Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: +TN7uRYddVvi+1yxkTV+fPWs5Ffr07GAmAf2Yc75QYM=
Subject key identifier: C4:B8:39:AC:F6:4D:CD:4D:A5:6F:E2:AA:E5:B7:23:DD:B9:24:25:91
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 0199221F5A88ED3493C38D8AE828161A9F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: 0B
Signing time: Sun 07 Sep 2025 03:01:44 +0000
Manifest this update: Sun 07 Sep 2025 03:01:44 +0000
Manifest next update: Mon 08 Sep 2025 03:01:44 +0000
Files and hashes: 1: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: algGs9LsMwwLEH/aatK5nH/F3U5gBc0SfIgWjERVzPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:5a:88:ed:34:93:c3:8d:8a:e8:28:16:1a:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: Sep 7 03:01:44 2025 GMT
Not After : Sep 8 03:01:44 2025 GMT
Subject: CN=c4b839acf64dcd4da56fe2aae5b723ddb9242591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:53:d2:16:4d:ef:2b:ff:66:8b:7c:b4:9b:
c3:31:43:b9:0a:21:d4:c7:59:cc:ff:e6:db:fd:7f:
b4:36:51:b6:67:89:98:77:11:af:1f:6a:a6:94:c9:
59:e5:e6:b6:5e:59:60:46:56:b9:47:75:14:dc:48:
74:fb:04:59:f9:fa:f1:8b:28:eb:10:72:9f:f0:6e:
a5:67:ed:8f:f8:b5:bc:ba:01:43:50:a8:ed:3a:4f:
fc:59:93:a7:f3:86:1e:e8:c8:5b:11:a0:18:36:26:
18:ac:2f:a4:10:2a:24:e1:c3:71:69:3d:f7:b2:65:
31:58:df:f9:7a:cf:6c:7d:e5:f8:24:7f:fb:5c:0e:
fe:8e:c0:81:eb:11:93:78:66:78:26:00:9a:6a:be:
83:a6:a1:66:35:63:20:de:1b:8e:d9:17:bf:83:c4:
21:77:ef:02:16:56:55:75:2e:c7:80:b5:69:d0:b9:
57:cf:15:79:e1:2a:63:e6:51:47:f5:79:b8:a4:81:
6f:a6:fe:3b:19:ba:a0:33:85:0d:11:7c:5f:61:1c:
31:16:06:b8:7a:bb:5e:15:19:83:66:7b:d6:93:77:
60:28:26:e7:3b:2b:25:24:e7:24:c4:a0:9e:10:0c:
7e:3e:1e:7c:54:f0:8f:40:de:af:46:3d:68:b0:6e:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:39:AC:F6:4D:CD:4D:A5:6F:E2:AA:E5:B7:23:DD:B9:24:25:91
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:26:13:f6:91:ef:7a:9e:25:1c:32:5d:a0:bc:19:f9:cb:
12:3c:4b:32:bd:d4:fb:78:ca:9b:86:43:1c:bf:2a:8a:5b:10:
ff:cb:d2:86:fa:f6:8b:a8:ee:ce:db:87:37:60:36:0c:f1:a2:
a7:0d:10:4c:a1:8e:4a:c5:f6:f1:ee:05:1d:2f:00:8f:a1:fe:
28:12:dd:66:ae:09:f7:69:46:c0:af:94:72:e7:7d:58:c8:e2:
f2:2e:f7:45:f9:4e:4a:b1:3b:74:20:3b:7b:02:e3:f5:f8:4f:
b1:49:c2:a4:e6:bf:d3:b0:f2:e8:aa:09:b5:5d:56:75:64:8c:
fb:15:30:16:8b:af:76:67:4a:89:1e:b2:c9:d1:4f:33:2b:da:
b9:24:e3:00:84:79:ac:a2:29:2b:98:6a:13:57:22:94:6a:31:
0b:49:d7:15:a9:73:83:55:6b:ba:5c:74:bf:bc:bb:cb:f5:16:
7a:93:9c:37:5c:4d:2f:1e:f5:84:50:9a:d6:92:d9:a7:8a:a5:
f1:ef:35:82:5e:7c:d5:2f:c2:1e:ef:3b:c8:d6:cd:84:1d:53:
87:46:1c:e8:13:a7:ec:0c:e0:b3:e0:41:cd:8c:ba:ce:8e:8e:
b0:61:e3:55:8f:f9:31:11:d3:ae:c2:91:73:ac:7b:c8:d6:b5:
00:03:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:06 2025 by rpki-client