJgFc8V5ThqY8HM658c=
Subject key identifier: 95:65:C4:D8:FB:35:E5:EB:CB:8D:06:AA:21:1D:0C:28:BC:30:F8:D2
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 0199221ED8991BAC4F2DEFC7F2C6724947DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: E6
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: sj4IuAwBgiVNEVcEQswSunJWSD5iIURWayFNSN/30iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d8:99:1b:ac:4f:2d:ef:c7:f2:c6:72:49:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=9565c4d8fb35e5ebcb8d06aa211d0c28bc30f8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:a7:c7:b5:3d:76:5d:2f:f8:70:48:fd:07:
c3:6a:e6:bb:21:9e:ea:1d:15:be:48:dd:05:8a:7c:
73:3c:52:a1:07:0f:28:90:99:38:9d:ff:4e:af:d9:
9c:e3:17:8e:33:00:1e:be:46:3a:b0:a6:90:0a:7a:
03:cd:29:a1:a4:7c:e3:b2:a9:e9:a1:d7:91:ca:4a:
d6:4a:95:07:00:05:a4:07:a2:a0:2e:5d:34:1c:b7:
ed:64:59:25:eb:55:54:8a:79:b9:3c:3f:f4:6d:4a:
51:a8:89:be:de:39:3b:9d:99:32:61:2c:bb:83:aa:
70:5d:1b:9c:4e:71:db:46:ff:54:74:c0:74:0d:71:
52:bd:fe:cc:9b:76:6d:04:61:ab:ff:1e:9d:4a:09:
fd:47:43:72:24:e5:9c:3e:02:b1:d9:0b:db:ce:f4:
3f:45:fa:6c:a9:28:7b:55:11:81:dc:b9:a1:fc:82:
d1:26:48:4d:e7:84:66:52:7b:8f:77:f1:3c:cd:34:
7d:3d:13:e0:79:66:d7:33:82:ef:4d:bd:4c:86:34:
81:07:b6:8c:a1:29:a9:e1:cf:aa:c4:97:b6:e2:4a:
24:c8:00:fd:57:ef:46:49:32:ab:21:ea:98:a7:c5:
e6:8b:a3:cf:9e:f2:09:ce:84:ed:91:80:b1:3d:98:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:C4:D8:FB:35:E5:EB:CB:8D:06:AA:21:1D:0C:28:BC:30:F8:D2
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f9:d1:fc:2c:83:50:f0:9f:01:69:6d:cd:62:f6:e0:a0:df:
35:04:07:21:88:41:84:89:7a:7e:5f:e0:bd:09:10:62:50:0a:
32:c9:7b:9f:94:f4:4a:39:68:9f:3c:31:a0:85:60:13:50:51:
f7:92:8b:5e:b3:80:e6:58:7f:d8:b0:43:6f:ff:6e:2c:02:58:
3e:01:f0:ee:61:a0:29:ca:34:3d:d5:7b:da:de:e8:00:97:de:
ce:de:19:36:0f:32:ea:17:b6:70:0f:eb:17:a8:14:3e:90:b8:
15:6f:4a:f1:f1:94:90:91:a7:e7:33:c1:e4:61:57:54:dd:30:
12:36:3e:a2:38:74:c3:9c:5d:12:15:b7:af:4d:79:c3:a4:e4:
bc:0f:6d:8e:6d:5b:2a:e0:d2:4c:4c:09:16:23:ea:06:09:61:
d8:b6:5b:76:3f:88:70:9a:2e:de:dc:f2:ca:f2:4b:50:86:ee:
29:c6:75:a9:e8:46:1d:7c:34:be:89:b9:07:31:49:ff:5f:40:
82:7e:7a:12:75:df:12:ea:17:ab:e5:1e:00:f3:3b:22:db:00:
31:4d:67:ea:d5:cf:f0:66:a8:3e:99:c0:f0:a9:52:a7:a1:94:
f6:ce:f0:38:f4:db:3a:22:f3:4f:85:be:7c:8e:80:e4:dd:7c:
22:24:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:30 2025 by rpki-client