Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
File: Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json)
Hash identifier: YgMQXI2BNBaCNocyibJyZWJ+6/wtXUGcL96neAXsXhY=
Subject key identifier: B8:74:78:D5:59:07:96:FE:36:5D:68:0C:9F:62:0E:38:62:88:F4:5E
Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
Certificate issuer: /CN=63850055f27ec40756297ffcd759eb861eef73c1
Certificate serial: 0199FFC823BCBC2553E28F94681E95DC9A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
Manifest number: 0198
Signing time: Mon 20 Oct 2025 04:02:10 +0000
Manifest this update: Mon 20 Oct 2025 04:02:10 +0000
Manifest next update: Tue 21 Oct 2025 04:02:10 +0000
Files and hashes: 1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: Rlr8Ac/ea1Qa/dj5B2JX4Q2JtVhSViVyW+1KWX6duGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:23:bc:bc:25:53:e2:8f:94:68:1e:95:dc:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1
Validity
Not Before: Oct 20 04:02:10 2025 GMT
Not After : Oct 21 04:02:10 2025 GMT
Subject: CN=b87478d5590796fe365d680c9f620e386288f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:e0:9b:fb:d6:a6:64:6a:f0:bc:47:3f:63:
1f:4c:ed:ee:3e:02:b1:7c:73:42:1e:37:1a:bf:c4:
85:c2:47:61:38:da:2d:48:65:80:06:c1:b0:1f:ac:
f2:56:b1:bb:67:c7:aa:1d:d3:93:3c:2e:90:a1:9c:
29:e6:9a:99:c7:4c:64:dd:66:71:e7:8e:65:a1:e3:
c5:3c:ce:a7:e6:02:7f:e3:57:8a:44:ad:61:b4:0a:
78:0c:ea:6c:08:7d:b6:80:0e:2c:65:ac:76:70:75:
00:7e:cb:9e:89:e5:34:c5:cd:64:d1:08:cd:62:d4:
f4:fb:76:63:20:ee:4a:b1:14:70:53:0b:79:63:56:
af:ec:05:94:dd:38:48:86:ec:e7:00:23:32:d6:52:
6f:26:e1:3f:75:53:29:19:29:1e:3b:20:01:82:5e:
e7:32:9c:f8:e2:c8:a2:c7:a0:9f:08:4c:a6:2a:67:
59:4f:3c:b3:37:ff:df:e8:a2:26:73:58:cf:4e:67:
95:03:7c:97:6b:c1:37:ba:22:b8:db:f6:48:9a:46:
84:21:a6:d7:13:a7:2f:54:f9:cf:9d:a3:6b:96:a1:
51:17:89:7a:85:e9:63:7d:59:2b:ad:15:25:1f:dd:
b7:c2:c9:a4:fe:aa:98:20:0c:c6:aa:a7:74:f8:12:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:78:D5:59:07:96:FE:36:5D:68:0C:9F:62:0E:38:62:88:F4:5E
X509v3 Authority Key Identifier:
keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f3:45:6d:fc:00:38:dd:26:4e:32:d7:16:17:a1:a4:bc:b7:
26:ed:d4:ee:4f:5a:a0:13:75:ac:1d:0d:82:34:7f:e9:f9:a4:
14:ce:85:00:4f:15:b1:54:18:48:fb:3c:eb:86:03:43:f4:ab:
0f:aa:a8:52:71:ff:67:0b:50:b4:9c:58:e5:94:9d:f6:f8:2b:
3b:d6:bb:44:e4:56:b0:32:d3:14:8c:6e:a2:fe:f9:b3:e4:1c:
4f:68:9c:0e:e3:83:57:67:68:9e:35:e8:7e:2c:28:a6:c2:13:
5e:3c:5a:8b:09:12:9f:48:6b:71:78:eb:8e:d6:45:7f:bb:b0:
b7:eb:f2:e7:dc:a3:31:ab:13:7e:20:40:08:9f:a6:17:50:30:
67:71:7f:30:c1:b8:cf:86:aa:02:91:bd:c3:d6:61:b0:09:62:
d2:91:1a:df:21:12:b9:2c:2f:8a:6c:f3:f4:a9:5c:0a:9c:4d:
43:d5:b7:8b:95:64:b4:51:af:62:7e:d7:d3:b6:81:9e:fd:a3:
5d:c3:86:ce:26:5f:8e:ae:fb:ba:32:ff:4e:a8:c4:e8:38:ff:
d1:59:3a:1b:5c:d2:96:c5:d5:68:1d:91:e3:f9:39:55:c5:21:
eb:05:37:5b:b6:15:5a:a2:68:c5:a0:28:bd:97:a7:e0:13:a7:
e0:f7:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:50 2025 by rpki-client