Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: stm61bTpxb4dODeKnCqRxsAuNGnb7f4sMUBq+5u5xi0=
Subject key identifier: EA:33:1F:43:A7:81:83:9F:FA:FF:CC:04:BC:9C:3A:90:D1:B9:D6:8E
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 0199FC8F9FFD7EA725080CDB985CADEB6AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 1061
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: nEB7G2jWU1gPfrBHVstSr8wZN4230YuOg1UaBU5aoRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:fd:7e:a7:25:08:0c:db:98:5c:ad:eb:6a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=ea331f43a781839ffaffcc04bc9c3a90d1b9d68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:d9:bb:89:25:5a:cc:c7:39:3f:88:22:c4:
f7:09:ea:2c:8b:24:bb:95:b5:2b:c3:c8:2c:ee:a5:
b5:5b:7c:6f:fc:93:7b:6c:65:d3:af:e9:3e:5e:30:
a1:85:2e:9f:96:13:9e:66:12:9d:c6:68:9c:e9:6a:
00:ab:96:38:2e:b5:c4:3c:06:5a:7e:e0:5b:c0:45:
2d:5f:dd:99:f5:3c:4e:4f:bc:29:fd:17:20:1a:b6:
29:b7:df:67:f0:5d:f1:4d:66:e0:a0:d6:6b:56:8c:
20:09:31:d2:e7:9e:81:5d:88:ac:c8:48:3f:93:a4:
7c:a9:23:e3:2a:a3:a3:64:c7:52:8b:dd:7a:50:f8:
a6:94:76:50:bc:0d:25:da:40:17:88:d6:3f:f8:bf:
73:c0:0b:5c:77:82:ef:ef:96:bc:36:ed:73:d1:33:
bb:3c:d6:f9:4a:04:f9:96:e5:a7:48:de:02:bb:c5:
e8:29:40:e3:91:a9:46:f6:f0:69:7c:8d:30:dc:2a:
5f:d9:f6:25:bb:5e:fa:e5:ca:01:a4:d0:33:9e:af:
00:b8:08:4c:4d:e3:bc:8c:93:29:66:13:a3:bd:44:
55:51:63:90:a7:51:b1:3d:75:44:ad:4f:9a:a1:f1:
b3:5a:6c:34:ed:c9:4a:ca:6e:a8:d3:37:82:b2:6f:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:1F:43:A7:81:83:9F:FA:FF:CC:04:BC:9C:3A:90:D1:B9:D6:8E
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f9:a9:be:63:37:eb:94:d4:16:5f:ab:e7:45:c1:b1:6c:ed:
81:19:d1:7d:e0:34:e3:9c:93:b9:3e:9d:f8:a4:70:7f:c6:69:
1c:f4:dd:1b:25:29:ee:f5:f2:1e:63:b8:e7:e1:f3:d3:f0:90:
58:a7:0c:32:f8:e2:b9:77:1d:3f:d0:1d:74:2c:eb:32:0c:9e:
2d:9b:d1:ef:a7:05:14:03:fb:31:82:74:e6:88:fc:a8:08:fc:
54:44:36:23:9a:34:93:3b:18:59:6b:be:b4:6d:d1:38:83:aa:
db:30:25:ac:b4:71:ac:9d:c7:15:ea:f1:4d:b8:e2:f7:34:90:
0b:cc:3e:a4:41:c2:03:5b:bb:6c:ef:39:44:ac:9e:8a:a2:42:
13:b0:66:92:59:bb:17:a8:68:9c:37:4c:b0:93:63:88:b1:70:
c0:22:2e:8b:36:fe:27:17:02:66:0a:fe:33:5e:d4:f6:56:61:
c5:39:40:66:b9:b0:72:02:aa:15:db:c9:ff:3d:e6:b4:d9:48:
11:5f:5b:e0:a0:1b:f7:16:5c:ae:0d:5a:3e:ef:74:41:32:a0:
a3:47:8a:74:7f:fe:44:10:21:62:b5:65:df:e7:96:71:46:15:
f4:4d:3f:6c:3c:e0:0b:8b:47:1d:9e:72:2f:32:de:32:3b:04:
2a:9d:a8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:05 2025 by rpki-client