Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier: Ks+DYWa0kgdf9X9b9XGkWggvmuSnFK3he62YK1wSrcY=
Subject key identifier: 95:22:9E:5F:02:AC:DA:6D:DC:87:AC:71:0B:82:D3:A6:2C:F8:11:3F
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial: 0198D6612A0E6E7BA45638BCF156CDC1F52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number: 06D2
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: 3IP/crjNaObuINS3v3I6Shn6yxZng1PW9rI4m23+PNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2a:0e:6e:7b:a4:56:38:bc:f1:56:cd:c1:f5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=95229e5f02acda6ddc87ac710b82d3a62cf8113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:a5:cf:15:d5:56:ff:ba:c2:df:ac:72:aa:
e7:c9:53:82:ca:70:55:ec:fb:aa:47:f4:32:dd:f9:
e3:9a:6a:4c:d8:4e:98:69:28:70:78:3f:a3:ed:80:
30:01:1a:a9:f6:30:8d:41:3a:0c:8b:0d:e5:f0:74:
67:62:a3:76:72:e0:16:fd:43:1e:3d:e7:05:9d:3e:
46:76:44:5b:91:97:2f:4e:89:18:cb:82:90:20:be:
c4:54:5e:bf:9b:51:c6:19:c4:29:f7:1d:e4:1f:c9:
fa:28:81:ad:88:f7:43:1e:84:a5:fc:50:be:fb:f2:
84:48:60:a7:b6:da:35:7f:1f:c2:64:1d:e4:0b:b1:
e9:41:db:08:07:e7:c8:b9:43:03:7f:8e:91:f6:c6:
70:6a:0a:70:38:cf:7a:bb:9a:00:f6:e8:32:98:4b:
62:8f:52:49:ee:a7:35:b9:c7:88:d8:a1:97:35:4a:
12:80:55:b7:53:d3:6e:c0:59:62:41:b4:d8:8e:f8:
02:26:be:2d:7f:f8:24:41:a0:9d:2b:29:0a:f0:ef:
f1:c8:7f:b7:f2:dc:2f:44:cf:01:4f:3b:15:93:4d:
14:d0:4f:96:75:cd:0e:f3:4c:9c:a4:c4:e7:72:4d:
9c:b4:9a:44:38:3f:f5:cd:fb:9f:fb:4f:00:f4:2d:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:22:9E:5F:02:AC:DA:6D:DC:87:AC:71:0B:82:D3:A6:2C:F8:11:3F
X509v3 Authority Key Identifier:
keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:dd:69:e6:f9:a2:ce:75:1d:a5:d2:a4:3a:ab:9d:83:e7:16:
ac:cd:e9:bf:ef:9e:60:c6:e0:f6:d1:94:8f:55:f5:1c:48:9e:
76:12:81:e0:50:5d:a9:81:f8:36:88:76:46:5b:4f:b2:d9:b3:
41:4c:fe:44:dc:b9:cc:f4:a8:ef:4d:fa:5c:f5:44:2a:46:18:
eb:25:f3:78:90:a8:03:dc:f3:5e:91:2b:47:1e:c6:81:a6:64:
65:d6:00:49:57:0a:00:e8:8f:65:0d:45:0b:63:a3:44:2f:92:
83:ff:13:80:5d:26:e4:35:0b:32:cf:39:51:b1:b9:ac:08:ec:
27:b0:de:ed:8e:6e:e8:8f:83:32:c4:a9:14:59:25:87:12:60:
95:fb:7f:6c:3e:96:95:a3:34:7f:ee:30:ab:7d:17:54:4b:af:
4c:6a:a6:c8:75:6a:8d:ca:42:cb:e0:e4:68:df:27:68:e7:59:
c1:d5:15:26:d7:b3:bd:06:87:e9:e4:bb:7b:d9:b9:c7:63:bc:
3e:f9:7a:8c:43:36:5b:85:e9:4c:2b:9d:4e:d1:cb:4c:36:3c:
cb:29:6f:d0:45:5d:a1:8e:c5:ff:a9:17:16:59:a4:95:db:1a:
18:40:76:22:ca:5e:27:dc:d2:91:1b:61:cb:74:9f:f9:9b:0b:
c0:ae:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:04 2025 by rpki-client