Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier: mhQ7mNAfA6K7Nlc2q2XJNcsCC1tPsL7KoLt11gF0du0=
Subject key identifier: D7:56:31:D8:AE:08:59:9D:43:F3:05:C6:19:6D:C3:1C:49:01:48:6D
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial: 0198D4E0A094A7F1A96E9648B3421EAFC4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number: 01A3
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: AdUfPTo+W63CcXM03AQX5imdE7dMIqvvKBvqJ7gqS1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a0:94:a7:f1:a9:6e:96:48:b3:42:1e:af:c4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=d75631d8ae08599d43f305c6196dc31c4901486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:e9:86:29:cc:4d:f2:a3:b7:ed:0d:2d:32:
1a:77:6f:53:35:0b:61:0e:6d:0b:e3:5f:68:65:c5:
a0:ff:3a:59:5b:bf:89:dc:48:6b:ab:5b:c9:ad:51:
1d:57:09:c4:60:31:84:2e:64:6a:73:5a:49:0b:f4:
4e:61:d6:d5:ea:09:e0:5c:28:9d:fd:8a:78:82:20:
66:8e:9b:d4:65:5c:dd:cf:37:41:c2:a9:0b:a0:06:
6c:48:56:6d:82:92:39:84:49:6d:25:fb:89:03:b4:
a4:a8:68:3d:92:2f:57:20:52:9b:ef:fb:ef:b6:e4:
87:90:31:2c:d9:61:23:27:f3:92:9c:c1:5f:db:5a:
20:58:a4:43:7a:38:76:c1:5e:b8:de:dd:ee:21:90:
7b:49:8d:e7:2a:b4:82:01:3e:5c:cd:68:5d:18:33:
d3:d8:d1:86:f2:a8:94:d7:6d:f4:89:c0:a0:d9:cc:
7e:40:13:5c:a2:5d:86:ce:41:e5:fc:72:b7:4c:9d:
1b:d4:d3:10:7c:e0:ac:85:4e:50:de:39:88:8c:72:
2c:a0:5e:e2:c3:c7:8f:70:fd:61:21:82:46:4b:a7:
e7:2f:65:59:dc:b8:86:08:fc:4d:d0:b5:0d:62:49:
d2:03:21:a2:11:ca:99:40:6c:ea:20:3b:ea:1f:1d:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:56:31:D8:AE:08:59:9D:43:F3:05:C6:19:6D:C3:1C:49:01:48:6D
X509v3 Authority Key Identifier:
keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:be:e4:3a:0c:7f:eb:34:cb:44:75:63:f7:e2:60:97:6e:28:
49:11:4e:2d:28:5f:cb:c1:be:4e:7f:37:38:c0:ad:3e:2b:79:
fa:6f:86:7d:55:e5:cc:65:02:10:03:a8:40:79:ed:ba:7c:be:
2b:11:a2:3b:de:db:15:99:4c:b7:b7:76:f5:2a:e3:85:0d:32:
57:db:df:4e:30:18:dc:9e:3b:5d:6b:d0:7b:d0:a7:a6:58:15:
c5:fb:f2:5f:35:ed:98:80:77:82:24:c4:a0:5d:13:d8:ba:06:
31:e3:e4:64:94:a1:27:0e:b7:1a:b0:5a:80:62:fc:32:b5:09:
9d:bb:3e:9c:49:a2:2a:92:0a:0f:14:e8:b1:d4:dd:1b:88:5f:
9d:0f:95:2f:db:76:0d:0b:3f:d9:88:23:82:dc:00:06:32:61:
3b:9e:04:1d:41:7f:8e:64:8c:3c:18:17:f7:2b:db:13:4d:d2:
14:df:ff:b2:df:e3:37:b6:0a:a8:3b:3a:2c:97:1e:a1:2d:6c:
7b:10:32:44:f1:40:b1:d8:b7:4d:b6:92:13:6c:99:4f:7b:df:
1d:4b:39:82:cc:56:27:79:01:e2:cb:38:fc:3f:68:ae:94:28:
25:ad:3c:2d:cf:6c:d7:01:46:55:64:c6:e2:9d:a1:56:15:d9:
88:dc:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:55 2025 by rpki-client