Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier: FTSrXyjvnSAOmGQvkViGQHELPZp81QOwcLzB1LiVs7g=
Subject key identifier: 3B:38:FF:7C:98:3B:5C:76:FF:D7:7C:84:3D:75:26:B4:E9:BF:00:2B
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial: 0198D515D7103A3EEB681A089FACAD3F0CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: OVib2saIEclzuNdgv1wWAQ12jeGlb6c1FqhOD/dRv54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d7:10:3a:3e:eb:68:1a:08:9f:ac:ad:3f:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=3b38ff7c983b5c76ffd77c843d7526b4e9bf002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:23:e6:1e:9d:de:16:b4:8c:70:79:71:28:
8f:54:22:ac:c9:f0:2c:64:51:23:6c:5f:54:c9:52:
69:93:f4:4b:0f:17:9a:39:6d:1b:1f:cc:78:a6:24:
bb:17:ca:0c:7a:46:ed:69:c3:b8:10:41:8a:ac:98:
f7:2f:47:b2:b8:b4:b4:06:53:9f:ca:e4:03:63:48:
bf:65:be:16:6d:fc:b0:4e:2b:91:95:5d:37:01:6f:
d8:ab:23:d8:d3:1b:bf:34:9f:56:f5:72:e9:14:93:
f7:72:74:8e:02:b5:d0:3f:b7:f6:d1:40:6c:ef:4c:
0d:f2:40:79:5d:83:e4:58:01:bc:cd:f8:2b:96:d7:
26:0c:b4:b4:d1:d0:1c:3e:fe:51:f8:c7:82:0c:00:
4c:93:c5:08:ac:8d:27:b8:ef:13:07:fd:9a:9b:59:
ab:bc:22:7f:90:ae:03:75:8a:e0:23:31:44:59:0d:
44:6e:10:4d:21:70:fc:5f:d7:d9:d6:bc:18:0c:4b:
53:a0:52:a1:8f:d8:6e:6d:77:76:a9:03:33:50:c3:
6a:e8:38:1a:62:57:e4:a4:3a:f6:34:f0:70:e7:f3:
8e:e0:e1:fb:1c:01:59:24:15:54:16:43:f0:2b:d9:
eb:3a:d2:f5:3a:8a:63:59:23:52:4b:26:bf:f5:08:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:FF:7C:98:3B:5C:76:FF:D7:7C:84:3D:75:26:B4:E9:BF:00:2B
X509v3 Authority Key Identifier:
keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:12:a5:a9:29:54:52:24:38:38:dd:fd:0c:2e:70:0f:8b:f9:
63:1c:6a:59:89:44:c9:c8:84:91:16:d7:af:03:35:de:82:88:
dc:0f:06:cd:d4:9a:05:af:2f:f7:c0:e0:49:7e:81:8e:56:a1:
f9:38:c6:af:1a:66:55:36:f2:69:12:56:67:a0:39:02:d3:b3:
1d:55:31:b0:3c:71:06:7a:83:de:d9:88:1c:75:f5:db:9e:f9:
88:df:dc:9b:12:44:c0:fe:1a:9d:de:54:8c:c8:6f:83:e9:37:
6d:03:2d:37:e6:d8:cb:c8:b4:b4:f7:79:4e:0a:87:a3:f9:0e:
5a:bf:dd:68:97:82:74:48:e2:5c:a8:e0:8a:4b:82:c3:35:08:
75:c9:60:55:33:bf:68:74:66:26:22:0c:0b:7d:5f:d0:6a:5e:
25:92:68:1f:cf:68:c9:74:32:11:78:56:54:55:c9:b6:ee:7e:
85:77:8f:9f:94:a5:9c:ed:ee:61:6a:5a:fa:a4:ba:f2:ff:39:
f9:36:ca:43:a2:aa:ab:4f:29:18:08:a9:a4:59:7d:78:1c:46:
ca:15:fd:13:7a:28:8e:fa:ac:bf:29:b3:bf:70:53:a9:e2:fd:
d0:ff:f2:80:a2:9c:fa:76:f5:7e:d9:1d:3a:8d:70:7c:21:21:
dd:9e:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:26 2025 by rpki-client