Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier: 8KHVHmQVM+Tk9w1s6lSLS7MhhH/vt3hWQ4G4FvVFBF0=
Subject key identifier: 8F:8D:B3:64:FE:20:F7:1D:0E:77:5B:FF:D2:AD:12:18:84:25:98:44
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial: 0199FAD7F231E8C4A7231D38B4C2E4C1CA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number: 1042
Signing time: Sun 19 Oct 2025 05:01:20 +0000
Manifest this update: Sun 19 Oct 2025 05:01:20 +0000
Manifest next update: Mon 20 Oct 2025 05:01:20 +0000
Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: ZDZTRDY3u843SXtIporc6fdEHr+PCrMdRrSSPAcTlsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f2:31:e8:c4:a7:23:1d:38:b4:c2:e4:c1:ca:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Validity
Not Before: Oct 19 05:01:20 2025 GMT
Not After : Oct 20 05:01:20 2025 GMT
Subject: CN=8f8db364fe20f71d0e775bffd2ad121884259844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:6b:d6:5f:89:30:20:f7:a4:bb:55:b9:cf:
f8:85:3b:05:15:15:e7:98:9e:fc:28:a5:f0:43:83:
0f:28:76:92:54:7e:cf:16:f6:e2:e5:f7:fe:93:48:
a3:b0:93:61:31:80:bb:8f:d2:8e:02:7a:64:14:6b:
8a:c3:9c:d0:f2:75:73:c0:01:df:1c:dd:75:ee:70:
6b:ce:64:0a:7d:40:02:60:f2:2e:a9:22:73:cf:a8:
77:75:02:c0:66:d0:16:90:32:74:a3:da:42:90:c0:
8d:d3:5b:99:18:3b:f2:97:57:b5:9c:86:32:71:80:
3b:4a:fc:88:bf:a7:b6:0e:f1:b3:bb:17:df:ed:9b:
fb:50:04:64:8d:04:56:3b:f9:c3:1f:07:09:74:21:
32:3b:75:05:72:35:7d:4d:df:c0:20:4e:0c:d0:c5:
cf:03:ad:5a:13:90:76:99:fd:2e:4c:ec:29:4e:14:
5f:d3:ff:d6:7b:1a:7e:28:b0:26:92:33:e2:42:12:
74:fc:6b:65:b8:8e:8f:6b:71:49:cc:65:f2:f0:58:
b9:89:f8:5c:98:55:9f:6f:33:96:69:b0:6d:fb:8c:
6d:4d:29:8d:63:78:a2:6c:c2:36:74:9f:bb:e0:d6:
59:4c:c5:0b:f2:8c:63:75:cd:eb:58:1d:e2:6e:9f:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:B3:64:FE:20:F7:1D:0E:77:5B:FF:D2:AD:12:18:84:25:98:44
X509v3 Authority Key Identifier:
keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ff:3c:83:09:94:19:3b:ae:24:b7:67:a1:d4:30:34:03:f6:
91:6f:4a:10:81:c5:54:8c:fc:1a:4d:d8:08:6b:0d:14:e7:ee:
3f:3b:77:58:40:9d:b3:b8:18:4e:d7:c1:4f:bc:54:0e:9b:c8:
63:7f:ef:10:ef:08:66:63:1d:41:00:bc:c5:e8:51:6b:e3:e9:
b9:cf:46:95:fe:55:b0:01:9f:dd:d1:07:8e:18:78:c7:4b:10:
c6:06:11:3e:e4:1d:29:b2:70:7b:2e:2e:db:17:f6:dc:e4:95:
70:2b:4d:39:42:fb:35:09:35:5c:8f:17:07:04:a9:aa:32:2c:
f8:55:33:b1:b8:31:14:34:9f:96:a4:e4:43:d0:31:28:4a:de:
30:7e:4b:c4:69:b9:5b:2c:9a:6b:b2:b1:3d:7a:47:52:10:92:
6c:e1:fe:10:6f:fa:8c:99:a1:eb:e5:10:7f:a7:20:6f:95:85:
1c:7a:4a:ab:ec:05:d7:04:cc:ed:8e:30:42:69:13:fd:14:b1:
c4:d9:ba:94:ec:e0:47:18:a6:c4:2d:49:2e:07:98:52:2d:9d:
50:a9:6f:ae:65:00:e9:6e:6e:10:84:ce:17:cd:08:a9:f2:23:
e5:33:a3:5d:a6:53:84:00:0b:ac:8c:91:59:39:f8:de:ab:a5:
4b:1d:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:56 2025 by rpki-client