Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: CVPnwgsoWsrqfNl/SS32BHYAwndw10LV7eKHanZD39s=
Subject key identifier: C9:26:45:FE:FA:E4:51:39:0A:DD:27:B4:88:6E:0F:52:63:2F:60:C8
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 0198D47410E645674BDE1467EF075CA6D1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 04AB
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: JOiJ633/4uc5b6mYv1dtU0IqbGgYfZQ2JUidoHgPUJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:10:e6:45:67:4b:de:14:67:ef:07:5c:a6:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=c92645fefae451390add27b4886e0f52632f60c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:53:a0:72:58:a6:82:ef:d6:73:8a:d0:74:
06:89:3f:68:fd:14:3a:be:b9:65:8f:9b:8f:9d:b4:
14:88:43:a0:78:f7:37:0d:8e:97:09:ef:ba:47:22:
4a:46:4e:58:85:60:95:eb:39:5f:03:4a:1f:fb:81:
0f:8e:f3:e8:c8:20:6d:0a:c4:e2:bf:91:14:b6:04:
8a:44:14:74:61:ae:86:23:c2:53:3c:8b:05:da:43:
0a:80:12:e1:e7:54:a9:56:87:31:bc:08:bc:bf:a0:
1d:cd:79:35:47:ce:9e:f2:49:6e:7b:4a:ab:6a:32:
67:58:73:5b:2c:ad:3b:69:29:be:fc:6e:6f:71:d5:
50:8f:c8:f9:7b:3d:d0:bd:8b:9c:96:30:54:6f:aa:
a0:60:6b:70:c6:d0:31:db:f0:17:9f:44:f0:ea:19:
56:14:8c:b5:53:73:28:c0:f4:0f:e4:8d:1f:16:c5:
a4:c2:1f:8b:86:8e:4e:58:d0:d2:18:2a:4d:08:bd:
06:98:51:20:da:e2:0b:75:0c:73:ab:80:82:2e:f6:
1a:e7:68:80:39:45:f5:40:0b:28:ae:7e:f3:1f:dc:
d5:5a:10:54:3b:0e:a2:e6:e0:17:e3:d7:94:b2:d7:
d8:28:76:d7:c6:d9:e0:29:9c:9f:3c:78:a7:a2:dd:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:26:45:FE:FA:E4:51:39:0A:DD:27:B4:88:6E:0F:52:63:2F:60:C8
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a2:30:25:2b:0a:1d:6a:95:30:1d:f7:dc:80:2b:af:d9:84:
19:65:b4:1a:fd:04:99:6a:7a:af:ab:06:40:a4:c3:8d:70:38:
65:13:71:b9:ea:1f:24:09:60:20:89:5d:c2:88:96:53:6e:e2:
06:64:1b:a0:aa:00:35:43:e0:6f:38:bf:47:77:f7:f8:96:af:
f4:3e:28:68:e1:30:d6:8e:47:2f:10:44:39:01:e2:48:2c:4b:
a9:93:bc:86:0a:8c:41:7a:af:37:b7:cd:71:06:c3:77:c2:91:
84:b8:86:ba:07:96:1c:a6:09:ea:79:c8:1b:cf:d0:ab:08:ec:
5e:a6:4a:70:bf:64:38:3f:d9:27:2d:e8:98:d0:1c:0a:62:b4:
68:af:dd:86:c9:b9:6e:3b:2d:26:8a:d4:84:44:88:ae:92:7c:
85:83:d0:d0:20:b1:48:9c:81:80:81:0f:8e:8f:b2:31:de:48:
a4:61:e1:8b:39:6a:e7:d3:53:f3:de:ef:1c:f3:fd:2f:16:87:
87:00:d0:e1:29:67:35:29:6c:9c:bf:8a:a5:f5:9e:20:2d:32:
1e:35:f1:f6:ef:d6:33:e0:d6:e5:f2:47:b9:ab:30:05:f1:68:
55:3a:e8:f9:2d:c7:0b:a5:78:a9:40:54:65:c7:b6:9e:58:8f:
0c:8e:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:20 2025 by rpki-client