Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: f1b0bDDvsqlqvONvzQ4QR3Apjzo+4TQdJFLvQ9neQ3c=
Subject key identifier: C4:B2:16:8C:BE:11:AA:75:8C:54:C4:83:0F:D6:21:FE:47:D5:B2:54
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 0198D5BB9188145896DA6821DA5048C19695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 0B4E
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: +Gh8WEWv9/99kpJRwO8+VrmRxxF9670WIoINCky35Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:91:88:14:58:96:da:68:21:da:50:48:c1:96:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=c4b2168cbe11aa758c54c4830fd621fe47d5b254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:84:95:eb:ec:eb:a9:5f:72:6c:e0:78:f1:
26:cd:ab:17:0a:b2:f1:1b:41:77:1d:ab:3d:8f:4c:
e0:eb:9d:dd:ef:83:dd:dd:05:17:19:f6:21:06:72:
8f:24:99:5c:4b:ff:df:80:d2:fe:d2:99:da:e8:c1:
87:d7:88:2c:da:a9:18:1a:ba:ae:2b:0b:d9:a3:4e:
79:74:5f:4d:b9:51:e8:0c:8e:e8:fa:d0:33:0b:f8:
a6:b1:a5:95:10:39:0b:7c:73:a5:65:7b:6b:96:a8:
aa:47:26:f4:02:00:59:69:82:8f:43:8c:2f:1b:0c:
c8:e7:d0:58:71:a9:79:47:0e:f3:8d:72:f4:fa:bd:
2a:25:26:a2:82:d8:27:7d:eb:4a:f4:64:0d:b9:66:
18:38:2c:29:c6:92:1c:cb:d0:40:7f:19:cb:38:a5:
a1:eb:d4:03:15:cc:41:3f:df:78:4e:b9:1b:fc:fb:
99:23:d3:e7:17:c4:ea:e6:b6:c8:92:71:b0:ba:e2:
48:3c:72:95:b5:ad:98:bd:da:fb:5b:c8:03:1c:87:
4a:a0:6b:02:29:af:ee:56:08:da:e0:83:38:de:0a:
5a:3e:0e:2a:d9:c9:be:72:10:9d:b0:aa:3e:1e:96:
2e:57:69:ee:55:47:e0:7d:e3:1e:2f:24:32:3d:55:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:16:8C:BE:11:AA:75:8C:54:C4:83:0F:D6:21:FE:47:D5:B2:54
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:3a:2f:b6:ed:0b:db:23:75:c0:15:0b:7f:ba:38:60:7d:
f0:5e:2b:29:ce:38:af:e5:95:87:85:46:96:eb:27:3a:47:5c:
61:91:d5:1d:43:20:b2:ca:1e:85:73:44:b5:03:67:60:1f:ef:
b8:1f:e5:95:ee:61:6d:10:3b:2b:7d:90:75:b2:be:66:8c:49:
dc:26:c3:71:57:e7:d9:98:21:07:60:fe:bb:27:52:70:64:12:
03:25:f1:13:76:83:d1:e6:0c:18:a8:f6:96:58:2f:c0:d7:83:
7b:26:6c:d8:06:cc:4b:0b:cb:3e:a8:4d:47:e9:41:e9:24:ba:
ac:b7:93:48:5b:87:de:14:77:78:88:92:3a:56:cd:7d:b4:6e:
22:6d:e8:a4:29:21:2b:ae:96:a4:8f:54:eb:4b:61:0c:66:15:
f4:21:09:f8:f6:50:8a:4d:da:f2:d3:7a:9b:da:bc:7a:69:dc:
92:a6:a9:80:9f:02:fc:81:c9:62:11:ae:10:ac:70:85:71:9b:
40:46:7e:c7:76:7b:f8:26:e8:3e:d4:02:dd:c0:1d:bc:64:3b:
fa:25:87:4c:6c:03:c3:2f:bb:dc:cb:91:ce:3b:02:36:f5:b6:
e9:a4:1a:b5:8b:2a:0e:76:02:c1:1d:6e:7c:29:fc:be:f4:fb:
70:a4:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:35 2025 by rpki-client