Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: PVksfaQ0c0Rzpq8GkSYd5b+Bn/+YbVGyB2wDtMZL9g4=
Subject key identifier: C7:A3:37:EC:92:C3:62:4C:50:78:4D:F8:57:C6:80:81:12:1F:EC:1A
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 0199225534B7EEBA8510A44E4FA42E31DC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 1303
Signing time: Sun 07 Sep 2025 04:00:33 +0000
Manifest this update: Sun 07 Sep 2025 04:00:33 +0000
Manifest next update: Mon 08 Sep 2025 04:00:33 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: dqsaw/7sCOCFRrQWnbDHwL1ITlfHNr/BRlPuLcmlAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:34:b7:ee:ba:85:10:a4:4e:4f:a4:2e:31:dc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Sep 7 04:00:33 2025 GMT
Not After : Sep 8 04:00:33 2025 GMT
Subject: CN=c7a337ec92c3624c50784df857c68081121fec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:4a:68:0e:84:2e:4d:41:02:19:5e:4e:a2:
02:3f:eb:8d:37:f5:37:61:d1:0d:79:cd:11:da:8b:
1d:a7:67:79:83:6e:dd:e3:26:a8:c2:f5:ff:4e:d2:
91:5c:cd:ec:89:33:d1:f7:95:61:b7:80:23:89:b0:
89:b0:2f:2f:b5:f2:71:42:67:af:62:a4:f7:55:51:
2c:ef:eb:07:7e:57:37:10:03:52:16:a3:26:85:bb:
e2:f6:c3:61:9f:8b:93:1f:51:30:bd:87:a6:77:12:
e1:f8:22:ca:00:3a:e3:cc:4d:b0:ec:21:31:aa:95:
02:c3:99:45:ef:37:9d:2d:cd:5c:44:3e:f2:d9:d2:
e3:ef:df:8b:24:0c:8d:58:52:df:3f:3c:65:61:46:
e3:07:45:0e:c5:93:55:77:89:01:1b:75:95:84:15:
c2:f8:08:ee:e8:7c:f7:56:3b:d9:5c:07:bc:49:3f:
5d:03:bb:e1:d4:4f:31:29:9d:79:95:3d:d7:67:70:
6f:c9:5d:50:28:62:d6:4a:22:86:7f:bc:82:09:98:
33:26:95:43:9d:86:f4:be:c0:02:dc:48:85:c8:43:
c2:fd:7a:71:05:5c:b7:52:a8:af:f5:fe:cb:04:96:
ed:ab:f9:38:27:7c:ba:46:9d:f2:31:47:75:2a:49:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:37:EC:92:C3:62:4C:50:78:4D:F8:57:C6:80:81:12:1F:EC:1A
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:66:bb:63:c6:1b:2f:8b:7b:a7:7f:da:7c:8d:59:56:b4:b3:
33:8c:62:92:19:8f:dc:e2:d8:5a:5d:d9:31:19:60:6e:a0:0a:
d0:5d:94:04:65:be:a2:48:6d:14:d2:85:6f:95:02:72:6a:77:
03:b2:87:d4:c9:6a:56:98:45:b8:af:1c:cf:bd:06:34:44:ec:
fa:ce:83:50:b7:e5:08:91:1f:79:95:c1:b3:45:8d:ce:ee:a1:
89:db:0a:1c:95:29:d8:7f:f7:5a:bb:3b:de:0e:66:11:5f:92:
e1:0e:42:41:d4:e3:b2:8b:26:2f:d2:e5:3e:10:85:ca:bc:b9:
1c:ec:33:d8:53:6b:44:c9:12:5b:8c:63:29:20:ab:c6:03:72:
63:99:34:4e:25:4a:6b:aa:23:95:ec:64:03:49:fe:ac:bb:23:
80:96:14:2b:fe:25:e3:96:17:49:f0:db:c5:7c:24:54:9a:c7:
fc:58:94:d9:0e:ea:76:88:04:02:d3:d7:20:a9:87:9d:0e:e4:
c0:25:c8:ab:bd:47:11:8b:c0:8b:42:bc:79:ef:4c:d1:e3:1d:
db:48:2c:47:38:94:8c:58:86:61:c6:9a:9a:18:31:ae:78:31:
f8:fa:09:ba:7e:c6:c4:65:58:7f:b5:31:cc:d8:88:12:bd:cd:
6e:3e:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:13 2025 by rpki-client