
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier: VHpyQlTA9Vk7N40VuxdiVI28jJF3N/z74lOgpdCeGFg=
Subject key identifier: D0:4C:DF:79:59:80:E8:43:FB:B8:95:0F:B8:01:80:FA:08:32:37:2B
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial: 0199168804F03BB4A2ACCB0E3C7FDA9BF6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number: 01C5
Signing time: Thu 04 Sep 2025 21:00:36 +0000
Manifest this update: Thu 04 Sep 2025 21:00:36 +0000
Manifest next update: Fri 05 Sep 2025 21:00:36 +0000
Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: HJOWcEnhd6QwV/n2prgl6uqDKOTNQq/tHN57XYMQgzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:04:f0:3b:b4:a2:ac:cb:0e:3c:7f:da:9b:f6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Validity
Not Before: Sep 4 21:00:36 2025 GMT
Not After : Sep 5 21:00:36 2025 GMT
Subject: CN=d04cdf795980e843fbb8950fb80180fa0832372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:e6:71:c1:4f:53:47:e2:56:18:6b:7f:7a:
54:30:f7:ef:af:df:f4:ab:07:a4:07:8e:a8:3c:ee:
8b:d8:66:65:e0:f3:f0:a2:3c:24:24:55:06:47:72:
ca:90:ac:8c:a3:8b:77:cd:7a:85:5b:99:f7:4b:11:
69:74:47:64:73:44:37:c4:22:56:2c:d5:97:ca:5f:
32:74:7f:f6:51:cb:3c:44:04:76:aa:ab:c1:98:06:
bc:99:41:99:fd:93:f6:9a:70:eb:fb:86:03:3e:0b:
7e:33:26:77:98:0a:cb:eb:aa:b0:64:aa:8a:83:08:
1b:b2:20:d4:9b:be:01:64:81:f5:1f:a0:25:4d:e1:
24:64:68:a7:5c:db:78:17:b8:a0:e2:eb:c0:6e:cc:
98:cc:9a:28:b4:93:fa:e8:32:27:d8:75:c6:b1:89:
11:01:c6:b0:e8:be:4f:f1:b9:46:67:ed:06:33:cf:
b3:95:ae:0f:96:01:ab:df:66:f1:84:92:d1:64:26:
51:67:ee:e0:70:a9:ff:57:96:16:8d:86:a5:2d:d8:
88:98:83:fb:6a:c4:bf:5a:da:71:02:15:3d:b0:ef:
51:fb:ef:da:51:d8:81:83:14:56:2c:d5:01:b9:9b:
6c:51:73:04:9b:0b:c7:e1:6a:3f:a3:33:75:57:e2:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4C:DF:79:59:80:E8:43:FB:B8:95:0F:B8:01:80:FA:08:32:37:2B
X509v3 Authority Key Identifier:
keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:95:0e:ea:41:d6:43:a7:f7:52:ad:55:3c:53:af:57:4b:32:
15:3e:b3:05:be:9d:dd:a6:7a:83:ee:96:00:9f:01:10:fd:3c:
af:ff:67:17:09:ea:3c:a6:fe:f8:81:83:e0:26:3f:8c:6d:7f:
80:03:5c:35:b8:71:cb:0c:cf:ce:98:f8:26:51:42:73:b2:83:
c3:59:3a:4f:55:51:b4:93:3d:2a:d4:54:7b:b9:3e:d4:00:4c:
8e:cd:8d:5f:af:42:f3:6b:e6:19:3f:1d:c5:26:24:91:1a:56:
33:df:eb:ce:b6:28:e7:f6:d6:88:e6:77:bd:df:1e:f6:c1:6e:
fa:c8:ea:cd:d7:50:12:87:0f:95:20:b3:b0:ba:ce:92:11:e7:
a4:9a:27:16:db:ea:84:2a:aa:ed:f2:82:9b:84:9b:07:7b:1f:
fe:15:13:f4:74:39:9c:62:b1:f1:ff:47:ee:11:d9:e7:35:aa:
f0:8d:dd:2c:17:5f:17:58:b9:4a:83:78:bd:b1:01:1b:0a:d2:
63:46:d7:ac:dc:c0:26:ff:3a:62:c2:d1:60:ec:95:be:18:c1:
03:8a:52:99:3f:11:70:66:62:03:08:c2:27:7d:64:3f:1b:1a:
36:18:db:25:17:72:b4:69:0f:0c:b8:eb:70:92:b8:68:19:b4:
6a:15:26:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client