Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: Oh7weCGCEqJouOpQfKvU+9daCqFD0YxfUxln65HydUU=
Subject key identifier: 82:9E:4E:F5:AF:8A:0E:7D:F3:00:B9:A6:FE:66:8C:99:6B:E0:4E:EA
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 0198D65F80893D7AC76A89090C914BF3F87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: 3S8/7btjjq0LP/9ndgOnqrmwznz9Ne8WDj7pdQPiAUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:80:89:3d:7a:c7:6a:89:09:0c:91:4b:f3:f8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=829e4ef5af8a0e7df300b9a6fe668c996be04eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:85:7a:c0:cf:99:cc:be:d9:03:da:3b:9a:
4d:a5:f6:8c:6f:22:d6:1f:7b:4e:d3:44:0b:08:93:
f7:58:94:3b:d9:cb:de:08:59:be:00:f1:df:7e:96:
62:2b:84:e3:ee:91:2f:b5:45:93:6a:16:00:0f:48:
ed:1e:a3:c9:b2:76:e9:6f:4e:a5:2f:b1:79:e7:8c:
ba:b2:3a:09:52:88:85:ed:27:7c:d2:6b:d4:96:b1:
a7:de:95:96:d6:26:1b:67:51:51:b1:18:42:26:d4:
d1:ae:d5:55:70:49:89:af:66:8c:03:bf:06:4c:9b:
40:09:dd:b6:06:39:5c:0b:60:05:59:ad:9e:ac:29:
3f:e5:d1:dd:43:33:75:1e:d5:df:f2:f3:92:35:f6:
ff:eb:98:ab:15:b3:85:1e:fd:bd:15:6b:92:c2:26:
02:27:fe:50:a5:f3:5c:33:0c:9b:e0:58:ad:14:e7:
ec:1a:47:c4:d8:1f:28:e5:02:9f:69:3c:ab:d5:fe:
06:c2:b4:fb:8e:87:94:64:5f:9f:a5:8a:57:32:2a:
60:f4:dc:7e:1b:32:73:a1:26:65:48:ce:e5:d3:4b:
ac:d7:3d:0d:12:ed:29:0c:0c:13:0e:ae:3d:78:3a:
cc:33:c3:0b:0e:2d:aa:e0:ef:61:fc:2e:82:b3:22:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:4E:F5:AF:8A:0E:7D:F3:00:B9:A6:FE:66:8C:99:6B:E0:4E:EA
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:40:7b:92:dd:97:eb:5e:e0:d1:37:24:10:08:68:24:76:17:
d7:1e:91:ba:2a:a7:0c:b9:13:bb:5a:60:3f:2f:e8:2b:4f:80:
66:fc:fe:4f:37:4f:a5:eb:b1:42:9d:70:61:ef:01:9b:9e:27:
7e:66:71:70:c1:24:23:bb:5c:11:6a:ee:7c:64:85:c8:ee:c7:
d3:64:dc:a8:c5:a1:3e:bf:52:96:16:53:3a:41:99:87:5f:f4:
21:e0:dc:2b:d8:32:38:ce:17:64:6b:80:dc:b3:c1:8f:92:8b:
72:0f:0b:ab:3a:07:a8:2a:c2:be:c1:c4:a6:83:99:b3:2a:24:
0d:05:60:3c:13:7b:fd:17:82:1c:84:ea:75:53:8d:50:5a:a1:
4b:01:c8:8e:e9:65:9a:70:ee:7b:65:10:a0:c2:be:4c:3d:7e:
c5:9b:92:b1:21:e4:e4:1f:7e:74:bd:d2:39:ab:e6:38:52:c3:
44:cc:72:42:69:0e:58:a0:01:fa:09:59:a8:3d:9e:d3:f2:bd:
c6:86:49:a0:3f:26:ac:a9:cf:35:e0:76:be:31:6f:dc:e1:05:
78:94:9b:0b:fe:f4:c2:a7:88:33:0b:d9:3a:a4:aa:9d:25:d8:
ba:2b:ee:2c:0d:c1:54:17:25:3a:be:12:a9:d7:57:58:dd:62:
95:27:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:25 2025 by rpki-client