Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: 3p6AS9pQDEqThkSavBtcuUeoYVL6HEul6DpOAZUjSvY=
Subject key identifier: 56:67:DF:38:B9:12:72:D4:E1:E0:F2:AC:78:04:ED:C1:41:B0:F7:27
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 0198D65EF8BE08753C537D3B2CC7456512A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:04 +0000
Manifest this update: Sat 23 Aug 2025 10:00:04 +0000
Manifest next update: Sun 24 Aug 2025 10:00:04 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: OGFZokZsPABjko/+EJRQA43gxbwGuMVYRjz+vQo9H8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:f8:be:08:75:3c:53:7d:3b:2c:c7:45:65:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Aug 23 10:00:04 2025 GMT
Not After : Aug 24 10:00:04 2025 GMT
Subject: CN=5667df38b91272d4e1e0f2ac7804edc141b0f727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:80:97:16:d3:8b:36:54:10:93:d9:a6:f2:
be:c3:38:92:d1:be:56:8f:a5:3b:c0:44:63:8b:1a:
03:3f:c5:02:35:38:91:8c:a1:c2:76:58:04:6a:28:
15:ad:c7:4d:c0:a4:7e:17:d7:02:60:cf:03:ff:59:
33:47:ba:26:39:80:9b:bb:c6:b6:4e:43:04:6d:76:
7f:ae:40:f6:42:9f:3e:38:ec:58:9e:68:0f:b3:51:
0d:39:01:41:8d:53:af:9a:3f:9b:a2:9a:ee:f7:99:
d1:6a:d5:7f:bc:28:0a:07:c0:60:0f:a5:f9:cf:2e:
f9:73:8e:d7:50:f2:55:11:89:b6:cc:be:1a:62:07:
94:46:e0:69:7e:29:be:35:48:90:08:6b:7c:17:ea:
49:39:fd:d5:6f:93:88:84:83:a5:2b:3a:04:cb:e1:
07:4b:66:3d:d9:9c:11:1f:03:54:da:2b:64:43:d7:
2b:9e:d3:dd:f6:54:77:04:74:20:59:09:6d:1c:68:
2c:1c:d7:06:8b:66:b6:d5:0a:4e:31:85:d7:a4:b6:
bd:76:f4:75:83:ff:37:c3:a3:35:65:80:10:9e:6d:
71:fc:c2:1a:33:e9:e1:59:bf:83:14:89:b2:77:76:
df:4d:30:9c:79:eb:25:da:3d:de:d1:f5:35:0f:dd:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:DF:38:B9:12:72:D4:E1:E0:F2:AC:78:04:ED:C1:41:B0:F7:27
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9a:45:16:7a:c1:7e:e7:6b:ae:34:bf:bf:a1:2e:3a:c9:55:
4d:9f:e1:1c:93:81:b2:b5:3c:86:b3:84:d5:27:b5:8f:f1:d2:
7c:ef:38:73:ec:08:7d:ec:a6:95:3b:4c:ca:d6:4e:ed:32:05:
4e:e4:5c:eb:08:5b:7b:fd:5f:b9:f9:74:fb:9e:da:f2:8b:74:
62:96:ff:79:89:4f:99:81:31:49:f4:6d:7c:e6:8e:7d:5e:0a:
44:9e:d3:b5:54:64:61:bb:5f:56:fa:3b:1e:d4:a6:90:97:41:
3d:77:02:9f:65:6b:93:9c:56:b7:81:74:2a:6f:f4:85:44:76:
87:ba:79:6e:14:fa:5f:2b:b2:87:15:20:ac:b7:7a:be:0e:3a:
8c:95:94:cc:55:a7:cd:ec:ef:32:82:11:2a:f2:56:f2:4b:77:
bd:f0:17:0f:ce:ba:b4:ee:a4:af:1e:4b:f0:cb:19:38:0f:54:
19:25:ac:f0:ef:33:9e:46:13:db:60:9e:6f:76:bf:e1:f5:c2:
aa:37:85:4a:9b:84:fa:0c:87:42:b3:0b:d6:2a:09:5f:e9:b8:
32:5a:2b:48:c0:1f:a0:25:90:25:49:7b:5a:5e:93:0d:65:c0:
0d:89:85:16:56:81:72:11:33:0b:ce:85:0f:b0:df:32:88:28:
7b:04:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:20 2025 by rpki-client