Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: NasHS7tAQyBVr8jbf5vyjdLG8fc05noKBd64G1xwhyo=
Subject key identifier: 5A:6F:FC:12:83:54:F9:04:D1:C6:5A:19:55:61:CE:7E:8B:9E:B6:E4
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 0199FBEB3BF82494E6BAC296C523A5F0EB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 11CF
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: Dm0JvGtcLruUHuN4pq9914tR9pt7gAztIFD7vg4hUbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3b:f8:24:94:e6:ba:c2:96:c5:23:a5:f0:eb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=5a6ffc128354f904d1c65a195561ce7e8b9eb6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:55:a2:c4:6b:83:1a:43:6d:7c:ac:9a:1d:
c0:f6:ba:0d:5e:00:ad:1b:8d:c6:93:2d:97:a1:5c:
d6:f6:56:d9:45:03:9f:3e:9a:23:13:4f:2c:fd:10:
94:0f:0d:6c:9c:f3:37:df:d3:f5:93:ea:9e:9f:73:
09:b5:ab:bf:43:32:02:ea:4b:80:f6:0f:cb:58:0f:
ed:a3:fa:ae:5c:59:68:94:fc:3c:b2:95:9b:eb:44:
b5:e2:90:dd:fc:9c:b0:65:41:0b:a5:8f:f2:dc:18:
7c:29:f9:00:c8:aa:24:60:eb:0f:b0:50:03:34:c2:
41:66:fd:a9:fd:b8:0c:44:be:e0:b7:23:e7:05:80:
50:a4:4e:64:1f:b9:27:1c:84:30:2d:2b:c7:e4:d0:
f0:dd:68:d4:f6:66:45:f4:d1:20:4a:24:a9:b2:86:
f5:42:41:9a:50:8c:1f:75:58:5b:58:f5:80:f4:f6:
d3:2c:9c:14:4e:ad:4b:f6:72:d9:bd:cf:9f:08:44:
86:d6:85:e7:57:a2:39:15:b8:3d:bd:48:34:74:a1:
10:cf:93:b9:d1:c4:85:90:43:1b:d2:e5:6c:72:b4:
f7:26:02:85:a1:7a:82:cc:35:e4:79:e8:3e:c9:28:
6f:56:48:61:e2:56:51:8e:de:fb:43:a4:b2:5b:64:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:FC:12:83:54:F9:04:D1:C6:5A:19:55:61:CE:7E:8B:9E:B6:E4
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:20:db:e1:31:bc:f4:ff:54:f6:ad:f5:c6:db:23:89:5d:58:
fe:8c:64:79:44:2d:cc:7a:6b:af:60:2b:6b:bd:23:ef:21:6a:
b0:8a:a8:4f:f6:4a:5a:55:85:a8:44:12:fa:1c:55:be:27:3a:
6b:e8:3f:d5:e7:3f:1f:b5:1b:3e:e0:99:ab:32:ae:a0:93:c2:
56:9e:d5:34:71:2d:e9:b2:29:6c:88:4b:76:a6:5a:75:b9:a4:
8f:51:af:ca:78:8d:ec:1b:b9:6c:25:1c:3a:da:88:b1:53:74:
b7:66:96:37:1c:01:62:67:05:4d:fa:80:8f:05:b7:d7:3e:4e:
1d:d6:75:18:15:3a:6b:3d:32:e6:59:a7:79:b8:42:11:fb:0d:
df:9b:f0:53:f1:51:bf:a2:c3:e5:43:af:09:f0:c9:7d:d3:6c:
71:4f:79:47:bb:31:86:be:7a:a1:c1:11:e9:7c:bb:eb:4a:a0:
d3:a1:df:17:bb:4c:4d:7b:c1:a5:1c:92:a2:fe:f7:29:f9:4b:
c9:44:0d:cc:85:dd:05:85:b8:93:1a:2d:c8:15:37:2f:dc:d7:
87:00:82:8b:d2:47:7a:e4:0e:dd:52:42:84:c9:35:98:d9:27:
f1:ea:14:d4:bb:6f:95:d1:ec:d5:1e:d9:e6:d5:08:c1:29:5a:
34:8a:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:23 2025 by rpki-client