Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
File: YDe79svKAic6peIbuIjj4exnZ98.mft (raw, json)
Hash identifier: KvpndbXVbFQeCJIpW4S1A9f6D3s6TwkZndQvKkRdrnM=
Subject key identifier: CB:60:35:BD:61:D7:05:E4:16:76:24:C4:EF:6D:B3:6F:D4:5B:26:F5
Authority key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
Certificate issuer: /CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Certificate serial: 0198D660BA5D4FE7F1F11335E6F4775A2685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
Manifest number: 0B6B
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: YDe79svKAic6peIbuIjj4exnZ98.crl (hash: x4ct70bq/CwCgc5PSP3x7qWkb0Kh8qBVOqomouV0l7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ba:5d:4f:e7:f1:f1:13:35:e6:f4:77:5a:26:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=cb6035bd61d705e4167624c4ef6db36fd45b26f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:80:85:9f:36:75:94:95:32:c3:bc:6a:1f:
00:83:67:15:e8:15:59:fe:a0:7e:8a:f4:9f:81:9c:
35:cf:37:49:64:b1:95:fc:83:af:1d:ee:24:d8:2f:
6f:6c:bc:ee:40:53:77:f8:29:08:45:6c:e0:0d:d8:
43:4d:a5:06:5e:8f:2a:82:cf:1b:75:c9:50:b2:4d:
15:dd:51:f7:fb:25:e7:53:f1:1a:7d:fe:89:17:c7:
d1:49:d5:1d:76:9e:ee:50:4b:8c:7b:07:73:e8:9f:
9c:6d:29:74:f3:df:ec:d7:11:17:dd:3c:ea:c2:53:
b9:6b:92:49:22:23:58:b0:48:e6:b8:12:ca:8c:b5:
14:68:31:4e:b9:47:8f:1c:7a:7b:e3:ca:10:b2:45:
1a:92:13:30:31:15:8b:cd:85:87:1e:cb:98:41:7f:
87:7d:26:ed:26:4f:18:39:28:ae:8d:a7:fb:f3:56:
30:87:02:19:3f:96:f8:d6:d3:bb:ba:d7:83:bb:c2:
18:36:7f:8b:f7:f6:be:95:3f:a3:3f:e0:51:12:bf:
31:f3:35:4b:66:37:31:93:90:09:a8:6f:52:6a:dc:
09:a6:d8:4c:c0:9e:c9:03:19:43:a7:eb:23:5d:bf:
7f:1d:2e:77:b7:99:0b:e5:ee:86:c5:2e:50:09:4c:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:35:BD:61:D7:05:E4:16:76:24:C4:EF:6D:B3:6F:D4:5B:26:F5
X509v3 Authority Key Identifier:
keyid:60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:d4:0d:50:28:99:db:a5:26:f7:36:0c:30:80:69:32:34:
3a:9e:08:6d:67:48:c3:93:81:59:5a:e0:21:63:86:e4:67:43:
e3:76:e6:fb:5c:3c:cb:eb:25:bb:36:55:c5:3f:42:81:52:f7:
fe:99:3c:0e:35:41:4e:66:0f:40:6b:fc:20:64:ad:4b:34:a7:
99:be:fe:4b:c7:af:74:15:cb:5c:b5:69:2b:df:e2:bc:ab:9e:
14:c3:61:83:f7:e3:5d:af:f4:db:9c:39:cf:ea:a4:64:f0:0d:
ac:38:17:fc:71:90:c4:98:73:3e:56:cd:21:e0:8b:b5:e3:8c:
c2:84:d5:25:d0:45:e8:89:40:92:bc:76:34:cc:17:3e:ee:95:
ef:eb:99:b8:46:d4:22:a7:d8:95:58:28:53:1e:bd:07:88:10:
f9:12:fd:9e:5a:8a:93:b2:5b:60:32:c8:1f:62:4c:ec:a5:89:
cf:78:b1:8f:55:30:d2:1a:3e:aa:62:20:29:13:82:69:22:f1:
24:bd:d3:d8:49:79:a9:f9:b0:eb:ae:72:f9:39:ff:94:fe:a4:
d0:0a:b9:cf:48:89:e6:c5:5e:8e:43:0b:e5:73:a6:73:57:3b:
3e:70:6c:40:9d:64:56:ae:6a:f3:8c:18:c0:7b:6f:f5:aa:de:
b2:35:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:24 2025 by rpki-client