Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
File: YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json)
Hash identifier: d1ClzW14lJpOhDfYBo6s8ipnwtDsitaTPgGYuyhvuJA=
Subject key identifier: D5:DC:DC:95:2A:0F:85:15:29:1E:02:9B:9E:6B:43:C4:AE:EB:C6:82
Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
Certificate issuer: /CN=600d3d0e471426ef383e3911383a4983bf227644
Certificate serial: 0198D5BBABB54A02BF5115234BEDFD46845D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
Manifest number: 031B
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: lOC9tdxg1nngJICQUu/Re2GHmO/5jGvHuL0pqQrbVa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ab:b5:4a:02:bf:51:15:23:4b:ed:fd:46:84:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=d5dcdc952a0f8515291e029b9e6b43c4aeebc682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:d6:db:9f:39:7c:d7:f7:c4:22:27:45:2a:
d0:1e:9a:1e:f5:1f:13:ba:60:3b:32:5f:8a:e7:4d:
7c:64:c4:95:e6:f4:dc:6e:df:96:29:42:ab:b4:1d:
83:ce:17:41:25:10:ac:54:38:ce:f2:a0:bb:60:ff:
96:1e:ca:02:c8:62:c0:1e:46:76:6a:7b:57:36:c8:
0e:77:e3:92:40:75:64:f8:2c:3a:52:79:fd:f9:63:
eb:0c:ce:47:c4:49:de:15:d0:93:c3:4c:72:60:c3:
ab:11:ff:04:59:7b:98:ad:7d:91:a3:5f:2d:aa:da:
78:c7:b8:4a:b0:65:39:1b:ad:22:b9:28:cf:38:c7:
94:2f:1a:f2:43:a7:8e:d6:db:e7:9d:7c:46:92:cd:
c1:6a:4f:cb:9f:24:1e:f1:d7:f2:ce:2e:f3:e5:42:
3d:35:79:5d:a5:d0:6b:2c:f3:68:df:50:41:31:fe:
9d:b9:8c:54:06:0a:1e:3f:5f:4f:c7:b3:ed:45:1b:
ca:22:9c:2b:de:d1:2d:12:1b:78:57:bb:c4:e2:db:
db:5f:84:44:36:b8:06:34:94:2f:70:f7:92:ed:6b:
68:90:24:e8:76:c3:73:d6:4e:df:04:dd:ba:a2:ef:
ac:f7:4b:01:83:28:c3:67:bc:18:f2:00:0d:12:4d:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:DC:95:2A:0F:85:15:29:1E:02:9B:9E:6B:43:C4:AE:EB:C6:82
X509v3 Authority Key Identifier:
keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:03:ff:6e:39:6d:25:3e:d0:a8:15:e3:2c:23:da:8d:48:ae:
b1:f1:6a:fa:83:49:86:25:fc:c5:46:9a:46:c3:20:54:4d:d5:
a5:d0:4a:f0:66:73:60:9d:ce:ef:eb:1f:a7:63:9c:36:07:ed:
7d:93:4f:42:d3:59:01:1d:80:9e:ae:0b:1b:f2:b3:10:21:e4:
b9:ed:f8:51:11:12:08:ea:02:10:fb:36:67:be:0d:fb:b1:b5:
b6:38:8a:09:61:4a:f8:66:50:93:25:68:96:37:d2:d2:ac:0f:
a2:7f:a4:b5:16:6d:dd:a5:b2:07:3b:64:ec:16:10:4a:01:d1:
9b:de:f3:8d:b1:73:fe:ea:8a:43:99:9b:a5:7c:1e:4d:ef:36:
e8:83:57:de:cd:05:35:2e:8f:2c:01:45:01:36:bd:0c:44:d0:
b3:4a:c4:08:ff:87:a2:cd:7d:3a:96:87:1f:f9:60:4a:03:04:
dd:b1:63:57:1a:48:4b:10:a3:13:8e:cd:4d:f1:ee:e5:90:29:
e1:0c:56:54:0b:df:82:04:ea:78:00:08:63:03:28:e4:29:07:
1d:b9:c0:f3:44:3c:eb:25:ec:f7:96:ce:c1:07:25:58:86:86:
1d:2d:14:14:e0:e6:87:b3:48:0e:bd:99:e0:79:10:68:a5:71:
51:85:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:48 2025 by rpki-client