Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File: ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier: sImTb+VsivJoHfSDD98K1kY08CmcfWaSVLuiMqp4Ga8=
Subject key identifier: C6:ED:E0:6C:B6:AF:D0:99:D9:7C:3C:33:D1:D3:FD:CD:42:04:32:86
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer: /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial: 0199239F3C6B3ED570D15D1399CE095D9B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 10:01:02 +0000
Manifest this update: Sun 07 Sep 2025 10:01:02 +0000
Manifest next update: Mon 08 Sep 2025 10:01:02 +0000
Files and hashes: 1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: 7ZsqzzNdpmG4VPl5xz6FXRu5Pko6LQNpuTKiF9OGRYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3c:6b:3e:d5:70:d1:5d:13:99:ce:09:5d:9b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
Validity
Not Before: Sep 7 10:01:02 2025 GMT
Not After : Sep 8 10:01:02 2025 GMT
Subject: CN=c6ede06cb6afd099d97c3c33d1d3fdcd42043286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:9d:31:4c:1a:dc:b4:4c:6f:b9:36:3a:2f:
e5:c3:75:c3:da:be:4a:78:fd:b0:bd:df:c2:19:52:
d8:ba:fe:06:d8:93:82:66:d4:cb:bd:de:cd:66:17:
a7:9e:1f:5b:42:f4:70:6d:d5:68:20:08:7b:15:e3:
7e:24:b6:9c:22:32:ae:a6:9d:e5:b2:09:4a:b6:8c:
ff:b7:79:d1:24:a0:eb:5d:9d:58:80:c9:a9:bb:57:
0f:5e:98:01:08:b4:5b:79:3f:0b:63:e0:68:2e:5b:
ec:df:ab:35:6c:fa:76:c4:aa:b9:4d:e3:1a:9d:9e:
14:b4:1e:69:f1:2a:cf:36:1a:59:c3:06:db:a6:6f:
25:88:dd:1d:aa:31:6c:d5:d2:3c:77:da:c2:08:f5:
fe:f7:93:a4:5d:98:51:32:9d:62:48:37:7f:4f:16:
3e:d3:5b:86:6b:89:6b:16:cf:d8:7d:2a:95:3c:ea:
bc:7a:67:8c:2c:8c:2f:56:bd:d5:06:c4:29:ff:21:
6a:5d:54:71:13:18:a6:51:17:86:69:ff:1c:7a:fe:
f4:63:23:d8:3f:b5:35:07:21:52:9d:16:84:67:ff:
95:fd:f0:5a:84:fa:ad:20:ee:4b:80:df:16:b9:b6:
81:3c:15:7e:52:58:96:3e:59:a6:23:0a:75:85:4a:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:E0:6C:B6:AF:D0:99:D9:7C:3C:33:D1:D3:FD:CD:42:04:32:86
X509v3 Authority Key Identifier:
keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:73:10:06:c9:d9:f1:a8:9b:8f:d7:25:4f:9a:bb:02:2c:02:
b1:5e:86:13:e6:30:db:33:44:f0:62:e5:9e:87:c5:5d:81:1d:
32:0c:3d:ba:f5:cd:4a:13:c6:6f:13:8d:9d:80:9f:2c:d6:05:
9a:a8:be:00:19:16:56:55:3b:47:0c:41:e1:d3:f0:72:bf:aa:
3f:74:fe:53:eb:dc:90:37:32:15:93:5b:df:71:41:c4:45:94:
01:48:2c:af:15:55:33:4f:e2:71:41:28:e4:9f:c9:f5:86:2c:
71:c8:bd:c6:e2:41:ed:cc:9d:c0:b4:76:cc:7d:2b:62:ec:27:
fe:94:5f:69:8b:46:2e:3c:20:1e:75:ef:5b:82:25:ca:b2:50:
b0:81:35:6a:6b:ae:f9:d2:8d:80:57:4b:e8:13:e9:f4:2f:2d:
ed:84:89:c7:b1:00:9e:6e:50:70:ae:1c:2d:d2:cb:2e:6e:de:
c7:8f:fd:80:91:50:84:a0:a4:09:ae:0d:3e:92:73:80:44:af:
e9:91:63:cb:cf:2e:35:dd:35:b4:d1:54:57:ad:ec:42:67:45:
55:b1:7d:15:05:84:d0:10:0f:a5:e4:73:d3:b5:f9:4f:98:0a:
ab:cd:b5:82:e6:29:04:9f:04:1a:f4:c6:6a:21:b3:ae:53:30:
6c:b8:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:14 2025 by rpki-client