Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: cFUQwiirqdOlod84Khfk4LONRrziY8IojMTNcdHpkXw=
Subject key identifier: 33:6E:3C:D6:5D:8C:5A:31:A7:8F:3A:13:B9:D4:46:44:1F:A1:B8:84
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 0199FC21AA2AA5069CB5F12D74F3B8066667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: 7NQ3GkC9B8jaqDXJSGcFqa9uSUOUji9+mb5sPp4BFpY=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:aa:2a:a5:06:9c:b5:f1:2d:74:f3:b8:06:66:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=336e3cd65d8c5a31a78f3a13b9d446441fa1b884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:65:64:7e:85:18:62:6f:c9:a9:1d:b7:0e:
e4:c4:25:b7:64:f0:b9:81:b6:b7:a0:df:fb:b4:76:
b4:70:fd:3b:4f:92:ea:f5:78:2c:fe:fc:4b:b5:f2:
e6:a0:cd:64:33:0e:41:6b:e1:b2:88:0f:a4:99:dc:
e4:56:1a:45:26:58:33:27:77:8c:e1:a7:23:73:a0:
18:e6:12:13:c9:30:4b:ae:9e:dc:48:e2:3b:dd:db:
63:dd:cb:e2:b7:60:f5:05:9f:b9:c8:b0:ee:15:7d:
6a:f2:bf:fa:91:9b:e1:7d:af:4e:a1:ae:6a:7e:4e:
72:fe:f1:ec:77:a0:e1:0f:5a:50:b8:8d:ab:e8:35:
45:e2:9b:49:82:eb:16:95:e9:f6:30:d6:34:45:34:
19:8a:85:59:85:2d:30:7a:26:ec:fa:af:44:9a:78:
f6:ac:39:ce:84:a1:93:64:9d:4d:ac:b7:ea:65:9b:
07:0b:57:45:3c:02:1c:fd:c5:e9:8b:f7:ae:58:6e:
e6:83:66:e6:13:b9:1e:5c:01:a9:f0:ca:ec:06:bb:
06:3e:3c:f5:51:4a:77:0c:60:ee:7a:e6:c7:7e:c6:
ae:55:57:c4:92:3d:fd:84:81:a0:5e:0f:14:46:96:
9c:41:1a:0a:e0:2d:fd:eb:be:9c:a0:ca:f0:a5:8d:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:3C:D6:5D:8C:5A:31:A7:8F:3A:13:B9:D4:46:44:1F:A1:B8:84
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bc:93:53:75:01:fc:47:6b:b3:c3:c4:1b:10:de:27:66:c2:
3e:28:fa:c2:e7:86:c0:e5:a8:5a:a3:15:00:e4:0d:c5:56:cf:
16:b4:d9:66:3f:63:e2:7f:b0:4d:7b:f6:68:2f:1a:00:bb:e7:
e1:39:42:e4:1b:05:e6:aa:0e:a6:42:ec:f3:93:df:c6:62:6a:
ec:4e:90:8c:dd:5a:e3:01:ad:65:f6:85:b6:b5:0d:90:e3:c2:
90:bd:11:e6:54:43:02:ac:a1:37:ba:f2:64:f9:7f:16:b9:ba:
a1:86:2e:b5:22:33:73:07:73:11:0e:cb:e1:cd:f2:75:6b:cf:
13:1a:20:74:34:5d:d4:b5:ee:15:c6:05:fc:02:1f:1d:67:ca:
ec:0b:f9:57:33:02:02:88:11:a2:e4:f7:0b:0a:d1:ca:49:05:
e5:89:1c:db:48:67:6e:04:e5:75:7d:f9:dc:63:73:7c:75:02:
50:4f:4e:10:4c:e6:1d:93:84:1d:64:3e:2c:18:15:0f:e8:99:
00:a3:cf:2b:8e:8e:df:f4:da:d9:cb:09:c7:d3:66:c0:a7:cf:
ab:c3:04:c7:1b:ff:7b:fc:39:9a:6c:cc:21:9c:14:ee:10:7a:
d1:a9:62:73:e4:6c:f9:11:ae:6c:7c:c2:2b:3a:73:aa:94:d8:
28:32:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:43 2025 by rpki-client