Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
File: yTLAXdVS5YBU2FWljWFhlVP1HGM.mft (raw, json)
Hash identifier: oyS928qJBSxJtXL9goG7IfUc5fsvN79kSVYFydGI2Dc=
Subject key identifier: 30:00:6C:AF:F2:2F:F9:8F:2C:E3:6F:5F:E6:6F:54:4E:80:23:D9:61
Authority key identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
Certificate issuer: /CN=c932c05dd552e58054d855a58d61619553f51c63
Certificate serial: 01992331261620CF91A04A5EA3A040005ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
Manifest number: F8
Signing time: Sun 07 Sep 2025 08:00:47 +0000
Manifest this update: Sun 07 Sep 2025 08:00:47 +0000
Manifest next update: Mon 08 Sep 2025 08:00:47 +0000
Files and hashes: 1: yTLAXdVS5YBU2FWljWFhlVP1HGM.crl (hash: hh6QdYF1fgg7WPLxcrKGgpVKLKBqov0lJ9kfBuGZMXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:26:16:20:cf:91:a0:4a:5e:a3:a0:40:00:5a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c932c05dd552e58054d855a58d61619553f51c63
Validity
Not Before: Sep 7 08:00:47 2025 GMT
Not After : Sep 8 08:00:47 2025 GMT
Subject: CN=30006caff22ff98f2ce36f5fe66f544e8023d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:2b:b7:c0:55:39:f4:d4:3a:06:70:f4:f4:
f8:a5:9b:f7:55:b9:42:2a:9a:e2:04:c4:2b:b3:5a:
cd:e3:44:b7:93:06:df:25:00:e6:22:d3:de:f1:20:
4c:e8:b2:8e:37:75:85:38:1b:69:00:1b:ce:11:22:
16:7d:fd:e7:8f:4e:12:73:bf:dd:36:c9:9c:eb:69:
b4:ea:73:b7:7a:73:67:db:fe:16:96:bf:6e:da:ee:
67:0f:1f:85:ce:79:ec:41:5d:a6:2f:38:28:cf:26:
08:71:23:20:95:b7:73:d4:63:e4:80:d7:f9:c1:04:
5b:58:11:9d:68:12:5f:49:2a:1c:58:95:63:9d:6e:
58:5d:f5:f4:90:b3:a7:c7:cd:4c:5f:0b:02:9a:ab:
7b:b5:fc:34:a6:74:3e:e8:12:51:3f:ad:a4:2b:26:
c5:a7:c8:5f:93:f6:e9:a9:af:7a:17:c5:2c:01:16:
37:ba:a0:3b:c2:8f:c7:be:61:23:1d:33:aa:79:36:
7c:35:f9:e4:5a:35:7c:9f:eb:8d:0a:8d:b6:4a:0c:
95:f2:b0:77:06:23:da:bf:76:df:0f:79:75:c6:c4:
b5:bb:d9:54:a1:f7:d4:32:34:51:6d:1d:7d:bf:ad:
8d:25:a1:23:9c:db:68:0d:34:0d:94:a1:bc:dc:76:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:00:6C:AF:F2:2F:F9:8F:2C:E3:6F:5F:E6:6F:54:4E:80:23:D9:61
X509v3 Authority Key Identifier:
keyid:C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:8c:25:98:42:b7:36:91:ce:c8:f5:fa:63:94:3a:bf:ae:22:
71:16:bf:87:af:4b:a7:08:fa:70:ae:d2:72:22:0a:8f:24:b6:
eb:cd:4d:70:b0:c9:c9:73:07:11:b4:e9:f9:3c:12:e3:bd:0e:
6f:6b:0c:59:9d:bb:0f:8b:75:74:dd:88:6c:28:08:8d:49:53:
05:99:cb:a3:0a:43:f8:9c:06:be:dc:0c:04:aa:65:cd:00:5f:
c4:38:95:a5:9b:4d:8f:9d:fd:af:dc:4e:be:4f:01:b8:68:91:
67:74:94:b2:e0:e8:d8:43:37:7a:3e:24:39:7b:93:83:d6:e9:
0e:d6:f0:9a:53:dc:52:aa:dd:14:b3:df:d1:f6:33:29:c8:97:
12:2a:3b:c8:57:f7:65:d9:ec:3a:b0:43:d4:7f:1b:04:e6:1a:
8b:34:40:2d:63:75:b5:f5:84:a4:a2:7f:03:6f:9b:d6:9c:e1:
db:b3:ed:db:7c:15:58:f2:08:68:74:92:91:61:fb:93:a5:04:
9d:99:b6:e6:d7:58:70:66:94:3d:ef:a6:a9:53:88:e2:48:f6:
df:2a:1a:5b:22:23:7b:69:25:04:8e:70:a6:be:06:b7:24:72:
34:aa:d6:e1:51:1a:1e:16:aa:87:bd:70:27:ea:bd:14:c9:7d:
42:1a:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:10 2025 by rpki-client