Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: QJsYN08fD8x3C/hhjcj85W6rfXTpMAPeQgt2VVYJiQo=
Subject key identifier: 47:A2:D7:88:68:46:F7:57:BB:16:FE:9D:C4:D2:2A:36:A1:E9:77:C1
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 019921B21A38C05564E044D0585A9FBA2B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 09A0
Signing time: Sun 07 Sep 2025 01:02:24 +0000
Manifest this update: Sun 07 Sep 2025 01:02:24 +0000
Manifest next update: Mon 08 Sep 2025 01:02:24 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: S0kLXIfHwMruRRZmg7lIvRsDkaCYV7LXQrr+HPMuZoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:1a:38:c0:55:64:e0:44:d0:58:5a:9f:ba:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Sep 7 01:02:24 2025 GMT
Not After : Sep 8 01:02:24 2025 GMT
Subject: CN=47a2d7886846f757bb16fe9dc4d22a36a1e977c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:1e:a6:89:3f:eb:5a:19:8f:7a:3e:df:62:
0b:7a:52:bf:3e:b1:ce:0c:df:85:47:3f:67:fe:65:
27:12:02:53:da:7b:bc:6d:58:6e:72:29:cb:79:3c:
e2:30:b1:63:d7:f3:8b:df:0a:f1:ce:16:26:3f:60:
91:20:a3:c2:18:df:b5:1c:d2:af:dc:b9:08:0a:59:
79:26:d4:0f:ad:3b:cd:8c:9f:69:be:92:6d:e7:87:
15:c8:78:c7:2e:2a:0e:3b:d7:5a:40:28:13:32:1b:
d7:a3:35:10:49:55:bc:69:f3:04:ff:04:aa:02:5d:
ee:9c:8e:ad:d9:9e:fe:b9:6a:93:20:4c:a8:6f:bd:
15:bc:a5:0a:fc:b2:2b:e4:af:ca:7f:92:d3:b9:a7:
59:f0:65:a6:6b:6c:97:9b:50:44:f5:e5:ab:b7:05:
b1:83:ba:f4:e3:ee:f7:af:ef:9c:90:d9:1e:3a:1f:
a5:98:92:05:a9:b7:fa:18:0f:91:ce:15:25:1e:57:
4e:4e:6d:a3:4d:71:61:82:97:8b:8d:0d:c3:5e:d9:
7b:62:7a:40:83:32:3e:8b:ee:8f:6f:25:e7:22:f1:
95:3c:b7:9a:35:55:96:83:c3:d2:a1:d6:94:57:0c:
f4:fb:c2:18:f0:0f:fd:ea:f1:3d:4b:d0:f4:dd:09:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:D7:88:68:46:F7:57:BB:16:FE:9D:C4:D2:2A:36:A1:E9:77:C1
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:66:49:7f:f2:59:9e:d9:31:6c:bd:77:a2:a3:92:22:a8:
a4:5c:85:18:2d:9f:c0:1d:84:f6:94:d1:b4:0a:89:3a:c5:fe:
de:a6:17:cc:79:cd:e6:46:06:ef:12:b7:c2:d4:a5:16:eb:8a:
ef:48:6e:a8:ba:0d:c4:5e:4f:81:ce:fe:c4:0d:cb:95:dd:e7:
4a:7f:8f:17:11:ca:08:db:90:7c:d2:af:79:31:c7:41:b1:cb:
20:46:eb:d8:15:68:0f:f5:6d:4f:2e:64:a7:ae:a5:31:6d:d4:
4e:83:60:76:0c:21:74:7d:29:10:6e:c3:cc:00:ed:0e:7f:8f:
11:18:40:aa:99:5e:78:23:43:0d:8d:0d:23:da:ed:86:cc:fe:
07:6c:be:cb:be:e1:f9:61:18:82:02:5e:03:2d:5e:81:cd:a3:
3f:a0:ce:0c:e4:f8:24:f1:5a:7b:2e:21:4a:ef:52:30:63:cd:
fe:e0:dc:fe:34:c1:f4:60:bb:55:97:19:7b:2d:59:69:91:03:
4c:d1:cd:b5:29:9b:34:39:cd:43:1c:a7:b1:f9:65:4d:73:f8:
d2:95:c1:a5:f9:5f:a1:b2:d6:04:88:2a:63:d9:a5:e4:53:55:
7a:8b:ba:3c:f4:99:c9:e7:11:07:be:23:48:6a:a7:fe:45:77:
17:24:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:51 2025 by rpki-client