Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier: RetAKZOFhTB4Cwr0qJfPRe8OZH2pvAisDr7n9RMiym0=
Subject key identifier: DD:6A:29:4C:18:DA:80:0E:42:56:D2:F5:07:6D:8F:DE:DC:F8:C8:65
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial: 0198D73B385267EECD4098608F1A1BCF0295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number: 0FAB
Signing time: Sat 23 Aug 2025 14:00:39 +0000
Manifest this update: Sat 23 Aug 2025 14:00:39 +0000
Manifest next update: Sun 24 Aug 2025 14:00:39 +0000
Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: JXsfiCTTXISazZDZAZaQ+6Y1SNIdgLJC3Je00kth+w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:38:52:67:ee:cd:40:98:60:8f:1a:1b:cf:02:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Validity
Not Before: Aug 23 14:00:39 2025 GMT
Not After : Aug 24 14:00:39 2025 GMT
Subject: CN=dd6a294c18da800e4256d2f5076d8fdedcf8c865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:16:1d:16:42:31:a7:b0:42:86:1b:5d:5f:
9c:da:b2:57:08:80:3d:0b:8d:3a:3c:a5:00:22:df:
31:96:16:83:63:e7:d4:3d:46:1e:fe:78:32:1a:55:
b6:b9:4c:2b:a5:bf:e3:72:01:6a:cb:5d:17:dc:8e:
bd:dc:db:20:9d:75:b7:a0:1b:73:75:fe:0b:7e:de:
9b:ef:3b:c1:27:b3:cd:30:ca:fb:49:7e:ae:bf:88:
d6:78:65:b5:35:98:22:d5:d2:06:13:ac:0b:49:29:
c5:6e:73:ff:62:6c:94:dd:14:c3:93:88:86:98:49:
1a:48:71:b7:5e:c7:17:15:f4:03:b0:71:09:d0:56:
d1:dd:2a:87:09:f8:c2:5a:52:01:51:2f:98:b7:ea:
87:79:0d:54:0a:79:b7:75:22:2b:86:02:5a:cd:d4:
3d:41:47:07:dc:93:da:f8:4b:fe:96:23:83:b7:b8:
d9:54:15:0c:75:ac:f2:12:d7:d8:64:17:81:a7:24:
2b:63:0b:35:3f:aa:67:96:3d:50:d8:84:5f:d0:a4:
ac:04:aa:76:da:90:cd:31:f8:c2:ae:23:e0:00:3d:
4e:cf:b7:bc:ce:94:8b:b6:27:55:0a:73:7e:c8:18:
54:9a:af:7b:02:fc:38:b7:4d:d0:a8:4d:e6:12:c2:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:29:4C:18:DA:80:0E:42:56:D2:F5:07:6D:8F:DE:DC:F8:C8:65
X509v3 Authority Key Identifier:
keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0d:b2:ae:c6:ae:7a:be:a5:37:85:62:2a:2c:a7:cd:cb:84:
07:c3:b9:ce:ac:b1:ef:15:69:1f:78:3d:8f:e5:d9:24:00:42:
61:78:35:8c:6b:b6:fb:e8:24:f0:e4:46:13:c1:7f:e4:a1:15:
d1:3a:17:fd:a4:a0:9b:e0:f5:f3:27:ba:e4:96:e9:78:d0:ca:
1e:49:a2:07:8b:7b:85:af:af:fe:87:87:fe:f0:75:63:a6:03:
e2:8f:ba:ac:22:7e:59:30:fd:ba:f9:36:50:02:3d:56:bc:5e:
8e:0a:f1:6e:b7:ec:6b:6d:89:02:83:be:dd:c3:66:24:f0:00:
10:b2:96:15:a5:f8:4c:c2:0a:8e:0e:08:18:ed:2b:d5:d6:82:
69:11:e9:4b:5c:5f:30:4f:e2:39:7f:19:03:91:9e:27:22:b4:
8e:92:1b:d5:70:95:a9:1f:39:32:0d:00:44:4c:25:ae:56:d1:
e7:95:33:07:41:a0:51:d5:c2:5b:ef:f1:50:fb:32:b5:4c:20:
29:88:b2:a6:f0:46:47:be:d3:97:1f:2f:7a:e2:96:41:44:5a:
af:c1:a8:e9:95:64:84:82:1a:6f:6e:ae:4c:72:c2:4f:00:cb:
45:f4:09:cb:c0:33:41:4b:fc:08:cb:92:f9:f7:1d:81:9b:62:
e0:e7:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:27 2025 by rpki-client