Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: CncuSNUqrlRfM4KueQOy7V9RBlcbRLodyLnpjrNdZQM=
Subject key identifier: 72:76:55:B3:00:45:DB:28:0C:CB:38:AB:F8:64:54:0C:0B:B7:56:7F
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 0198D850AC8293AED8E721F91F541AB0C8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 19:03:42 +0000
Manifest this update: Sat 23 Aug 2025 19:03:42 +0000
Manifest next update: Sun 24 Aug 2025 19:03:42 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: Pc5Hi8kGSYlW9Oo2xEdE68PPeGyKJhScdezKVXEflzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:ac:82:93:ae:d8:e7:21:f9:1f:54:1a:b0:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Aug 23 19:03:42 2025 GMT
Not After : Aug 24 19:03:42 2025 GMT
Subject: CN=727655b30045db280ccb38abf864540c0bb7567f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:48:ea:ab:1b:b5:c2:8f:08:ef:ae:80:bc:
fc:77:f6:8c:b5:e0:71:95:dc:d9:cc:89:38:d9:25:
7a:ef:09:1a:6d:08:f6:3c:67:44:49:ba:13:68:ce:
d6:46:ec:4c:db:70:9f:7f:26:32:67:b2:e6:92:2d:
c5:de:be:e7:7c:16:2a:a5:46:7b:00:23:f7:1b:d2:
3c:42:91:0b:86:f4:91:10:d9:9d:97:32:37:5f:10:
fd:85:84:f4:d7:2c:38:f7:43:a2:21:0b:a8:c7:76:
1d:76:60:66:22:12:a3:c3:6e:1e:51:1f:43:3d:43:
e7:8e:54:11:1a:87:7e:a5:f1:a3:3a:fb:12:b1:88:
6f:8f:8d:54:7e:40:85:67:4b:a5:d6:89:d0:c7:a9:
83:35:5c:e3:c5:07:13:dd:17:c4:f8:54:7b:c9:93:
fc:f6:2c:f7:d2:f3:d3:e2:2f:1b:1a:e7:2f:1e:05:
e7:8d:02:7e:15:0e:a8:e4:48:35:aa:2f:37:0e:6e:
10:4c:61:34:f5:24:0f:d4:4c:7d:e2:a7:bd:2e:34:
75:65:59:7c:60:70:0c:f8:63:db:28:66:bc:89:e3:
83:06:41:66:57:b3:21:9b:62:84:26:1f:3c:37:83:
c4:fc:05:9c:60:96:0e:5e:bf:2a:b6:4a:ae:11:9a:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:55:B3:00:45:DB:28:0C:CB:38:AB:F8:64:54:0C:0B:B7:56:7F
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:96:39:30:f6:94:45:96:63:28:80:c5:be:be:a6:01:df:95:
11:fe:35:ab:8c:25:a1:94:62:17:63:65:1d:f7:3a:c0:47:f4:
64:65:1e:dd:11:5e:9b:35:24:55:9b:59:27:b1:96:4f:11:b0:
0c:39:11:3b:ec:b0:6c:85:c6:29:f2:86:93:d5:3a:b9:95:76:
f5:ab:20:26:03:bb:f8:dd:4a:85:af:6e:90:ab:ec:f5:2a:a7:
c7:f1:8b:b5:96:2a:9e:a2:f1:bf:3b:89:a2:ca:cb:04:8c:03:
60:16:33:42:9b:83:00:da:62:d4:7f:9b:69:9c:88:bc:2e:11:
17:b5:ab:de:cd:30:39:a7:6b:41:b9:75:c2:19:c1:27:fb:d4:
1a:8b:c1:c7:93:45:d3:0c:00:40:f1:a4:ca:33:82:01:0a:09:
93:39:13:e9:f1:53:06:f6:7f:af:12:30:01:31:06:9e:3a:2c:
aa:4e:f1:6c:7d:67:23:df:15:bc:92:47:8f:69:9e:2a:13:0f:
ac:b5:87:12:a0:92:0e:0f:6c:b0:08:e1:41:e4:d2:c7:25:2f:
1a:dd:fe:f3:19:18:b1:d2:ab:a3:71:5d:53:ec:cd:a5:b5:c3:
86:2c:67:f6:7d:30:ac:af:39:ce:ac:11:a5:0a:30:0e:aa:87:
af:c5:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:27 2025 by rpki-client