Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
File: YxB3zMSCuRtFmfUslKiJABOSSf8.mft (raw, json)
Hash identifier: CjV/Y4yoCWUIwoC/goJWdFyAjvrYDAj2VcqmYB0k5+c=
Subject key identifier: E7:40:D8:13:3B:71:7C:E3:5A:AA:9D:4F:63:C0:B4:69:14:0C:4C:28
Authority key identifier: 63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
Certificate issuer: /CN=631077ccc482b91b4599f52c94a88900139249ff
Certificate serial: 0198D54E04789ACFB81A2ECCD183D75F6C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
Manifest number: C2
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: YxB3zMSCuRtFmfUslKiJABOSSf8.crl (hash: lUvv2/F/Ariu0ugExQTbipB9Jt5HxhlDWpCBH1R2jpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:04:78:9a:cf:b8:1a:2e:cc:d1:83:d7:5f:6c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631077ccc482b91b4599f52c94a88900139249ff
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=e740d8133b717ce35aaa9d4f63c0b469140c4c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:0a:92:a0:80:f5:66:a6:80:04:ab:0f:7f:
33:0b:3a:14:e9:b2:5e:5e:d1:e4:51:4a:dd:e1:94:
10:4b:f6:ff:87:05:01:8a:e0:d6:14:3e:52:da:db:
30:99:91:be:33:99:55:97:d8:6f:b4:05:39:ed:d7:
e0:13:fa:63:d4:ee:78:62:e1:a8:02:cf:d5:99:19:
7e:4f:da:2e:db:2d:f4:c8:46:10:cd:a6:df:e3:e4:
4d:39:a1:1f:70:1f:36:88:74:5b:12:57:a8:61:97:
ea:89:db:0c:1f:03:49:17:23:05:7f:0f:ec:b7:2f:
32:5d:03:de:72:39:bc:5a:36:4d:dd:45:2c:1b:61:
8f:ff:ef:9c:5e:f3:21:45:db:d8:fe:19:02:6c:d0:
8c:e6:de:26:87:f7:0e:86:37:53:d1:0a:11:47:6d:
f1:3f:d8:c3:25:bd:d5:e2:ce:8f:60:00:dc:67:2f:
7c:0a:5f:1f:7d:8a:27:ce:83:4a:ae:70:4b:74:96:
0f:f6:a1:9f:03:83:e8:80:5f:64:8a:0a:78:c9:a2:
04:46:ae:62:98:72:cc:16:ea:72:75:fc:2e:cd:16:
1f:5f:1b:ae:61:54:03:17:86:97:5e:02:4d:5e:99:
7a:b5:d0:52:76:e1:86:3f:31:98:75:7a:a0:8c:fc:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:40:D8:13:3B:71:7C:E3:5A:AA:9D:4F:63:C0:B4:69:14:0C:4C:28
X509v3 Authority Key Identifier:
keyid:63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:23:b5:a5:2a:e7:e8:20:1b:fd:63:76:08:3a:e6:d6:12:c9:
0c:1e:82:9d:62:5a:3e:07:36:c2:18:92:65:38:a8:a6:69:85:
d6:c1:80:e2:d1:51:58:02:78:a0:e3:94:79:4c:f7:c0:23:7e:
72:83:00:9e:7f:f8:95:4e:73:3a:a2:d1:38:0a:8c:a5:e9:f2:
53:bf:56:b7:7d:3c:c7:63:71:79:ae:4e:8b:05:79:4d:b9:74:
d0:73:52:32:64:ab:b4:47:df:e7:e2:a1:33:52:10:74:c0:1d:
06:91:78:0d:73:e2:fc:6e:9f:9b:9f:e8:37:a0:3d:69:71:f1:
da:0e:9d:4d:d8:e5:c9:b3:b3:47:a2:dd:c4:aa:4e:a5:bd:fa:
f5:9c:52:94:25:75:27:b5:fb:14:61:c7:72:a5:a9:e9:a7:11:
d9:fa:f1:09:fd:04:d2:19:45:5f:b0:f4:10:6f:9e:2d:f2:cc:
94:31:b1:84:ed:9f:ea:90:6a:4d:0d:3c:7d:ea:85:aa:5e:4b:
61:4f:cb:8a:06:d6:f6:d3:28:4e:df:7a:e8:7b:32:89:08:2b:
20:dc:f9:e5:3c:ff:7c:5d:1f:64:e5:f4:b9:ac:65:a8:a7:b3:
a1:54:60:8c:f5:eb:60:b1:4b:f1:f8:78:e5:9c:ee:dd:36:93:
20:10:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:22 2025 by rpki-client