Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: 6rxKwlim221/hgzQtaFr3+BuvZF3EzxJdpiebyWRt+E=
Subject key identifier: DA:EA:FC:D3:D5:C5:65:D6:32:1A:33:8D:A8:82:A0:58:06:F0:8F:0A
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 0198D47246A05E78571F3C8A1C055F1F8C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 1136
Signing time: Sat 23 Aug 2025 01:01:55 +0000
Manifest this update: Sat 23 Aug 2025 01:01:55 +0000
Manifest next update: Sun 24 Aug 2025 01:01:55 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: dz+ZycgAjaz9xxNAHlWlpFTrCsMj0ti2HWR3o/1oiRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:46:a0:5e:78:57:1f:3c:8a:1c:05:5f:1f:8c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Aug 23 01:01:55 2025 GMT
Not After : Aug 24 01:01:55 2025 GMT
Subject: CN=daeafcd3d5c565d6321a338da882a05806f08f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:ba:78:2e:d4:a4:aa:20:d8:dd:90:f1:c4:
0b:bd:23:b9:25:e5:2c:e3:db:2c:22:ed:04:86:4e:
9a:59:64:12:84:56:17:fc:06:64:c3:af:f0:d9:bf:
cf:c7:7f:cf:fe:a1:94:a6:e2:40:22:60:d8:4f:2b:
e3:9e:3a:24:78:52:bf:c4:e7:8f:1b:c2:3c:f0:e5:
56:83:99:e9:a2:a6:6a:2d:c2:16:a6:dd:c7:36:83:
5a:9c:5d:96:c3:29:5f:dd:17:e7:54:b5:be:a9:1d:
6f:6d:5c:70:f6:e9:26:09:2e:90:72:b1:c7:dd:d1:
ea:46:e3:93:77:03:10:d4:24:ec:ae:7d:0e:e7:db:
9c:75:8a:0c:f0:08:ff:dd:f4:08:9a:46:93:c8:a4:
6b:11:03:3b:87:91:8b:99:67:d3:42:0a:ac:89:4f:
2e:fa:c0:53:60:a1:83:58:5e:2b:c4:10:1a:18:e8:
9e:5c:0d:69:1a:7c:5f:fb:7e:ad:59:8d:05:21:f3:
68:5d:23:97:6d:58:e4:cd:c1:45:be:f9:fa:7a:1c:
b5:23:f4:8b:16:50:e6:98:e7:86:ad:e8:68:e0:b4:
89:3d:0e:a5:c3:e6:82:97:35:b7:26:87:bd:7e:3d:
73:7f:ef:f8:0a:3d:c1:2f:7d:d0:b0:14:11:73:61:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:FC:D3:D5:C5:65:D6:32:1A:33:8D:A8:82:A0:58:06:F0:8F:0A
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:c5:c6:1b:44:98:0b:d0:38:cd:f7:3e:32:dc:15:e9:69:
44:c1:dd:a6:65:be:38:6b:be:20:d0:83:30:d9:70:46:e0:59:
94:03:dd:a6:14:af:03:72:41:d8:22:e1:32:a8:9b:56:f1:fd:
78:3d:31:91:a7:46:db:03:b5:eb:03:c1:ef:ae:89:4e:93:26:
17:0d:bc:a2:9e:04:31:ae:25:0b:dd:5f:82:de:c4:22:70:cf:
a5:ec:53:ff:ed:43:6e:c0:35:bf:36:56:cc:bc:c8:dc:a5:cb:
00:f8:eb:fb:43:70:96:d3:d8:c0:95:bb:41:54:76:07:da:3e:
a8:3b:63:67:80:18:7e:2e:32:ae:c2:ff:79:2c:6f:8c:7f:a3:
67:04:17:4c:15:67:00:3b:c2:35:d3:e4:2b:f3:a4:73:e0:1d:
e7:62:e7:8e:93:86:85:c6:70:0e:f8:d4:e7:a6:86:83:db:d0:
9d:f6:b0:bb:57:dd:04:25:07:2c:78:c8:49:a0:94:fe:97:dd:
54:9b:32:02:f1:03:a2:fd:3b:d6:49:10:20:a0:a9:82:35:2c:
3e:ff:6f:f4:ab:41:6c:a4:cc:8a:44:29:8c:66:55:cb:49:62:
c1:52:03:83:92:38:65:26:c1:0a:d0:83:e4:a4:b8:69:09:7e:
01:ae:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:14 2025 by rpki-client