Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: 1BZpLll1g8+7PRWho9mtgYKHcVDhz3Iz39ThV8C2dNU=
Subject key identifier: EC:BE:6C:58:96:57:C4:F5:AB:36:34:8C:7F:E3:8E:6F:E9:AC:11:4D
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 0198D515E7A270EBA279E5483D1FFA4475B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: VQDiwi/XAlzACVKBUg0PUAFE4hggw/LkoKTxBRqAo4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e7:a2:70:eb:a2:79:e5:48:3d:1f:fa:44:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=ecbe6c589657c4f5ab36348c7fe38e6fe9ac114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:c2:d0:ae:ae:4a:bb:3e:2b:7b:5c:1b:52:
b6:6f:40:15:38:e9:24:e7:5b:cb:33:cb:c6:f7:30:
b5:bd:bb:67:34:40:24:e2:75:21:c3:4c:5e:84:0e:
c5:a8:50:5c:0f:31:64:50:4f:1b:f0:35:fd:e9:c2:
d4:7a:86:78:15:2d:32:e3:bd:75:65:94:d1:48:cd:
c2:5c:94:82:81:93:2f:b6:3e:27:02:1c:af:77:73:
41:24:6a:9d:fc:60:c3:02:ac:6c:00:90:80:36:94:
05:a6:cd:fe:53:0e:fa:88:17:ce:af:73:61:96:27:
78:60:c3:e9:34:7e:48:f0:cd:ac:20:44:21:c0:d1:
95:67:e6:3a:7e:99:b9:80:41:a8:31:ca:d4:00:18:
2a:d3:0d:0c:ee:c7:be:3f:27:2f:e0:58:f7:53:d1:
b9:f8:5b:a3:9c:fc:d5:6d:84:14:b4:07:d8:0b:15:
42:ee:6b:a0:4f:06:a5:e5:74:91:14:88:63:70:9e:
29:85:cb:32:27:0a:98:7a:c3:82:9f:a1:b7:d1:1d:
1c:c2:29:2e:43:2a:fd:e9:7a:33:88:16:2f:57:1d:
19:cc:39:cc:e2:28:5d:42:63:15:f8:22:a7:33:3a:
f4:3c:cb:64:e7:c3:c3:b1:84:db:27:59:ec:57:f0:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:6C:58:96:57:C4:F5:AB:36:34:8C:7F:E3:8E:6F:E9:AC:11:4D
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:82:ce:25:e1:07:a8:2a:96:11:c0:6e:67:e8:dc:ef:9c:6b:
a7:90:49:6d:57:51:cc:60:46:be:0e:16:f4:93:4f:a2:e7:79:
ac:ef:15:8d:16:65:55:df:b3:cc:47:ee:5b:c7:19:d2:2f:33:
66:a0:55:2d:69:97:c7:e0:8e:c7:c7:42:75:6d:e4:a2:de:1b:
42:c0:9a:65:db:92:d6:b9:bd:06:44:16:20:ab:91:3f:89:5c:
74:d0:02:cd:89:7d:9e:4a:49:a0:30:07:c4:f2:e0:75:7c:e1:
22:62:13:5c:36:e6:c6:11:44:18:a2:ed:97:b5:30:d4:f9:03:
f8:a1:de:e7:c9:bf:3f:59:e7:75:4f:37:3a:e1:d0:ab:e4:63:
1a:b5:e2:91:6b:c5:97:ba:f0:8c:e7:da:26:00:31:9a:39:d7:
49:5e:03:42:9b:93:36:71:ac:2d:7e:f1:92:c6:7e:78:67:a9:
36:8d:97:b5:a7:42:fc:99:6f:a0:80:b7:4e:0d:13:20:20:3e:
81:1a:43:d6:a9:53:3b:c1:18:93:f5:1c:dc:9f:28:52:dc:f1:
a0:32:33:5e:8d:78:f6:08:79:32:c4:54:51:49:76:d3:18:be:
08:9c:e4:0e:e0:51:ab:2a:c4:80:d4:85:e6:03:1a:f5:ed:80:
1d:9a:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:20 2025 by rpki-client