Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: aPAa6xHQcYLbsSf7kN7N3XyKRv9k6J4sXhQe45Ht9vE=
Subject key identifier: 97:F7:24:13:3B:91:B4:AB:62:D4:52:4B:05:7D:98:F2:08:A7:E4:43
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 0198D65FB876112F9A72346CA78F44E649C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0D4F
Signing time: Sat 23 Aug 2025 10:00:54 +0000
Manifest this update: Sat 23 Aug 2025 10:00:54 +0000
Manifest next update: Sun 24 Aug 2025 10:00:54 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: 5Hpb8kLG83trmvzqOQFejBDIeRxoWWrQ/Ih1WTU/Zy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b8:76:11:2f:9a:72:34:6c:a7:8f:44:e6:49:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Aug 23 10:00:54 2025 GMT
Not After : Aug 24 10:00:54 2025 GMT
Subject: CN=97f724133b91b4ab62d4524b057d98f208a7e443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:fd:23:47:0d:e7:1c:c3:1f:20:7c:05:f7:
f0:2f:fa:a4:9e:f3:38:e3:5a:6f:0b:63:21:e5:26:
53:31:b4:f3:ed:7a:76:73:05:dd:9e:b3:39:37:e1:
f2:26:b8:52:2a:36:bd:7f:81:4b:93:d5:79:2f:53:
d1:ba:53:be:6e:b1:bd:0c:44:5a:5d:07:ac:e7:4c:
eb:99:52:2d:60:a2:ed:6f:28:b6:8a:f5:6c:6c:97:
ef:2e:fc:34:dd:77:8a:8c:93:e2:ca:66:0f:71:a3:
d4:07:de:79:a9:fa:63:a0:4c:4c:27:76:d4:88:52:
7c:ce:65:01:b2:d2:8a:4b:01:c0:8b:1a:e0:c3:8e:
67:8f:6f:c0:9e:12:3b:67:a4:c3:e4:1f:21:01:d1:
e6:93:41:e5:91:7f:cc:fb:25:80:f2:da:42:b6:53:
44:52:95:5e:34:61:2a:2d:47:d9:e3:ec:3b:4b:ae:
c3:c6:46:3a:37:98:07:56:41:2e:9f:a6:5b:d6:1b:
6e:67:8c:1b:8b:55:68:0f:7b:68:69:a1:8d:50:67:
bb:60:c7:2c:90:35:7a:ef:d9:ce:01:ce:10:89:32:
f0:d1:d5:76:e6:a6:99:5e:e0:5f:54:0c:55:79:02:
aa:2a:d9:f6:6e:39:06:f5:53:a1:58:6a:7c:3b:87:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:24:13:3B:91:B4:AB:62:D4:52:4B:05:7D:98:F2:08:A7:E4:43
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b1:ba:d5:fb:92:02:dc:e8:dc:78:15:db:f8:62:f5:8c:52:
23:97:50:fc:ca:5a:a3:06:9e:c3:9a:1f:30:a1:9d:6f:28:9d:
f2:5c:62:f9:34:d4:39:c7:5d:1f:db:0f:10:97:19:59:0a:70:
4e:aa:c3:6e:53:f0:30:88:c1:96:24:ef:15:2e:bf:53:80:84:
c5:dd:3c:e6:d6:d0:92:9e:04:e0:41:fb:8e:fe:1f:a1:a6:f2:
b9:8e:7f:a0:a0:8b:18:cb:af:a2:20:e7:bb:a4:3d:d3:8e:80:
31:99:bc:f0:b9:8d:b4:c3:73:5c:b4:9d:e7:a2:67:b4:8c:14:
0c:9e:41:ee:a6:c6:7b:b6:56:3e:c2:45:7f:63:1a:52:01:c4:
d7:f2:23:b2:86:96:65:15:72:1c:13:1e:0b:01:33:54:6e:43:
c0:c0:24:22:d5:d1:88:82:7f:56:96:f6:02:9b:e3:50:87:19:
d1:5a:17:77:68:50:68:82:62:75:cb:21:0d:1d:31:6a:82:ad:
c5:8a:38:11:1d:be:1f:fd:f6:23:51:ea:bd:61:e3:5f:95:2d:
51:69:1d:f3:e4:ff:1b:1e:99:fc:fa:ad:71:ac:ed:ff:93:92:
2d:12:2d:95:d1:40:dd:1e:74:d3:33:34:e1:34:2b:29:ed:0e:
88:b8:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:11 2025 by rpki-client