Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: jP1LeQ6pDWiEqm48G08UZWuNKlPNlhz+TPc5NOL4ea8=
Subject key identifier: 4E:AD:15:A8:61:FA:83:4F:12:0A:C0:C7:7F:E2:1B:4E:57:2A:8D:33
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 0198D660D49C11917081CD62F2B71147AEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 10:02:06 +0000
Manifest this update: Sat 23 Aug 2025 10:02:06 +0000
Manifest next update: Sun 24 Aug 2025 10:02:06 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: KVVWp1jd96KfmgpHynIwbU4B+aaxJ1D8LaYYZfXveV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d4:9c:11:91:70:81:cd:62:f2:b7:11:47:ae:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Aug 23 10:02:06 2025 GMT
Not After : Aug 24 10:02:06 2025 GMT
Subject: CN=4ead15a861fa834f120ac0c77fe21b4e572a8d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:ca:e7:85:53:20:e1:f1:8a:50:ea:8b:3d:
e3:72:f1:a8:62:24:c2:7e:6d:05:f4:65:4d:d6:43:
71:f0:98:e1:e3:ec:34:86:be:7e:d9:3a:e4:cb:c8:
35:a6:0c:69:54:3c:48:fb:c4:83:d0:82:eb:44:5d:
04:e6:a9:cd:85:a5:a6:ec:ee:0e:a7:b9:c8:3b:54:
71:78:f2:d3:30:6a:72:e2:d5:e9:31:6b:70:31:76:
30:e2:44:1e:86:a0:0d:2c:02:33:51:2a:91:5f:de:
f3:da:6f:cd:ce:e1:8b:3a:ef:cd:74:ae:1f:27:09:
b4:22:c1:91:f6:0c:32:de:d8:f5:21:1b:5f:34:57:
3d:27:fd:62:18:c6:4e:71:80:85:08:92:aa:92:81:
04:df:f0:df:49:ec:bc:b3:0e:00:e4:9e:e4:0a:d3:
79:8a:35:75:ee:66:39:13:80:a0:2b:b5:1d:9b:0f:
61:fd:9d:2f:2b:1c:4b:24:12:fa:a9:05:b8:60:95:
12:78:82:9b:40:3d:65:b1:39:53:a4:4d:39:df:06:
a7:91:af:ea:42:eb:5a:9a:f5:1b:ad:0c:c1:c9:04:
dd:55:63:c0:68:4f:5e:08:8a:53:39:ce:e7:14:b4:
c5:aa:51:ae:50:52:a3:d7:63:ef:1b:ef:36:ce:2d:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:15:A8:61:FA:83:4F:12:0A:C0:C7:7F:E2:1B:4E:57:2A:8D:33
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:b0:f7:5f:9e:5f:df:04:21:d8:f5:fc:b8:df:e1:3c:8e:
65:cd:3a:59:fc:7d:1f:d2:10:52:71:59:ed:2c:f2:de:69:37:
a0:f0:9f:9d:7b:71:c4:28:45:11:b4:07:10:e3:29:a5:f3:d5:
3a:b7:12:4f:85:02:f3:3c:21:d2:c0:a8:c0:bd:f2:94:23:d4:
9e:1a:89:f9:b8:ff:63:75:0c:8a:a3:93:d5:e1:f2:a0:3f:08:
68:60:57:de:11:f1:45:b5:42:ca:04:18:ca:97:c8:1b:96:3a:
43:23:82:fc:c9:7a:c7:81:f5:77:b5:13:b2:3b:7b:01:49:01:
96:da:de:18:91:1a:68:2b:7c:5f:0d:16:ba:df:27:e3:7a:84:
f6:fa:0d:df:fc:64:9d:b5:cd:33:dd:1b:06:8d:ba:42:d2:7e:
ae:78:5e:f0:22:f3:f4:70:ee:6b:fe:5e:f0:8c:77:03:5a:97:
20:7c:39:f7:f5:58:c1:02:a7:dc:f9:d0:af:90:e4:eb:5e:65:
6e:cc:e3:a3:7c:67:fb:09:1e:c1:28:b3:ea:c5:c7:4b:80:32:
06:aa:de:8c:57:1a:e7:9d:15:78:1e:1b:86:9b:07:28:79:f9:
0e:9c:03:77:5e:2c:8c:34:ca:67:62:7d:99:da:be:8d:95:7c:
fd:7e:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:35 2025 by rpki-client