Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: xaPwXzQnEEMHwQ6T8hvjFNgaxo6KhZfokkWxqMGrCLg=
Subject key identifier: 77:67:31:70:A4:A3:F0:0C:4F:D5:31:C5:39:27:FB:87:61:E5:A7:A8
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 0198D6609BADA82553208B7F8235BC98EBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: GXbIE+55E7oGalQBiCn+gx6fFMf/3c07n2mEqfmkhvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9b:ad:a8:25:53:20:8b:7f:82:35:bc:98:eb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=77673170a4a3f00c4fd531c53927fb8761e5a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:6f:f8:3c:aa:38:72:99:d8:68:89:ea:2e:
39:fa:21:50:72:7c:13:97:29:a5:fc:8b:4f:50:ba:
af:3a:3d:04:67:01:c0:0f:1a:5c:6f:a2:8d:52:7b:
b2:1f:2a:45:d9:a6:80:ab:65:53:2a:59:3a:0e:84:
d8:5e:26:0d:87:aa:bd:3f:44:76:5b:25:46:f9:fc:
46:11:dc:af:20:f1:39:ed:9d:91:43:9b:f1:15:0b:
19:8b:c5:ff:7f:88:45:ee:5b:2e:b2:ee:30:4e:e5:
45:af:fb:0c:cc:8a:a6:c0:ea:9f:03:0f:a8:62:a0:
c0:e9:9c:fa:88:6f:87:07:f6:2b:e2:8c:3f:6e:43:
01:fe:90:aa:a0:d5:3a:56:cd:4d:de:43:ca:af:c3:
a8:40:ae:91:6a:e8:2a:1b:4c:14:06:cd:d6:df:a6:
a7:80:bf:c5:7d:a7:4c:bd:db:8f:3b:57:64:14:8a:
97:a2:e9:b2:a1:ea:08:60:d2:a3:fa:31:5a:12:8c:
bc:34:3a:db:a7:e3:42:ed:66:1d:e2:d9:9d:b5:83:
b6:a3:47:9f:13:05:53:2b:0a:7a:e3:95:8a:3f:5b:
18:52:1a:07:82:bf:6f:38:59:c9:ed:96:33:a5:b1:
e9:1d:00:f2:4f:5f:b5:eb:70:fa:5c:2b:ac:c5:0e:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:31:70:A4:A3:F0:0C:4F:D5:31:C5:39:27:FB:87:61:E5:A7:A8
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:4d:20:8b:dc:47:81:69:50:d5:84:47:f2:b2:05:aa:c3:
d7:c6:e1:58:f2:a5:a3:23:c1:6a:35:c4:09:47:6d:75:97:ec:
e8:db:c5:6f:db:ce:09:fa:d6:7a:a2:7b:d2:79:40:1a:0b:41:
ac:02:94:9b:af:fb:10:dd:f6:52:74:4b:dc:a4:65:06:8c:67:
3f:39:b6:54:b6:ab:4d:d9:65:d8:17:db:5f:3f:2c:c7:b2:64:
12:91:8e:6b:99:bb:a0:60:77:03:b2:cf:ed:0e:e3:5d:d2:fb:
b1:1e:47:c5:6a:94:c8:44:ae:ef:31:3c:6d:10:ad:56:3f:98:
8d:a4:9d:17:2e:15:24:b8:22:39:ab:91:18:78:b7:78:e5:91:
c1:ed:3e:f1:04:5e:4c:e7:69:30:49:ff:2a:fb:f0:ff:35:07:
bf:40:ae:82:c0:24:a3:0c:da:d0:93:80:2c:35:30:a9:05:63:
1e:01:55:04:f4:d4:15:f2:11:1c:57:f2:7d:bb:cf:4a:88:23:
34:69:8b:6f:29:bb:57:ff:bc:7a:d2:14:ef:22:b4:bf:58:0e:
74:42:52:ba:bd:a9:2e:fa:1e:99:c0:45:5f:68:dd:96:cb:a8:
41:65:a8:8f:0e:21:2b:6f:1a:a2:5c:50:83:38:1d:c1:5d:f0:
9c:6c:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:23 2025 by rpki-client