Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File: ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier: /8OW0qo1ZKCysr0ytRLFwSMWev1uftV69Rec3QEDR9U=
Subject key identifier: 91:6B:87:CD:7C:3D:95:44:BA:21:4B:44:82:DE:9D:BB:61:CE:67:97
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer: /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial: 0198D66100820197F2979E7E73ECE57DE106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:02:17 +0000
Manifest this update: Sat 23 Aug 2025 10:02:17 +0000
Manifest next update: Sun 24 Aug 2025 10:02:17 +0000
Files and hashes: 1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: IHEgibLVEsKUHuj+qWWahgTNXOJzlT5DkkemfqlH6tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:00:82:01:97:f2:97:9e:7e:73:ec:e5:7d:e1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
Validity
Not Before: Aug 23 10:02:17 2025 GMT
Not After : Aug 24 10:02:17 2025 GMT
Subject: CN=916b87cd7c3d9544ba214b4482de9dbb61ce6797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:84:bb:f1:9e:7b:b9:49:2c:69:27:29:30:
91:a0:fe:6a:f9:aa:1e:45:4c:7d:6f:60:b9:6b:fb:
3e:bf:17:dc:a0:5d:f1:bb:2d:e7:88:a0:94:5e:0b:
34:28:7d:16:91:1e:a3:51:50:d1:a1:8a:3d:7b:68:
e8:bc:dc:b3:7b:f3:5d:58:be:fb:e1:88:51:72:c2:
63:bf:80:cd:61:9e:f6:07:b8:4d:3d:1a:7f:94:26:
98:a8:41:38:bb:b8:40:ef:20:d3:64:81:c2:1c:37:
5a:66:15:30:37:26:b7:66:c7:6a:8e:ee:24:c9:4f:
99:ad:e7:33:57:5b:12:5b:1c:a6:84:e2:39:1e:98:
21:af:97:32:1f:b2:be:eb:41:b8:ea:3a:f8:7d:cc:
96:e0:c0:e5:98:49:36:bb:15:f1:a6:d9:51:b7:fc:
03:98:38:77:fb:f5:5c:75:57:89:1d:7b:3d:09:ff:
ec:ef:24:37:c1:f0:be:14:89:f3:8e:58:02:8e:b4:
59:48:05:d1:a7:5b:7f:2f:df:06:f4:98:7c:2c:e4:
7c:ce:b4:fa:a7:7c:41:68:66:50:54:15:b8:0d:a7:
1a:a2:52:94:32:fa:4e:ce:30:22:b1:68:42:25:71:
8f:76:21:7c:43:8a:4e:5c:be:ae:8e:cc:78:ea:8d:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:87:CD:7C:3D:95:44:BA:21:4B:44:82:DE:9D:BB:61:CE:67:97
X509v3 Authority Key Identifier:
keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:f9:6d:d3:f1:b4:55:7c:6d:a9:f8:b5:ef:1d:0b:59:87:
ee:e0:e8:83:14:c5:c9:e7:66:64:36:18:7c:8e:45:7b:b5:b7:
26:be:5b:ec:8e:04:62:86:eb:c2:54:88:7b:41:dc:e1:01:85:
db:28:dd:71:44:79:44:10:09:28:a0:82:55:75:93:27:91:c9:
1d:66:c2:e3:97:58:aa:af:4e:88:96:4f:34:9f:87:9f:1c:a7:
2c:e6:08:7a:fb:21:94:5c:a3:cd:d1:33:b0:d5:eb:90:43:2d:
57:5f:7e:54:cd:b2:ac:a0:bd:c3:ce:ea:33:b5:a2:f1:af:de:
cf:6a:0b:08:c4:8e:f7:fb:4c:79:9f:be:42:8d:aa:53:9c:d5:
8f:c2:1c:cd:07:81:48:c5:0a:10:be:84:c4:bd:68:2f:b0:84:
27:3b:39:06:1d:10:ec:95:02:96:f0:08:ca:bb:99:04:8f:9a:
e6:13:cb:64:c4:ab:1e:24:7f:17:9c:51:0d:11:45:4e:f1:cc:
89:4f:f8:8b:4e:01:e0:15:1c:b0:87:eb:d1:ce:e8:04:55:e3:
ee:c7:4f:36:e1:ea:bf:28:ea:5c:f5:d1:ec:60:6e:1f:08:52:
87:20:eb:29:da:6a:03:85:74:55:83:c2:6b:b2:e2:90:94:15:
b2:2c:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:01 2025 by rpki-client