Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier: SQEB13LiB1lnAck9jxXfB2+8gxYuZXFeK4kwpMtYk0I=
Subject key identifier: D1:09:F2:19:FA:42:0E:EA:AA:5B:33:33:6C:E4:E6:20:0D:C7:C4:1E
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial: 0198D8515F0D144A4955822BFF4F5A35F1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 19:04:27 +0000
Manifest this update: Sat 23 Aug 2025 19:04:27 +0000
Manifest next update: Sun 24 Aug 2025 19:04:27 +0000
Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: YS0/lXe3wMf6Wm0KyD17+fbqJkHJcsTJj4qz4tf/xUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:5f:0d:14:4a:49:55:82:2b:ff:4f:5a:35:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9187af710f6285e13553071328b9d994852c471
Validity
Not Before: Aug 23 19:04:27 2025 GMT
Not After : Aug 24 19:04:27 2025 GMT
Subject: CN=d109f219fa420eeaaa5b33336ce4e6200dc7c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:f1:dc:d0:98:03:e8:33:7f:6f:28:8f:95:
f7:37:97:40:02:7a:9d:e8:9e:76:76:a5:a0:44:8f:
ae:42:e4:1c:0f:21:cd:34:25:c9:5e:df:8f:63:e1:
72:11:7b:3d:4c:82:27:ce:bb:f0:e2:6f:9c:d8:af:
13:7d:45:06:1a:12:cd:fd:0f:62:b7:4c:01:19:49:
e4:aa:8e:dc:06:61:1c:38:e3:68:d7:03:25:c8:47:
89:eb:a5:fa:99:14:ae:81:cb:8e:46:18:e1:26:05:
bd:87:cf:54:c6:17:fd:90:00:50:ac:19:86:6e:a8:
aa:86:b5:c2:30:df:2a:75:39:f4:5e:bb:e5:61:4e:
7f:eb:2a:6f:df:7a:29:3b:7d:9a:d4:09:a9:be:4c:
29:7b:7f:fd:ff:af:85:44:52:e8:08:d4:8d:16:3e:
2c:17:15:4f:aa:9d:64:e7:ac:5e:2c:a6:9f:76:ee:
5f:01:e3:f1:6c:eb:ac:ff:bc:09:4e:cc:96:58:73:
5b:8e:b0:90:37:b0:d4:fc:00:36:b2:bf:5c:56:ed:
86:c0:b7:c2:eb:d7:70:b7:06:fb:e5:eb:15:32:cb:
cc:47:1d:d0:78:2e:ff:02:e5:d5:6f:b6:ef:10:18:
ed:9f:94:14:18:fe:e7:1b:fc:87:02:6b:84:ed:56:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:F2:19:FA:42:0E:EA:AA:5B:33:33:6C:E4:E6:20:0D:C7:C4:1E
X509v3 Authority Key Identifier:
keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:80:84:3b:c4:5f:c0:89:4f:e3:ce:d4:4c:11:33:29:c3:22:
08:9f:28:96:21:23:12:bf:6f:a4:d4:3c:36:2a:f0:65:43:70:
bb:c9:bb:07:89:7e:28:97:71:fd:e8:6d:3a:c9:0c:56:3b:e6:
1e:79:eb:c6:c8:61:32:04:ac:4e:b2:52:e1:65:49:57:0f:ed:
5f:e0:24:75:4a:87:0f:e0:3b:33:8a:d0:19:c5:dc:9a:d7:d9:
4d:c5:93:c7:57:c8:2a:9e:28:cb:92:3c:23:32:5f:06:e4:52:
a5:65:62:a0:c4:90:aa:eb:9d:43:d0:09:1e:4a:07:00:34:9a:
4c:59:39:95:9b:3c:92:4e:66:52:5a:31:75:0c:2d:dd:53:6d:
1a:a5:d6:d9:46:e1:00:f1:36:5a:30:40:7e:1d:00:a4:11:7d:
80:e3:c0:0a:50:6c:3a:6a:3d:83:a9:df:89:6f:c9:88:c7:0a:
a9:62:26:9a:e0:91:f8:d9:d1:12:d4:1e:91:76:92:bd:97:8a:
b4:5d:e8:32:39:e7:34:32:bd:b1:34:8e:84:c0:07:da:d3:78:
e3:0c:e3:56:83:ac:08:dd:77:98:62:6d:75:5e:fa:06:dd:d1:
a9:cf:d3:7c:3f:d3:0e:fa:e2:06:d4:f7:ad:5e:36:57:e5:c9:
5f:a3:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:16 2025 by rpki-client