Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier: m+zdRxQGAP3rX96Z+dg6jYWmwPXnrZePY4cSkYNwjyw=
Subject key identifier: B2:7F:01:F1:EA:F7:7E:FE:40:14:53:DC:9F:DD:F0:43:ED:29:F9:C3
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial: 0198D73B17B8AB53526F031CBAFEAF59E11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 14:00:30 +0000
Manifest this update: Sat 23 Aug 2025 14:00:30 +0000
Manifest next update: Sun 24 Aug 2025 14:00:30 +0000
Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: yulY0vA76rVzeUJH5iu1n4HMso7dQ/A0XKD9ria+gYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:17:b8:ab:53:52:6f:03:1c:ba:fe:af:59:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Validity
Not Before: Aug 23 14:00:30 2025 GMT
Not After : Aug 24 14:00:30 2025 GMT
Subject: CN=b27f01f1eaf77efe401453dc9fddf043ed29f9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:dd:d1:e9:ec:a1:71:b3:d9:6f:bc:93:bb:
f5:64:2d:ed:72:a9:a3:86:6b:d1:e3:1d:24:45:79:
c9:9a:08:9e:7e:e1:a9:f9:22:48:03:88:45:cf:92:
e5:83:03:fd:10:22:cf:54:ce:de:f7:02:24:a4:25:
ee:7e:0a:1d:45:d8:34:8c:fa:28:db:2d:f8:cb:64:
76:98:9b:5d:fc:8c:23:47:6b:96:c0:ff:46:d0:fd:
7d:e7:af:82:c1:00:4d:fb:87:bc:e5:73:e4:9a:7d:
16:42:b7:5e:73:76:68:0e:95:fb:94:fd:6b:5b:65:
fe:e8:07:80:9b:bc:b3:e6:a3:4b:27:a5:95:02:fb:
7d:cb:8a:6e:ec:79:a3:a0:21:8d:71:e9:96:63:42:
03:ec:af:10:33:c3:12:79:c1:c2:02:c7:1b:e2:ce:
bc:b3:6c:88:07:7a:0b:b3:29:90:28:9f:12:d6:c4:
8f:4f:ba:9a:e3:c7:88:07:61:26:e5:28:5a:8c:94:
0f:dd:38:f0:64:3b:54:1b:52:7b:81:b9:38:94:ed:
8d:13:33:8f:d4:aa:78:8b:05:62:52:43:bc:1b:5f:
4c:25:49:49:2b:90:b6:9c:17:4a:22:5c:eb:54:58:
11:2a:a8:9c:6a:3f:7e:d1:56:95:f4:3e:ef:c4:6b:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:01:F1:EA:F7:7E:FE:40:14:53:DC:9F:DD:F0:43:ED:29:F9:C3
X509v3 Authority Key Identifier:
keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bf:13:14:e2:a1:c8:6b:cd:9b:2f:dc:97:9b:fc:01:0d:b1:
16:bc:4c:93:32:1c:42:51:29:cd:41:71:79:a8:43:4a:91:9f:
a8:fc:a4:00:7f:3f:59:42:ba:61:6d:c2:d2:a6:4a:73:5b:94:
1d:8b:cf:74:c9:66:56:e5:28:5e:20:ad:56:7d:ca:7a:06:bb:
a7:d7:5c:34:8d:f5:b2:01:74:b5:96:3e:3c:90:7e:49:49:06:
f9:0d:b7:4b:5b:8d:d5:3e:94:f8:ce:bb:4a:25:b6:20:ac:dc:
b3:cf:42:d6:8d:1c:34:91:92:99:cd:ad:89:e0:bb:0a:59:ae:
48:55:bc:a8:31:9f:03:a4:50:8a:ee:1a:05:5f:71:7e:14:b8:
b6:ea:d6:8d:7e:e0:ac:1b:60:7e:67:45:f7:27:25:27:f7:63:
7b:9e:ee:ca:6e:ab:66:34:6c:c6:6e:17:0c:bf:20:18:84:24:
ba:7c:4f:5a:37:92:50:10:4d:b9:35:aa:f7:4f:ca:4f:46:f5:
f4:88:b1:12:91:61:a3:4b:47:84:a5:10:1c:1b:38:81:b4:81:
d0:30:c7:f4:f9:74:9a:0f:bb:d1:6d:71:b6:f0:d4:c0:d9:80:
8d:3e:60:22:00:0f:e4:3c:cf:0f:39:b7:2a:44:e1:a8:08:db:
85:6a:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:08 2025 by rpki-client