Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: 6AYoRrrzyXa8Q8staVzKSHivMEy87J/oPsD5EVorLHo=
Subject key identifier: 28:B0:61:DF:74:16:D9:35:58:63:8E:D4:D1:16:EA:11:A1:20:E2:73
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 0198D66106808F18E91E0F07194D78317B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 1148
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: cwT7b/9eTVN20N0b57YOx2KfRAZXnFmediq3NFSWQHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:06:80:8f:18:e9:1e:0f:07:19:4d:78:31:7b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=28b061df7416d93558638ed4d116ea11a120e273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:34:df:2c:a0:f3:8d:c7:13:0e:3d:9c:7c:
5a:23:73:d0:a6:10:d6:e6:34:46:51:64:e9:1e:67:
20:79:76:a6:ac:d1:17:89:19:3d:28:ca:ab:ad:b4:
95:16:35:51:18:4c:67:05:e3:09:9d:33:fe:8a:92:
d7:5b:5c:bc:bb:d5:da:e2:59:04:dc:66:2d:d7:66:
b2:23:c1:3f:c1:89:d8:81:7f:92:6d:23:a6:ff:32:
b6:9f:c8:77:03:af:a9:3d:7f:7d:1c:9e:c3:4c:3f:
69:6f:31:a2:29:f1:0a:2e:61:a1:88:95:80:ce:fa:
f4:e5:ec:fa:46:fd:fa:e2:52:04:ee:be:f4:65:01:
f9:59:95:b1:ef:5b:3f:9a:60:6c:d8:43:7c:db:ea:
c9:43:01:56:39:54:f4:3b:e8:4c:a2:59:96:a5:cc:
9e:4f:3a:35:0f:9c:7c:55:4b:5a:a1:57:2b:29:32:
db:9d:f6:15:cb:2c:f6:20:26:ce:5d:78:83:d9:2d:
a4:08:ad:34:59:44:f9:3d:41:e9:8d:cc:c2:3c:54:
6a:4b:ea:9c:6b:8b:0f:91:97:c3:48:b1:3b:9c:82:
75:92:ac:5e:19:d7:04:eb:b7:95:6e:c8:b6:82:55:
33:12:95:29:08:46:83:6c:2f:6e:1c:84:3d:80:71:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:61:DF:74:16:D9:35:58:63:8E:D4:D1:16:EA:11:A1:20:E2:73
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a8:a1:7c:28:7f:7f:3d:c9:1d:60:a1:d8:83:ed:16:10:56:
d3:8e:ac:44:d6:f2:8a:20:e4:9d:9d:05:6b:a8:95:62:b8:49:
ab:5b:4b:09:ff:f1:f7:c2:2e:40:50:b1:f1:6d:1f:92:b0:84:
4d:a9:5d:a9:f4:b5:34:f5:92:37:12:4a:8e:d0:b8:02:f5:c5:
6f:ce:9c:cd:4f:a3:23:1b:fa:84:3c:ef:32:c4:cd:c8:6b:ca:
ef:fe:3f:5b:f6:ca:49:3d:29:74:5b:7b:3d:26:c7:37:d6:44:
20:e4:27:bd:79:9d:2f:2c:d1:eb:c6:e1:81:04:6c:80:01:e6:
36:22:f6:fc:20:01:68:22:f3:e9:1e:e4:76:2f:36:60:74:0e:
f2:d4:08:fe:6a:b3:02:16:05:2f:28:f7:6f:76:67:b3:d5:77:
6c:a3:ef:09:62:aa:7f:a1:4b:81:d3:a8:be:8b:48:02:82:cc:
ee:b4:57:f4:42:2a:44:df:a7:9c:86:90:a5:5e:1f:13:94:19:
19:e7:45:05:21:c7:78:6b:dc:c0:3a:95:0b:3b:bc:5d:39:15:
52:5c:88:e6:30:45:27:9d:48:fa:91:ef:8d:1e:ce:fe:b5:c2:
e0:e3:65:fb:a2:c6:30:a6:28:67:f8:ba:cb:2a:97:7e:49:b4:
9c:1a:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:16 2025 by rpki-client