Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File: yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier: Y1nElTa3lmHsfNQ0uF03+BL7v4ggy1HuyQ9pexzdvZM=
Subject key identifier: 8B:F7:DE:58:CA:AB:C3:08:30:99:3C:58:16:E4:C0:9C:D6:63:09:87
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 0198D773DC73AD81B85167FFDCC85709FCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number: 05E1
Signing time: Sat 23 Aug 2025 15:02:31 +0000
Manifest this update: Sat 23 Aug 2025 15:02:31 +0000
Manifest next update: Sun 24 Aug 2025 15:02:31 +0000
Files and hashes: 1: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: Vxu40FwuWLFy/Qkj+tMt+DBYFQppuzeJbv+M0midLU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:dc:73:ad:81:b8:51:67:ff:dc:c8:57:09:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Aug 23 15:02:31 2025 GMT
Not After : Aug 24 15:02:31 2025 GMT
Subject: CN=8bf7de58caabc30830993c5816e4c09cd6630987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:f0:34:e0:44:e7:9e:db:7b:c0:e4:f2:f7:
af:77:e1:12:c6:56:fc:2c:ec:4a:2f:2d:fb:c2:24:
37:ce:a4:31:3a:ac:f9:da:7c:8e:e1:8c:d6:4d:8e:
6e:cf:3d:bc:07:62:3b:14:d0:4f:dd:44:ec:c2:94:
8b:d7:b0:f1:57:9e:c5:68:0d:f6:86:5b:bc:c4:af:
3d:c1:d5:87:a7:eb:35:56:23:93:be:5b:22:c1:23:
e4:cf:93:ff:a5:8e:cd:04:28:59:70:c2:ee:78:0e:
a3:16:66:d3:85:fb:7a:70:88:40:79:d0:45:68:39:
74:dc:08:50:b5:6e:55:02:33:f5:c5:f1:be:c7:20:
69:eb:93:44:43:34:27:31:98:99:28:a5:41:a4:01:
f7:58:05:66:ee:52:03:e9:80:e2:aa:2e:09:05:0c:
68:c7:4a:0e:d2:73:6b:94:5e:ea:f1:13:9d:5c:46:
e1:1f:a2:6e:da:e4:34:81:ce:99:cc:93:2e:77:14:
0b:ce:b1:38:26:5e:45:20:dc:06:6a:dc:db:6c:c1:
f2:ee:b8:32:f4:f5:bd:fa:96:73:46:5a:63:e6:ff:
f1:f7:4c:a9:a1:8e:a4:0d:8a:5f:3f:db:9e:f5:31:
02:a2:57:a1:1c:ed:f3:c3:b0:9b:82:e7:03:84:5f:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:DE:58:CA:AB:C3:08:30:99:3C:58:16:E4:C0:9C:D6:63:09:87
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9d:1c:ae:72:b0:e9:0f:65:94:fc:3d:3c:cc:28:f4:ab:df:
f0:30:14:96:ff:2a:9e:8f:85:e3:3a:19:51:a9:ee:e6:cc:65:
b5:16:9b:ec:dc:8a:fb:de:eb:4e:b5:06:64:1a:7f:22:ee:10:
a0:08:02:e3:99:2f:44:fc:e8:95:dc:75:95:58:dd:fd:82:3c:
fc:f5:4a:6c:44:88:55:b7:d1:f5:3e:d6:83:aa:f8:77:dd:62:
d1:b7:52:1d:05:fe:6c:3a:18:63:b1:3a:fe:5c:af:d9:61:52:
15:7a:33:ec:eb:d9:29:df:0d:c2:24:c9:3e:be:1c:66:da:45:
1e:20:cd:a1:c7:0a:00:36:63:9d:22:61:58:bd:8c:1f:df:4d:
54:76:36:23:00:a7:2d:3e:b2:c5:b8:5a:74:d5:b0:1f:e7:bd:
d9:b1:76:19:8a:da:e1:b1:0f:88:2e:ac:c0:da:98:83:25:b0:
f8:16:6b:3a:99:a0:e1:f0:7d:d2:c5:11:56:33:dd:92:18:db:
8f:80:23:b2:05:9f:92:3b:ea:ec:86:dc:82:c5:56:97:6a:a6:
0b:aa:4b:96:95:31:23:16:05:0a:47:f0:72:32:ac:3f:81:cd:
23:b8:8d:e6:b5:90:d9:f3:50:43:a5:1f:0d:bb:09:ab:68:ed:
7f:cd:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:58:04 2025 by rpki-client