Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: 1Rx8bRoUWrl9uhvdjnq6hniQ/ZcixUlfIZ5fy/Hi0uc=
Subject key identifier: EB:F8:E0:FC:1F:0E:2D:2D:C5:DD:66:46:69:56:C0:1B:8D:24:8E:FC
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 0198D472BFDCAF2C4D4B73CF6E8F174989EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 06F0
Signing time: Sat 23 Aug 2025 01:02:26 +0000
Manifest this update: Sat 23 Aug 2025 01:02:26 +0000
Manifest next update: Sun 24 Aug 2025 01:02:26 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: frwRb755ZKz3uqAO1iLjplcBqZsCiWF+ae/BvhhldrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bf:dc:af:2c:4d:4b:73:cf:6e:8f:17:49:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Aug 23 01:02:26 2025 GMT
Not After : Aug 24 01:02:26 2025 GMT
Subject: CN=ebf8e0fc1f0e2d2dc5dd66466956c01b8d248efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:7f:39:14:73:28:a8:9c:50:f1:df:63:d1:
0a:d3:fc:e9:0a:27:e1:f3:67:b4:c6:68:ea:49:ae:
e4:68:a3:92:4a:53:e8:01:2e:0f:af:19:60:a3:ed:
71:15:46:7e:12:9b:4d:7b:6b:bd:f3:28:16:af:b3:
5a:22:f8:06:3b:ba:2a:8d:be:b3:3c:43:24:56:61:
98:81:7e:f2:48:e4:76:3e:fa:9e:50:1c:f8:24:5a:
65:8c:36:32:82:11:f9:14:54:ae:55:69:f5:21:2b:
1d:71:d9:87:5f:22:c0:7e:03:b0:fc:05:fc:c8:2e:
fd:92:51:81:97:03:26:ff:f9:85:d9:bd:14:ab:fc:
a5:f5:ca:e1:d4:0d:f9:a4:7e:78:f3:fb:f8:11:ba:
1b:c1:fb:c5:41:85:fa:70:99:db:3b:20:6d:fc:4f:
0c:0a:ce:d6:c2:4f:8c:12:2b:5c:39:cd:29:df:b1:
66:4a:fb:41:45:48:60:04:47:8f:b1:8e:e7:e3:e7:
4e:d7:2b:2a:e4:b0:c2:79:55:94:36:9f:09:62:95:
58:8d:be:f3:90:3d:b1:85:40:12:3e:5d:6f:57:56:
65:35:42:6a:f2:24:b4:6a:cb:d6:a7:2e:1c:e8:60:
9d:74:40:2c:9b:f8:5f:f0:1a:89:81:e2:7f:11:5b:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F8:E0:FC:1F:0E:2D:2D:C5:DD:66:46:69:56:C0:1B:8D:24:8E:FC
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:47:07:59:07:16:9e:88:af:50:ab:4c:8f:8a:d5:ed:93:4e:
de:af:fc:3d:e6:77:3d:62:3f:3c:d4:17:63:37:1f:cf:a8:86:
db:e2:24:47:05:46:32:39:cf:27:05:5b:cd:6c:8c:b9:fe:f5:
10:50:e6:79:e3:d7:fe:93:0e:7f:e1:10:09:71:37:d9:d7:05:
f8:a4:6b:63:aa:6e:c8:f0:90:54:09:bc:1d:c5:d4:d8:0b:cc:
18:52:18:6b:05:25:2a:f8:9e:09:5f:66:8d:2f:56:fd:44:d7:
8c:10:3e:2c:ba:e2:4d:33:ad:43:bb:2f:34:2a:1d:67:f0:b4:
e4:92:9d:40:d8:2e:2f:e8:48:6b:7a:05:6c:a2:f9:b0:8f:0f:
dc:2c:f4:73:6e:36:63:0e:b4:dd:aa:fa:c2:fe:11:bb:24:3d:
39:63:e2:b6:13:25:d3:19:e2:07:ec:12:cd:10:21:92:49:da:
80:cc:2d:1c:d9:39:4c:19:d3:b2:01:a1:1a:5f:38:b2:0a:d1:
c0:50:7f:7d:23:dc:bd:d6:96:48:bf:78:6e:5f:78:8c:68:27:
ff:6c:85:f6:fa:ed:04:c8:2d:f0:21:5d:77:a1:d0:6a:42:4d:
31:54:38:81:3a:af:df:a2:7c:66:a7:6d:e8:03:cd:45:10:15:
28:e4:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:22 2025 by rpki-client