Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: mJdrrx4i7F2AnCYmXx3k64GWZP39QIxKaZe3yPhG1Gc=
Subject key identifier: FF:B7:84:E1:66:DC:3D:82:48:65:CB:50:BA:E9:66:6A:56:E8:9F:01
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 0198D47435B69B19A995EFF8B568F08CD1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 15AB
Signing time: Sat 23 Aug 2025 01:04:02 +0000
Manifest this update: Sat 23 Aug 2025 01:04:02 +0000
Manifest next update: Sun 24 Aug 2025 01:04:02 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: y3HgyAEAq5O9cuy8TFvSj9lrq0lxATKtFUv4sabXogc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:35:b6:9b:19:a9:95:ef:f8:b5:68:f0:8c:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: Aug 23 01:04:02 2025 GMT
Not After : Aug 24 01:04:02 2025 GMT
Subject: CN=ffb784e166dc3d824865cb50bae9666a56e89f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:5f:b5:93:c6:f2:d7:87:b5:c4:44:96:a0:
24:09:de:8c:42:67:16:03:f4:62:e5:c9:00:32:5f:
5a:f1:b7:ba:cc:a5:b1:84:e7:f2:77:67:c2:a4:ea:
14:48:ac:ec:85:3a:72:4a:78:63:14:c7:6a:86:5e:
d4:30:5d:33:e2:7e:6d:4e:eb:6e:cc:44:74:e0:a3:
2d:9d:c4:93:d8:44:6d:94:b8:e2:6e:79:45:b6:6a:
82:1f:61:64:15:73:3c:60:ba:99:51:db:0c:7b:55:
1a:82:e2:3d:be:7a:87:86:49:b5:83:40:34:2b:f2:
69:a3:9d:a8:c4:74:85:00:7b:8d:e0:b0:58:e2:8f:
56:62:0c:d9:99:0d:96:ea:a5:c0:29:9d:55:5e:a3:
b5:54:5d:75:c6:45:b2:2e:fe:ff:a8:c4:8c:c7:a3:
39:b6:0a:47:4e:3e:04:06:42:c4:86:9b:a1:fa:8a:
cd:97:33:a7:c8:fa:5e:6e:43:da:9e:31:c6:7b:5d:
e0:07:a4:9d:ee:93:d7:e7:a0:51:f1:3c:fc:ea:99:
f2:95:b2:3f:fb:78:f0:a3:c4:ff:b7:9e:d5:e3:56:
a2:d4:9a:a8:bc:db:fe:c9:2a:b5:e0:17:c1:9f:6e:
02:14:d0:1a:6c:9a:ca:6e:2a:dd:95:ce:e5:08:5e:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:84:E1:66:DC:3D:82:48:65:CB:50:BA:E9:66:6A:56:E8:9F:01
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:07:93:26:94:ff:f7:8c:20:c7:18:b8:68:f2:88:8a:d7:98:
17:49:fa:da:29:a9:7a:73:38:cc:55:8a:e4:8c:06:48:6f:25:
35:7e:49:25:3c:23:22:25:f7:d7:04:8b:92:fe:ed:79:2e:fe:
be:29:f4:d9:a1:ea:32:c6:5a:3b:d5:52:1f:60:2b:f0:b1:73:
83:18:96:c7:9c:1b:1d:83:c0:44:b0:3f:c8:38:8d:eb:1d:14:
4e:84:75:32:aa:c0:aa:23:6e:27:a8:65:da:e3:0a:9f:d9:73:
76:5d:f2:48:99:ce:51:6f:4b:cb:5a:ca:9c:5f:9e:78:45:68:
e8:e6:81:47:fb:69:24:53:de:c1:c0:59:6e:2d:d1:70:b9:e3:
ee:c7:7a:c1:21:67:b3:2e:db:7b:96:cb:5b:c1:3c:4b:ae:54:
c6:70:88:1c:f2:cb:13:e8:80:27:02:27:a0:84:2b:a3:6c:c8:
bc:c6:a6:85:93:3d:0c:24:4e:5d:b8:8c:b8:9a:32:49:42:62:
0f:3f:65:e0:49:93:5a:39:07:44:83:ca:98:9f:3d:0b:74:69:
11:03:67:41:52:73:0a:d2:1e:5c:2d:dc:99:6e:bb:2f:a5:af:
f0:09:5e:a1:90:fb:46:ce:ca:b5:b2:b4:0c:3c:3a:93:cd:16:
8a:ea:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:04 2025 by rpki-client