Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: TCQCOlYwddQxnosjEAbmXmhnFs0m3lD6K10G9c25A7Y=
Subject key identifier: 9C:FE:2C:13:12:B2:94:1D:4F:34:45:0C:E5:DF:B7:9B:FC:7E:00:9B
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 0198D5BBDBF8E2A1E805EA59283B67C04F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: cYGkTUQr4O0cUoTij/WlA9SiKYdonV08+PHpnF9ITXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:db:f8:e2:a1:e8:05:ea:59:28:3b:67:c0:4f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=9cfe2c1312b2941d4f34450ce5dfb79bfc7e009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:0f:54:d0:7e:ed:02:65:86:54:60:9c:16:
a5:8f:6e:6d:eb:fd:ad:04:dd:f3:31:50:74:01:33:
f9:f5:64:35:1f:00:9c:15:3e:e4:73:5c:67:1b:e3:
df:26:0c:ce:b5:46:6a:f9:25:18:de:d6:26:bd:d0:
44:c9:26:be:20:f6:3e:5b:5e:51:46:e5:ec:5a:6c:
35:44:e0:92:4a:61:d6:5a:fe:b9:79:90:9b:00:be:
b8:51:45:5b:80:fa:e2:73:55:31:38:41:a7:99:28:
f6:6a:b7:27:a4:6d:e9:61:5c:05:c7:95:8f:40:f0:
19:c3:8d:cf:ad:ee:b3:54:e8:b7:c9:39:6c:88:0d:
ad:76:ef:8e:f4:e9:a0:89:6c:75:81:95:b1:5c:9e:
55:e8:53:df:d9:4c:ad:56:88:eb:b6:8a:36:fb:8d:
a0:4b:29:2e:23:b1:64:0d:86:a9:81:55:12:a9:d0:
3d:02:29:60:ed:72:af:57:42:56:92:9f:0c:32:3b:
3f:97:92:bb:32:03:28:26:6c:4f:2e:f7:c1:da:8f:
f2:02:11:4f:87:5b:17:b9:63:a7:3d:46:ef:87:a3:
67:74:78:f4:cf:f7:fb:04:ea:fd:e1:c0:05:53:95:
78:44:4c:4c:e3:78:66:32:6b:71:67:78:45:de:09:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:2C:13:12:B2:94:1D:4F:34:45:0C:E5:DF:B7:9B:FC:7E:00:9B
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b0:8a:a6:03:b8:a3:82:aa:d3:02:bb:2a:74:a2:10:cb:a7:
21:d5:f7:86:5a:c5:23:a9:48:5e:45:c7:a5:af:bf:f9:1e:0f:
16:41:f0:ee:eb:89:6d:c6:75:84:10:26:c4:d4:55:20:25:2b:
48:99:1d:1d:12:91:a6:9f:9b:3d:4c:b1:07:36:41:b0:b4:d6:
81:11:a0:21:b6:a3:95:b1:72:00:a0:f2:ff:43:1d:fb:9c:50:
e8:f7:8a:43:d3:c8:d2:2f:27:c1:01:95:58:ad:09:ab:ff:a4:
2c:d4:5e:3a:a2:d8:d3:19:4c:1e:85:af:b8:fe:a7:1b:7f:b5:
57:6e:7a:7d:2f:52:84:b9:42:bd:e7:33:5b:ff:1b:e2:29:8b:
a6:49:f0:8a:52:65:97:ac:8b:51:eb:75:c9:32:a3:8d:69:01:
bf:0b:70:61:c3:b5:ef:73:04:fa:76:1f:3c:c3:a4:6d:f0:77:
e1:d5:4c:88:1f:d5:61:ec:08:95:93:26:d7:a8:fb:53:bd:ca:
14:b4:bb:e1:b6:f5:2d:ff:fb:85:0c:a6:a6:10:7d:d6:bd:f2:
42:be:ed:f5:4b:60:13:1b:f9:a8:7e:9e:0a:27:0c:62:29:65:
96:3f:2f:92:2a:35:95:ec:a8:82:c9:8f:46:92:c2:29:32:1f:
2a:a9:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:31 2025 by rpki-client