Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
File: ys4LZXV7SJmVtfwzShRV5KNfBks.mft (raw, json)
Hash identifier: 3sJ2O1Tznont975lFjD+ac/glmBGcJ6TDlgejSokf5o=
Subject key identifier: 6C:60:A8:6E:2E:8D:AB:FF:BA:3D:8D:61:63:79:BC:C7:DD:E8:99:E6
Authority key identifier: CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
Certificate issuer: /CN=cace0b65757b489995b5fc334a1455e4a35f064b
Certificate serial: 019923311897186AB7D25216C3A0C9023265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
Manifest number: D9
Signing time: Sun 07 Sep 2025 08:00:44 +0000
Manifest this update: Sun 07 Sep 2025 08:00:44 +0000
Manifest next update: Mon 08 Sep 2025 08:00:44 +0000
Files and hashes: 1: ys4LZXV7SJmVtfwzShRV5KNfBks.crl (hash: 4xnTROG4sKGHIGMiK1dbXp5+ds5ocIUlspSrFtiCsEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:18:97:18:6a:b7:d2:52:16:c3:a0:c9:02:32:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cace0b65757b489995b5fc334a1455e4a35f064b
Validity
Not Before: Sep 7 08:00:44 2025 GMT
Not After : Sep 8 08:00:44 2025 GMT
Subject: CN=6c60a86e2e8dabffba3d8d616379bcc7dde899e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:d2:c0:dc:a9:ec:4d:b5:1f:b7:b1:c4:09:
45:13:3c:09:01:d9:b4:60:02:67:d9:aa:3a:1a:ed:
21:97:de:ad:b0:45:dc:bc:be:31:ba:be:39:45:04:
fc:b9:45:69:1f:9e:d6:15:09:81:bc:21:35:e5:33:
bf:5f:1c:ec:f0:ec:c3:6b:4c:74:cb:e8:f5:4a:0a:
d4:5f:3b:9a:d1:f6:70:b5:bc:6b:72:14:0b:4d:6f:
9b:8c:32:e5:24:89:b9:86:07:63:67:f2:9f:94:87:
b3:b1:2f:2a:df:4e:ee:e2:4a:27:08:d0:a8:b5:01:
28:d9:fa:a9:58:1b:ec:5a:20:1f:8a:3c:3b:86:28:
91:40:71:60:5f:30:ec:7f:84:3c:1d:f0:ae:90:2a:
ae:9e:63:3b:98:79:d3:fd:a0:ad:f4:95:40:48:25:
58:7e:4d:59:78:ca:41:8d:ee:46:ab:9e:ba:b9:90:
4e:be:6c:6d:70:dd:f3:56:09:ad:83:0b:52:96:72:
7d:5d:a3:f9:02:31:28:aa:2b:21:c2:07:5f:5a:f8:
91:dc:05:ee:ee:2a:8e:bc:c0:24:a6:d4:41:c7:03:
c9:24:8c:69:c2:83:40:ed:f1:dd:b7:00:fc:84:e4:
8a:94:b9:b5:88:e1:10:45:93:8d:4f:23:0c:d4:d9:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:A8:6E:2E:8D:AB:FF:BA:3D:8D:61:63:79:BC:C7:DD:E8:99:E6
X509v3 Authority Key Identifier:
keyid:CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:96:9e:5b:90:02:84:64:ab:43:78:91:2d:28:0f:d9:11:7e:
3f:df:79:7a:18:82:a4:b4:54:2e:8b:b5:b5:2d:77:db:35:3a:
5a:ca:a3:04:ba:af:01:d5:01:c5:5d:48:d6:93:36:5a:8a:12:
73:63:b2:34:59:0b:dc:b9:1d:83:46:02:a3:44:e5:40:61:33:
1f:d3:7a:11:3d:9b:fc:8d:28:a1:70:fb:31:79:20:55:5c:12:
be:fe:cc:1f:b6:f4:95:c7:96:33:26:1c:b5:3a:db:77:82:e7:
de:f2:67:6e:c8:38:a3:88:8d:1a:1d:ab:80:ab:19:e9:3b:ce:
e2:79:12:af:bf:8f:85:52:f2:04:8b:3d:05:4c:29:bb:45:86:
f8:c7:11:2f:ce:6e:36:d3:df:eb:36:26:e9:85:8d:c9:ca:d2:
97:dc:90:d9:0c:6b:7b:d8:14:80:72:af:f2:60:d4:76:67:1f:
24:ac:b9:14:db:dc:96:80:6e:6e:f3:81:79:a7:98:f5:cf:a8:
b3:0e:0b:e5:b3:78:a2:03:d1:40:9c:52:55:ca:b8:9d:6b:c7:
55:be:26:46:d4:d6:1d:7a:d4:56:3a:7d:d9:f5:0b:cf:2f:96:
51:7e:0d:30:32:fb:e0:14:0b:d6:55:02:6c:c4:97:cb:ab:23:
dd:d5:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:01 2025 by rpki-client