Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: XFd+gMqiojkwg9HVB88boR/Lc6i8ybTOUKzTE73Xvw0=
Subject key identifier: 8D:49:B6:E7:B6:23:D3:19:8F:78:A9:B7:23:35:36:23:92:0F:52:F4
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 0198D583682722B2D36B344BCA92E96B3FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 0159
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: af2aWtraUYrxRN0ZUy+FcdIj3mNkdq5CAA8zAPFPKV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:27:22:b2:d3:6b:34:4b:ca:92:e9:6b:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=8d49b6e7b623d3198f78a9b723353623920f52f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:ad:ea:1e:fd:57:f2:b2:2c:ee:61:88:c6:
ba:e5:65:e1:19:64:61:34:26:ca:e5:2d:fb:86:46:
ae:b8:b5:c7:69:7b:0b:f8:11:65:7a:2e:43:0b:09:
0c:16:a7:0b:71:13:eb:29:8d:a1:3b:2a:37:9e:d4:
5a:60:2c:fd:31:b9:36:b6:84:43:64:8c:49:bd:17:
22:d4:41:fd:38:22:ec:fc:b1:fa:81:bf:e2:d1:b6:
29:ee:d0:1d:2b:e3:d5:b7:4a:9a:0f:70:89:fa:2e:
2a:66:28:02:44:23:ba:64:dd:30:7a:e5:db:d0:6e:
f3:65:15:2a:0f:d2:16:a3:fc:bf:54:f7:82:85:7b:
30:ac:95:38:6d:5d:9d:ff:9d:d5:40:ef:ea:e3:e3:
b8:85:e8:79:db:fa:27:93:c0:46:13:c6:f1:fc:c3:
d8:6b:c3:fe:5f:e1:1e:b0:a1:27:d9:a7:54:65:b8:
72:51:59:8f:eb:cf:c4:c2:e0:cf:0c:ed:88:9c:f0:
1a:c0:de:6b:84:59:7d:35:8f:8a:56:b3:ac:1c:f8:
72:fd:14:1b:28:1a:68:f7:eb:c0:21:a6:63:a6:20:
f9:33:de:a4:d4:10:d3:35:0f:d2:9b:d6:c9:d5:15:
06:9b:67:b4:8f:3e:f5:c4:12:3f:a0:49:cd:be:64:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:B6:E7:B6:23:D3:19:8F:78:A9:B7:23:35:36:23:92:0F:52:F4
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:70:af:e4:e1:33:3d:05:5e:95:6a:a5:ed:e1:02:b6:24:09:
12:7c:7b:0d:91:7c:8f:52:9f:02:07:87:a9:a0:05:06:54:54:
41:85:26:0e:4d:ca:7a:ba:0e:01:75:09:9e:6a:7e:32:fe:2c:
e4:0d:65:d3:ea:94:7c:44:a4:43:f7:9b:84:4d:8c:87:48:10:
e9:c3:52:14:26:55:ce:04:92:50:a1:a9:14:37:8c:a6:e8:89:
f4:61:5d:c6:29:c4:69:b3:a8:c9:ad:5b:a3:24:90:6d:a3:2f:
5c:90:36:85:60:3d:9d:6e:62:ea:4b:2b:3f:68:3c:2a:b6:e5:
ab:3b:95:ae:97:a4:96:85:9d:3d:56:06:2d:31:8d:b5:9c:8a:
91:f4:c0:50:8d:2f:3f:93:7b:b4:fc:c8:5e:8a:f7:97:4c:9e:
07:c8:47:04:8c:ea:ab:41:3c:09:8d:33:7a:a1:fa:0a:04:31:
9c:e0:0c:04:be:76:59:b1:a2:43:74:ba:4b:5e:61:cb:3e:d8:
41:73:b2:f9:c6:cd:60:33:fb:36:00:9d:16:59:fe:ed:ba:a1:
4f:4d:75:bb:ef:01:d1:ac:45:91:85:75:20:33:52:36:24:2b:
49:6f:5f:01:15:96:e1:20:69:31:9a:37:e5:f8:f5:46:2d:5f:
ea:17:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:25 2025 by rpki-client