Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
File: yGEQ5MdkHRgOjxkgrGX7788G18c.mft (raw, json)
Hash identifier: MgR1q5x64DKPZDCVGcQXhkF+TXmzIjVtjgHTW2uKJS4=
Subject key identifier: BD:43:92:42:16:B4:F9:EE:04:8E:AF:BF:AD:73:12:29:52:2C:0C:6E
Authority key identifier: C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
Certificate issuer: /CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Certificate serial: 0198D5F1498C17C136C40EFDAD4B289693F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
Manifest number: DD
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: yGEQ5MdkHRgOjxkgrGX7788G18c.crl (hash: 2B6grXz5ay4D5+JlN1xdA92BstQrraFVen2F/fJA16M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:49:8c:17:c1:36:c4:0e:fd:ad:4b:28:96:93:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=bd43924216b4f9ee048eafbfad731229522c0c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:44:0f:e5:1b:04:62:8d:43:3f:e0:4a:2c:
6f:7f:ea:e5:02:0a:fa:61:e9:6b:14:93:26:91:93:
f5:d5:0a:33:46:2a:de:73:08:16:a7:6b:72:1f:86:
76:8a:07:92:2c:58:10:c7:65:86:0d:e8:c4:65:ff:
91:86:c8:60:10:33:bf:bc:37:c7:75:b9:09:6d:cf:
ee:b0:f9:4a:76:79:0b:42:aa:75:20:d9:40:dd:74:
53:e6:7f:14:07:bc:c9:53:9e:0e:2b:7d:a2:9d:2e:
fd:90:f0:3a:e4:fe:5b:4f:3c:08:50:51:7d:88:31:
b1:43:5a:ca:aa:f8:41:b5:a0:73:03:33:b1:8e:f8:
83:87:4a:72:20:f4:f0:3b:b2:49:5b:35:92:ff:d7:
18:a0:a9:dc:9d:67:90:77:0e:6e:73:b4:ab:9d:cb:
8f:6d:45:41:f5:72:18:34:62:48:d8:5f:ce:19:53:
05:9b:54:bc:82:99:ad:8f:12:b5:64:cf:ab:78:d4:
4d:ec:c2:8d:fc:9f:6e:1d:0d:6b:4e:8c:f2:ae:c4:
41:19:55:5d:bc:9d:17:66:1c:f6:df:70:a6:14:e4:
7f:dc:a3:ba:dc:b0:68:a4:21:73:08:d8:f5:e4:f2:
14:e5:50:3e:29:24:22:ab:91:f5:aa:7a:7c:e1:e2:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:92:42:16:B4:F9:EE:04:8E:AF:BF:AD:73:12:29:52:2C:0C:6E
X509v3 Authority Key Identifier:
keyid:C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:1d:cd:b2:63:1f:51:0f:a8:e0:f0:22:89:3c:5a:6e:3a:
ca:d2:af:4a:52:af:61:1f:35:e0:bf:87:99:57:db:4d:32:98:
71:6c:c6:ad:02:17:7f:6d:fa:65:44:fc:ed:2c:50:3f:c0:02:
a6:b8:4c:fb:1b:6a:cf:43:c6:2e:61:29:0b:c2:e8:08:91:a4:
d2:4f:60:55:86:34:f5:c7:52:62:a6:5a:88:11:64:83:81:a1:
3e:a4:2a:cc:ab:cc:d8:d2:61:a4:27:1b:fe:0c:1e:0b:0c:9a:
68:28:64:c2:b9:c4:7f:78:b2:79:74:65:00:c6:c3:56:73:7d:
82:63:7c:5f:44:ab:18:89:10:fc:13:91:1a:ab:1d:79:ef:e9:
d2:a9:98:a4:a3:9f:ba:76:4c:9a:54:96:3b:24:a9:f2:c4:09:
fb:d4:d7:86:c1:1f:fd:d0:8a:0b:8c:81:03:7f:a3:13:64:ec:
97:98:e9:2d:73:8f:a7:f8:b1:78:89:20:a5:1b:35:17:39:82:
c5:78:15:75:e9:30:8c:24:2c:d8:b0:e9:d6:a7:3c:18:26:8f:
bf:85:19:9a:dd:64:75:47:3b:6f:a1:be:34:e9:c0:65:a7:6f:
5d:9f:65:0c:a7:21:f2:0b:08:28:75:41:00:26:9e:6a:b3:24:
55:1e:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:03 2025 by rpki-client