Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: MlHncPKfWtfZJ8WpDpYIelE6v91Qx216SOiutpySoXY=
Subject key identifier: 96:49:F4:DC:51:72:84:8C:64:C5:6B:40:CB:F2:AD:59:55:00:9F:5D
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 0198D473E9031C7134D785F23AC925D9B143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0BCD
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: CCNhIRDVTPFEedTJPujmDrDOWFF+Paofm4bxtfjhPXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e9:03:1c:71:34:d7:85:f2:3a:c9:25:d9:b1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=9649f4dc5172848c64c56b40cbf2ad5955009f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:03:70:5b:94:ef:62:88:00:d1:e8:6a:8b:
4a:a5:6e:c6:d8:9b:04:0a:61:e4:64:d8:b2:44:41:
26:c9:b5:2e:b4:f8:e8:c3:b2:36:ee:ee:c5:78:03:
8e:d5:cc:69:79:67:cf:03:e1:fa:41:17:d0:1c:10:
fc:c2:70:87:a3:94:0b:01:63:60:40:eb:80:46:91:
57:7b:49:2f:78:6e:21:15:39:b5:a6:1a:29:0f:79:
ea:1c:1e:b0:24:79:c1:f8:c0:eb:54:f9:6a:f5:f8:
b0:91:52:81:a6:cb:6e:89:b6:70:4a:0c:fe:b6:12:
11:94:73:ac:91:a7:bc:1f:d5:81:31:59:ba:f0:ab:
55:27:af:e5:2a:ba:4f:28:c7:c1:8c:0e:61:7f:38:
3b:eb:f8:38:81:2f:69:4c:f7:38:f5:52:1f:a7:65:
a9:50:e5:9b:6c:d7:a5:87:f9:4f:a8:54:77:3f:ec:
aa:0a:cf:4b:04:70:8c:f2:3b:19:f3:58:d5:da:4f:
08:ee:ad:62:fd:9d:86:b2:42:50:50:11:1d:54:c0:
06:d6:f5:91:18:e0:0e:fc:ff:9b:a4:f4:e9:46:5a:
1f:dd:65:62:70:05:fa:8f:2d:99:15:46:3c:44:67:
42:5f:53:e9:3c:4d:32:9b:33:3e:1b:31:a2:df:25:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:F4:DC:51:72:84:8C:64:C5:6B:40:CB:F2:AD:59:55:00:9F:5D
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:41:c2:1e:af:ee:ff:8b:f2:2e:60:c8:e8:f0:c0:6f:9e:b4:
4a:71:9e:0a:1e:4f:30:a6:6b:8d:9a:ef:b8:3a:56:1d:4d:3f:
e0:3e:a6:a7:f4:36:67:89:43:61:5e:dc:99:5e:88:7f:81:a4:
5c:ff:e0:91:12:d9:79:e2:23:04:c1:73:6a:41:56:dd:4f:11:
74:a4:72:2e:c4:bf:36:c2:6b:94:c3:04:0a:ff:ab:9a:90:40:
b9:6f:27:a8:fe:fd:be:4a:f5:96:18:f7:f2:17:1c:81:aa:05:
59:4b:58:c5:a2:17:ec:f3:fa:78:64:bf:ac:4d:aa:7f:eb:cf:
b4:05:6d:5b:98:d3:2a:c9:74:f6:2f:a2:76:cf:b9:90:81:e9:
1c:7b:39:7c:d7:e6:6d:1d:d9:ae:a0:a1:18:e6:36:06:55:a0:
a8:b2:42:de:f1:e7:b6:a5:f9:50:1f:73:f0:34:fd:bb:da:94:
9a:2e:90:7e:b7:8d:4d:58:de:7e:8b:8a:55:99:e5:32:36:8e:
67:ff:90:29:9f:94:de:fa:ed:83:4e:46:00:72:24:f7:a9:61:
8e:9a:9e:2e:fe:dd:5d:59:c2:76:29:ea:79:f5:c0:ba:74:da:
9c:55:2b:80:0a:5c:84:c0:5b:8d:a4:b2:bd:76:a8:e0:a5:7a:
8b:13:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:34 2025 by rpki-client