Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: PuQlMoE5AbGcJx3+MYARXxdgPg31jf+2WwEI85DDAXc=
Subject key identifier: D8:7D:9B:08:3B:C9:49:A1:61:4E:4D:D7:74:0C:FA:DC:09:57:5D:DA
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 0198D5BBB9BBC62842424C7C0D6FF3156B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0DB7
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: hTwUIPpwRVxrpWJ3Tq4fTvyPmDTM0jtuC4R3A0wSbIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b9:bb:c6:28:42:42:4c:7c:0d:6f:f3:15:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=d87d9b083bc949a1614e4dd7740cfadc09575dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:b7:9a:01:3e:3c:ec:60:48:14:b1:2d:65:
89:6f:61:7a:87:fe:16:fa:61:dc:f8:2e:34:25:57:
cf:4b:9a:5a:ef:46:1c:aa:80:02:c3:36:30:58:a8:
67:3f:7e:37:86:59:5b:22:4a:f9:c3:b0:38:13:fb:
d0:ed:d4:d0:f2:58:f3:46:0e:c1:01:ed:ac:13:17:
bb:56:ba:b5:8c:d8:a3:13:4b:23:b6:26:60:74:c8:
32:bb:cb:ac:c5:51:57:2b:27:63:eb:b3:00:70:2a:
60:72:f2:c3:38:6e:50:6c:c2:0a:22:fb:30:b0:75:
eb:9e:3b:01:ca:4b:df:ad:7c:8f:2b:37:ef:b2:72:
74:39:50:f0:e0:9a:ed:5f:b2:df:21:64:f1:43:48:
d8:40:ad:8b:2a:6f:06:95:e3:45:83:5a:ce:59:ce:
65:04:30:40:7a:79:7b:90:71:b7:c4:5c:66:31:b4:
33:4a:a3:42:51:38:1c:80:71:46:a9:f9:53:ae:41:
bb:f3:0e:02:f9:56:eb:2d:b3:e8:39:2d:68:1a:06:
e3:85:f0:ad:89:65:03:eb:35:50:a8:15:1b:2b:80:
f7:5e:8c:cf:a1:14:8b:df:bb:7e:f5:02:94:5a:47:
aa:0a:88:76:27:55:14:92:9b:89:5c:dc:c3:e2:4b:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:9B:08:3B:C9:49:A1:61:4E:4D:D7:74:0C:FA:DC:09:57:5D:DA
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e7:47:cc:bb:b3:46:8c:6f:48:65:c3:97:c1:51:1f:5a:cd:
2e:36:4c:0e:94:8a:10:8f:76:65:4e:b9:df:2a:15:2e:f4:ae:
50:fe:1f:2d:cc:9b:a6:b5:89:da:ab:8f:b0:2a:18:00:82:ad:
69:8d:d9:1c:7b:86:5e:7d:ba:52:81:f8:b9:d0:54:31:fd:be:
1c:d7:a0:20:4d:14:69:e2:1a:d5:e8:1a:b1:45:30:10:34:13:
42:88:04:0e:cc:53:68:b7:6e:8e:e4:a4:25:b3:d7:45:af:ad:
a0:55:ea:4d:b3:62:40:3b:b2:87:58:e8:88:fe:fa:fc:f1:07:
03:c7:c0:db:db:8a:1d:92:e5:fb:20:8b:3a:c2:5e:1d:66:fb:
d9:f0:2f:03:d3:1f:5f:1d:58:7b:2f:4a:34:ec:4e:65:4e:6e:
11:a4:fa:e1:e5:bf:06:9f:03:2c:3d:37:70:ca:6d:4c:05:5e:
28:c7:9b:95:63:b0:64:2e:d9:62:7d:4d:f8:04:2c:84:2e:f1:
b7:66:91:07:e8:7e:9e:7e:bc:65:d6:bf:2a:da:ee:3d:00:84:
e8:d8:fa:33:a9:f0:75:a8:2e:d8:2f:a9:ad:a0:59:fc:7b:b2:
ca:ec:9f:a4:8d:2f:bd:76:c3:80:b1:52:62:73:86:16:f2:76:
bb:32:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:09 2025 by rpki-client