Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: zJ3ia55s5nTm/b1VSnFpRk7TAaUXcLQSzOeI49ji78k=
Subject key identifier: 46:82:BD:E7:F1:FB:D2:7D:DF:F5:DF:88:17:C2:9C:0C:44:77:D7:AB
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 0198D73BAA199CE08B93E8705A1B9D5ADC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 0674
Signing time: Sat 23 Aug 2025 14:01:08 +0000
Manifest this update: Sat 23 Aug 2025 14:01:08 +0000
Manifest next update: Sun 24 Aug 2025 14:01:08 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: a8yk0gQNmi8MZSrwKxAhZp0ierC/ht66J/3Eo8WdNuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:aa:19:9c:e0:8b:93:e8:70:5a:1b:9d:5a:dc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: Aug 23 14:01:08 2025 GMT
Not After : Aug 24 14:01:08 2025 GMT
Subject: CN=4682bde7f1fbd27ddff5df8817c29c0c4477d7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:9c:d6:26:b0:59:24:01:5f:ce:e3:a2:fd:
7a:b6:ba:66:4a:2d:9d:eb:3e:de:48:9c:be:2c:7a:
d5:1c:ac:62:ae:53:d4:bd:3e:a4:8c:e2:17:86:a3:
5c:81:e1:43:a8:56:64:db:f9:8d:32:42:a2:a5:b0:
fd:03:ed:e5:a0:76:f2:45:8e:34:21:50:19:34:84:
76:89:97:0a:de:f2:c3:c3:db:b2:fb:4c:14:08:08:
43:cb:9e:69:01:e1:15:86:58:e9:e8:f8:92:b0:50:
84:a7:8f:34:16:fb:ab:5b:57:e7:12:0a:89:4f:19:
26:81:a2:78:a7:e3:94:2b:7f:13:8c:fa:91:a2:90:
67:25:0e:5b:3a:b3:d0:f5:ab:76:b0:49:d2:3f:e4:
ef:15:46:9f:a8:62:f0:ae:f9:fb:8c:e7:46:5d:97:
f8:d1:f4:c0:91:64:4c:e3:02:43:c2:b0:57:d0:66:
11:20:2c:1e:63:8c:c0:0b:fc:e5:ff:61:b4:b5:b7:
c2:1e:7a:b4:a2:80:53:fb:1b:65:29:1a:36:3a:e6:
1a:28:72:72:b9:ff:17:7d:13:91:dd:5c:77:94:85:
a4:87:8f:06:a3:14:be:78:ff:02:e1:cc:b7:64:b0:
e2:0b:51:e9:e6:61:a7:e7:d3:58:0c:8f:68:9d:9d:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:BD:E7:F1:FB:D2:7D:DF:F5:DF:88:17:C2:9C:0C:44:77:D7:AB
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:cb:96:d4:63:84:eb:70:62:0f:17:84:9f:08:4b:61:7e:
ee:eb:50:d4:7c:63:d4:52:24:77:83:52:3d:fa:b6:c6:de:6e:
70:9d:d1:3d:bf:e5:ea:d6:3a:9c:61:e6:e3:78:e7:18:39:fb:
74:b9:b0:a3:d8:c0:69:3d:38:80:32:cf:fd:a2:db:c5:fe:7e:
3b:7c:da:a0:2b:fe:68:ad:31:32:bc:06:dd:16:cc:7b:1f:d1:
14:ba:44:41:25:3d:f6:50:98:cd:2f:37:3b:48:1d:dc:51:55:
47:96:f3:b1:1f:0a:be:ae:3b:69:09:81:99:af:76:33:35:e9:
78:e9:14:61:b4:1d:32:50:ea:35:32:98:64:e0:5b:8a:bf:da:
a8:be:26:3e:f9:ca:3b:23:cb:07:bb:92:0c:c8:f6:44:01:b0:
5c:0c:35:e7:77:c4:97:77:e8:27:e6:40:1d:82:1d:97:ec:bb:
c2:cd:bd:2b:1d:7e:08:13:47:77:19:ff:e6:ef:86:b4:ae:b5:
ef:d3:f0:7a:37:f4:83:d6:bd:b5:c5:c8:e0:33:66:c8:eb:2c:
cf:a1:d3:e2:f8:12:80:7f:8c:40:15:99:c8:2f:29:42:69:69:
6d:17:70:5a:ef:94:1e:fe:b2:18:98:44:e2:39:6c:50:53:8f:
47:24:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:10 2025 by rpki-client