Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: mnBxH2YHUifa40JWDbo4t6LSBNXQRRR4og1F8qs67k0=
Subject key identifier: 8C:65:CA:95:3B:80:B9:51:D1:36:D6:1E:60:B0:FD:7B:C1:05:3B:A5
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 0198D4E094DDBF94398EAA469F81DF793603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 06E3
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: cW2VTQ9Pr6ubu6wcT9V6D0HAN6jJV7Fro1mTsfPTjlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:94:dd:bf:94:39:8e:aa:46:9f:81:df:79:36:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=8c65ca953b80b951d136d61e60b0fd7bc1053ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3a:29:5f:2f:81:ea:73:20:5b:ea:5f:ac:92:
9e:08:b3:7f:f5:09:12:e1:3a:20:43:30:b9:4e:d1:
48:67:bf:eb:5a:e6:a8:d7:43:1e:b8:af:0c:e5:8c:
ad:28:75:36:16:83:fd:47:8e:19:fd:60:2e:dd:c1:
96:3e:c3:14:37:c1:f7:c2:22:d6:99:21:28:4e:2d:
c1:0d:fa:07:5c:de:1c:d6:ce:df:e7:f3:e6:1b:09:
99:c6:d2:df:06:7d:fe:da:82:89:f2:93:1f:fd:52:
21:66:8c:fb:a5:32:b3:01:ba:42:6a:ec:64:e7:f9:
9d:71:42:c1:28:d3:43:e9:df:86:b2:3d:b3:30:a1:
54:82:f0:3f:f2:cf:fb:95:4a:b7:31:a8:24:22:70:
9f:ac:24:78:30:87:1a:3f:ae:7c:b9:8e:11:e2:cf:
7e:4b:57:05:ce:c9:db:1d:82:35:0d:67:9f:46:32:
2b:61:be:58:ca:48:62:d6:47:9c:b0:1d:85:53:5b:
08:4b:d0:51:00:c9:ec:53:bd:f7:24:f2:55:09:64:
91:78:8a:07:f6:2f:5c:20:ed:73:2a:ef:55:51:a4:
9d:b2:bd:7f:11:ed:6e:e4:35:5e:92:67:b8:28:cf:
12:b5:41:c2:ca:3a:9f:42:94:a7:16:eb:76:5a:ad:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:CA:95:3B:80:B9:51:D1:36:D6:1E:60:B0:FD:7B:C1:05:3B:A5
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:aa:6e:29:e1:78:0f:03:77:44:ab:a1:af:13:44:99:17:a8:
61:1e:22:89:ac:b1:05:ad:4b:cf:8b:f0:03:da:a9:93:2d:40:
69:7b:ee:a9:27:0e:2d:d8:0f:a4:9a:21:ea:ac:3f:5e:11:ec:
51:9a:5b:d2:da:4b:b5:0f:34:e1:37:e1:e5:3a:fd:a0:6f:8b:
eb:58:4d:f7:c4:75:e4:a3:14:1f:f0:dd:c6:07:d3:3a:ca:b6:
7e:47:df:92:0e:2f:21:bf:a7:0c:f6:96:9a:37:19:9d:8f:9c:
d3:19:e1:19:99:80:92:4d:c2:73:9e:39:67:e2:c4:e3:8a:2a:
3a:75:4c:28:65:f5:c1:f7:cf:2e:51:9a:fa:48:a9:e1:7f:0a:
c8:af:78:b4:c6:df:92:89:1e:17:ae:f8:49:05:a9:40:e9:34:
6f:72:c9:67:71:0c:3f:be:47:6b:f2:86:b1:96:c2:00:ac:6a:
7b:e3:ae:4b:df:be:24:64:b8:87:22:20:55:c3:ab:08:53:27:
16:d7:de:b6:a5:f6:c5:4f:52:1e:73:b3:5a:5a:dd:a6:71:ed:
b9:90:ab:fb:a4:34:1f:5e:55:6e:87:39:21:21:05:43:47:fa:
53:ff:49:5e:4a:19:8d:a6:c6:a7:c9:2e:f2:4a:00:35:ff:69:
a3:00:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:14 2025 by rpki-client