Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
File: yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json)
Hash identifier: Sl/pO+NWAXrgC2C5CBDg/ZipvRfRKOi43yok1RG9K58=
Subject key identifier: 90:54:CA:34:FA:50:04:37:D6:32:D9:B3:F8:44:B1:D3:9B:63:60:71
Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Certificate issuer: /CN=c980d19c3bfcc4047156776f02a349898e46b90d
Certificate serial: 0198D660AD128E4E208F9FFA6C2948AFA8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
Manifest number: 0965
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: suorrsYZ3GXMkvKJ77+qU+OvW55LYe7kjSQdDMlo4Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ad:12:8e:4e:20:8f:9f:fa:6c:29:48:af:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=9054ca34fa500437d632d9b3f844b1d39b636071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:c4:79:37:8a:af:f0:f3:48:52:87:3f:d7:
f8:0e:79:d4:0c:c3:09:6a:54:e6:33:a0:f3:d7:5d:
2e:45:11:09:ac:87:52:af:4a:82:d7:e1:63:63:c1:
29:da:cc:04:d2:65:67:4e:1b:5c:21:a9:ea:8a:4d:
4c:61:2c:27:7b:05:cb:e1:c2:ff:f5:44:c3:88:de:
22:d2:17:b6:f7:ab:af:7b:a5:71:75:bf:82:aa:92:
d5:b7:d2:ca:17:62:40:6d:d8:51:b0:9d:82:69:cd:
01:73:91:1b:99:a2:f8:58:b9:4d:75:31:8a:2d:14:
c2:8d:2d:85:a5:ea:14:6d:5c:e6:fa:6a:eb:17:03:
10:53:6e:dc:ba:cc:b5:82:9a:ff:46:30:e2:df:7e:
64:9d:e0:5c:ee:ca:8a:c3:e5:8b:c0:86:eb:8a:e2:
28:4d:50:c7:e3:97:63:4b:f7:b5:78:cb:c8:f3:84:
31:c7:83:9a:28:77:87:09:41:bf:f2:df:de:88:23:
4d:48:7f:81:b9:4d:5c:c3:e1:a7:24:b4:e6:ad:e0:
99:e4:cc:33:8b:f6:98:2d:e5:3f:21:61:57:22:d8:
a7:66:74:d7:ef:34:0a:c9:48:85:f7:22:d1:f9:79:
d0:62:83:46:f5:1b:27:6b:be:ed:2b:1c:07:3c:e9:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:54:CA:34:FA:50:04:37:D6:32:D9:B3:F8:44:B1:D3:9B:63:60:71
X509v3 Authority Key Identifier:
keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:39:27:f5:bb:e8:0a:a5:b6:7b:a8:59:95:66:58:17:d9:fd:
b2:27:d6:38:7d:f3:2d:81:e0:22:b3:cf:ad:33:d0:2d:cf:8c:
fe:5f:ce:04:ac:ae:4e:4f:3c:93:51:10:69:30:3e:01:e1:96:
23:65:9a:51:c0:bf:8d:87:e9:97:f1:3b:5e:db:c9:5b:fa:00:
87:33:48:5d:d1:79:77:e7:af:42:fb:cb:6f:0a:d5:8c:80:3d:
5a:55:d9:8d:f1:6d:ee:44:c6:eb:77:67:20:c0:65:18:cf:77:
4a:a0:7f:9e:b0:f4:dc:36:35:03:2f:12:3b:b9:c7:77:46:3f:
32:18:3e:c0:d4:4f:dd:99:d2:88:fd:85:98:29:17:6a:80:5c:
ba:4a:3e:54:3f:e8:f2:81:8e:9e:55:8d:6b:b9:76:35:42:48:
9e:c7:6a:fb:a9:d5:d9:19:1b:fa:1e:ea:1b:a0:b2:df:ad:96:
99:c3:cc:6c:e0:d0:2c:70:bd:53:99:8f:5f:2c:8d:5e:99:20:
c6:82:54:7e:73:71:8e:76:af:62:c2:9b:88:89:32:c4:96:84:
4d:05:d1:63:40:42:af:ee:5a:1c:6a:8c:c9:23:01:95:7c:67:
95:04:57:0c:85:f1:74:b9:db:f6:ab:d3:c4:d6:96:eb:e3:b8:
05:6e:b2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:20 2025 by rpki-client