Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: 4/bSVKltDH5ceGwlCBEKs/By5c0EjVqcy5q1eezH6bA=
Subject key identifier: B9:C1:5A:53:82:4C:52:28:7B:B8:2D:39:CD:D6:30:AF:86:F2:A2:59
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 0199FC588B0ADE50C8B2CA21611E767F848A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 05CB
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: ndjnMmj2we8e6wWeyB8PRvv3Q/XoWa+Luh5Z+asPaL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8b:0a:de:50:c8:b2:ca:21:61:1e:76:7f:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=b9c15a53824c52287bb82d39cdd630af86f2a259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:b8:ea:0c:08:3c:c9:c6:4f:43:78:d5:fa:
a7:3a:dc:cb:22:42:d9:29:29:41:5a:cc:94:cf:b0:
f5:f7:3d:e8:36:42:6d:d3:b8:90:2e:50:93:3c:48:
2f:74:ce:2d:d9:8c:4c:9e:58:38:b7:06:80:61:d9:
0d:c2:5d:ca:a3:39:a0:75:05:4b:37:3e:eb:21:e3:
ee:b1:30:d5:e1:02:2c:d5:56:c6:64:a3:5f:55:1f:
21:26:a1:9e:63:4d:85:44:20:ff:fd:cd:58:d5:62:
b6:81:dd:8b:a4:99:16:06:a1:8b:1f:ae:a6:14:fc:
84:94:dd:4a:47:29:34:fc:92:59:dc:4a:c7:ff:ac:
6f:2a:c5:f2:2c:29:38:09:c6:7d:00:80:d0:6f:70:
9e:7a:e2:91:39:49:c0:4b:1f:c5:cd:c8:c0:fb:79:
26:3e:70:35:b1:74:d8:25:1b:b5:a6:1f:33:00:c7:
27:21:f1:91:df:2e:0f:95:17:c0:59:c7:ce:13:88:
99:2a:ef:8c:a9:6b:b7:35:ef:2b:1e:0c:10:b8:5d:
7a:e9:7d:84:79:c1:65:a3:2c:43:8e:29:44:9a:5c:
79:92:18:f2:5e:f7:b1:f5:0b:5d:6f:25:e9:50:c5:
60:96:10:e1:5b:e0:9d:c8:fc:e8:24:fb:f5:0d:90:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C1:5A:53:82:4C:52:28:7B:B8:2D:39:CD:D6:30:AF:86:F2:A2:59
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ac:75:eb:66:78:67:2a:65:d6:26:05:7b:5b:4f:37:99:e9:
9b:d0:db:d8:a6:bc:0e:d5:ec:38:7d:33:8a:79:91:e9:de:0e:
66:48:f3:0e:a9:be:91:7c:47:4d:3c:eb:72:13:c1:ae:fe:6c:
ff:55:cb:2b:d6:85:dd:1a:86:99:8f:d9:87:ec:6d:03:f4:42:
85:a4:47:86:ec:83:55:24:9b:ab:e9:93:84:ed:bf:f9:ea:dd:
af:7b:e4:8f:47:8e:c8:1f:8f:bf:0d:d2:a7:19:01:8c:38:a1:
2b:08:87:fc:29:97:6c:a3:58:47:d8:77:52:e3:36:2a:da:53:
ef:fe:74:de:fa:06:19:83:b7:c2:1f:f2:aa:e6:0a:e8:76:58:
2b:16:6d:70:08:80:00:51:67:fa:99:d1:cf:0a:df:e7:b8:a6:
48:fb:5d:22:aa:42:48:96:ef:b4:13:a5:64:8b:37:22:07:a4:
95:cf:f2:f3:1c:f3:0f:0a:8d:d7:90:28:65:43:09:e0:73:d7:
6f:76:72:7b:99:91:67:41:98:9b:5c:54:a6:3a:0b:a9:96:49:
03:af:8e:e8:db:4d:fe:e5:a1:cb:e0:ce:0d:5b:f3:cb:e3:2e:
1e:aa:3f:f5:aa:cb:c7:c7:03:8a:27:0b:46:bf:a2:25:47:c4:
fd:41:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:31 2025 by rpki-client