Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: FtT9qq81cKFQk1XwEAz6HIQbjYol4LjasSoRNiPRt/g=
Subject key identifier: 2D:22:C6:D5:8A:AD:0E:B1:00:4D:CD:B2:C9:41:E6:3D:CD:DC:F1:73
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 0198D4E08BC260B973DBF42D163CABC3882B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 0532
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: d50Ri2Nq9LcHM28wH8FiNNTIZnuADS6K/IdNGEDNFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8b:c2:60:b9:73:db:f4:2d:16:3c:ab:c3:88:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=2d22c6d58aad0eb1004dcdb2c941e63dcddcf173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:d4:d6:52:7e:e0:5f:f1:d6:84:19:18:d2:
35:e0:47:90:c3:ed:34:08:ce:5f:0b:51:2d:0a:c7:
49:00:2f:93:5d:58:56:65:9b:63:96:78:d7:b1:b5:
56:ab:93:1e:4a:e7:09:73:56:ba:20:23:42:40:3a:
11:69:68:73:88:12:24:04:fa:39:7a:d3:1d:81:35:
42:20:9a:6d:48:b0:b2:af:d9:b1:f2:e9:28:6d:f6:
13:6c:f6:93:7d:b5:df:58:6e:79:9c:ec:a1:b2:ab:
da:c2:b7:0b:fa:5d:31:62:82:f6:7e:bb:5f:16:5f:
1d:7b:90:7b:67:59:b9:22:f6:db:80:aa:c5:5a:30:
66:cc:fd:e7:77:60:73:f0:40:f8:b5:77:71:e1:b0:
7a:5d:7f:26:c5:48:c4:6c:9f:b8:1d:37:a6:07:9a:
1e:fb:2c:f7:83:6c:5c:9b:81:11:cc:a5:4b:b4:3f:
5d:09:ec:3e:46:f7:72:f1:ea:0d:94:9d:99:38:f2:
2b:14:77:80:68:ba:cf:71:35:a8:4e:49:f5:96:73:
92:7f:d8:c4:03:54:a5:8f:22:3c:d0:87:dd:f1:7a:
5d:47:c2:78:f6:67:c3:62:31:77:5c:ef:8b:f5:6d:
1a:58:e9:bb:7f:9a:96:8f:59:cd:65:af:4a:30:c5:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:C6:D5:8A:AD:0E:B1:00:4D:CD:B2:C9:41:E6:3D:CD:DC:F1:73
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ec:d3:68:2a:e6:52:e5:91:c6:82:35:d0:fa:41:d1:f6:5a:
d9:f2:c9:31:8d:66:f1:6f:63:a8:ef:30:d5:95:d5:ed:2d:38:
cf:a5:3b:76:b4:b1:5e:2e:03:34:c6:d7:4a:a3:30:c3:7d:ac:
8a:a2:43:81:2d:e0:14:25:b2:c7:4a:db:43:d3:5c:d2:63:62:
6b:17:89:29:66:36:1f:0b:85:b6:db:0d:4a:20:03:41:10:02:
e6:a8:53:03:8d:e4:ae:cf:ee:86:04:5c:25:2a:5c:8d:9d:4a:
8a:cf:35:4c:d0:51:c9:a3:08:ba:4b:f8:5b:ae:68:25:8f:7a:
cf:c0:cf:e3:d1:bb:ff:bb:00:ed:30:8c:82:f5:97:06:96:1b:
57:6f:10:69:fd:e1:e0:72:17:a0:e1:47:a0:ea:65:d6:59:47:
77:4c:08:8d:07:8e:5f:ea:8c:d6:4b:a2:be:a5:f2:ad:ae:f8:
71:d9:a8:8a:10:2f:df:9e:a1:de:33:41:c9:d1:b9:bf:ba:2b:
88:1b:b5:83:9c:54:ea:eb:19:3b:75:61:f3:eb:c3:5a:a0:27:
17:14:05:7e:e3:af:81:bc:89:77:97:07:03:fc:be:70:df:08:
f8:e6:15:91:c9:fc:51:ed:68:c4:d8:45:28:83:72:b8:db:bd:
43:98:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:35 2025 by rpki-client