Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json)
Hash identifier: JTZIxerjuEzd9mnLPSAf/vMArNHgamMA+UXQY0rz97s=
Subject key identifier: D0:7D:A0:1A:75:3E:4D:26:46:83:D2:2E:07:D5:9B:76:C1:B0:9D:B8
Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Certificate serial: 0198D705B9C20EB9550FD9BFE54D6E077DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
Manifest number: 79
Signing time: Sat 23 Aug 2025 13:02:13 +0000
Manifest this update: Sat 23 Aug 2025 13:02:13 +0000
Manifest next update: Sun 24 Aug 2025 13:02:13 +0000
Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: PEoc1948Fm/IbD/kT/QfY8bYdiloOoWz6OhnCKDh/qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b9:c2:0e:b9:55:0f:d9:bf:e5:4d:6e:07:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Validity
Not Before: Aug 23 13:02:13 2025 GMT
Not After : Aug 24 13:02:13 2025 GMT
Subject: CN=d07da01a753e4d264683d22e07d59b76c1b09db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:04:05:1e:43:37:1c:f3:ce:7e:e9:8b:96:
7e:4e:cd:fd:d5:17:98:fb:4f:d6:35:6e:13:f8:31:
c8:5a:39:65:5f:68:13:8d:7b:7d:8a:d7:72:26:ff:
34:39:07:b9:11:0a:12:c9:bd:5e:c3:8b:6c:69:ab:
b6:1b:02:2c:50:da:71:8b:ea:6a:2c:9e:3d:81:82:
b3:fc:a1:f0:3c:a9:47:fc:8a:11:e1:8b:ac:8e:49:
4f:60:43:06:93:df:5c:7b:1a:22:23:20:85:78:42:
28:41:6d:06:8f:3f:35:46:a3:27:58:6c:5c:fd:f7:
af:98:5b:0f:16:2a:3b:0a:d4:e2:f5:ab:d0:24:70:
86:87:76:fa:fe:58:ab:3e:5a:7e:e5:f1:12:26:a0:
fd:ad:84:3d:a2:01:aa:10:7f:a4:6b:ed:44:35:d9:
9b:13:a6:ee:53:25:6b:c6:dd:9c:a1:b6:89:b1:52:
bc:21:8c:b2:2e:db:64:bb:37:11:99:db:51:65:30:
35:0d:3e:3f:c9:80:27:40:fe:ac:63:02:82:a6:99:
c1:7c:96:59:59:75:db:29:19:62:b9:d7:ac:1f:56:
4e:94:f8:ab:09:4a:3e:38:e9:f7:64:cc:a9:63:49:
2f:30:15:f8:67:2b:c0:90:d6:88:4d:54:69:3e:be:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:A0:1A:75:3E:4D:26:46:83:D2:2E:07:D5:9B:76:C1:B0:9D:B8
X509v3 Authority Key Identifier:
keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:e0:6d:66:b8:da:c4:dc:ed:f2:1b:df:44:97:35:f2:01:
65:f2:47:91:a1:cd:07:36:d0:0a:e8:db:4d:7a:02:c0:93:38:
e8:f2:27:1f:5c:99:64:74:fb:0d:b0:b4:5f:8a:fd:50:ed:16:
98:b8:14:59:9a:bc:10:be:11:62:01:1b:a6:bb:d0:29:61:12:
c0:ca:4f:17:31:b0:ef:55:4e:93:7f:92:89:27:17:72:8d:49:
64:3f:a5:01:0e:d8:e4:d1:6a:d1:6b:0d:5d:27:52:82:8f:fd:
83:98:b1:49:30:3a:d1:7a:e8:95:5e:d2:38:c5:e4:f4:22:00:
bb:2b:d3:36:35:bd:a4:72:49:b8:68:73:35:de:02:27:db:ad:
9b:db:61:6d:77:2a:95:0a:46:1f:6d:49:58:d8:7c:7b:4d:25:
35:5c:67:57:fa:1b:78:59:48:98:ae:f8:1c:ec:7c:9d:81:f0:
73:50:a6:04:26:58:a5:c4:7d:e2:35:1a:be:ad:56:37:68:9d:
f7:ab:50:a0:25:3d:f4:47:ff:f8:97:f8:4f:47:98:51:7b:b8:
2a:c5:f7:0b:fe:b0:23:6e:f3:22:5e:c1:ff:9d:d0:2d:7c:b5:
c9:4c:a8:ab:04:de:4b:44:32:73:e1:53:f9:05:db:88:da:10:
82:f3:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:31 2025 by rpki-client