Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: OLcJXjF3NvosghJOopOGwPIoWj9jIgEzvpYNIL9btGQ=
Subject key identifier: B9:97:88:B2:13:9A:7B:5E:8D:BE:FB:34:78:C9:93:4F:B8:8C:B3:98
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 0199FEB504471A893F7761E430B0C518E2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 070D
Signing time: Sun 19 Oct 2025 23:01:39 +0000
Manifest this update: Sun 19 Oct 2025 23:01:39 +0000
Manifest next update: Mon 20 Oct 2025 23:01:39 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: vbR3fh/MfTht0yTrtsEd3yQ3Slpo2CAa5GDUVOfcxqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:04:47:1a:89:3f:77:61:e4:30:b0:c5:18:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: Oct 19 23:01:39 2025 GMT
Not After : Oct 20 23:01:39 2025 GMT
Subject: CN=b99788b2139a7b5e8dbefb3478c9934fb88cb398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:a6:09:5d:2e:66:42:79:1b:99:ab:bc:32:
77:3f:a4:08:2f:e2:fb:69:76:91:ad:c7:d8:95:5a:
54:eb:a9:28:43:8a:13:25:80:56:7f:aa:48:2d:ec:
dd:90:74:8d:c1:a4:d8:d3:ba:8b:08:e5:50:dc:56:
5d:e9:eb:0f:27:2b:14:cd:be:66:00:af:8e:51:fc:
a5:90:46:67:b6:40:c8:92:51:9b:12:85:c3:79:71:
fd:95:5b:1d:78:29:4c:1d:32:a4:ad:ca:99:ed:c4:
d3:54:17:5c:a8:a5:55:60:1d:02:d6:c6:5e:57:c8:
9e:dd:78:d3:9a:37:a5:af:2e:cc:bf:3f:c2:9f:44:
38:2a:d5:56:25:21:62:0c:73:b3:f5:b8:ac:d7:a7:
41:cb:4c:44:a6:6f:6b:11:6e:bd:50:32:a2:58:e1:
1c:77:ff:5d:98:ac:07:cf:ed:f7:52:36:95:ba:5f:
41:b1:f8:b5:88:53:81:be:0e:84:13:12:cf:e5:6e:
28:47:41:3a:12:a1:f7:92:22:f1:56:94:9a:24:21:
c3:61:df:a9:32:e3:2c:5c:2d:23:7a:b4:3f:1e:4a:
88:ab:ed:88:1f:29:58:8f:51:b2:2c:64:2f:01:52:
04:e2:df:6e:0a:71:90:94:ad:98:03:e4:57:68:ef:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:97:88:B2:13:9A:7B:5E:8D:BE:FB:34:78:C9:93:4F:B8:8C:B3:98
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:66:10:83:12:62:06:f8:58:7a:90:e8:b2:75:00:3b:e3:b5:
b9:0b:f2:e5:84:9b:a1:e5:4c:9c:d1:81:c0:48:ad:7d:e1:39:
b0:7b:91:62:84:e4:cb:63:91:e0:8c:b0:a9:20:d7:1e:00:3c:
48:ff:57:79:e1:2b:33:92:cb:e8:11:b4:a6:84:25:50:9f:2b:
10:78:32:0d:37:9e:ed:be:f8:c6:4b:d8:71:cc:ea:ea:e0:ad:
eb:be:6b:57:05:6d:f8:e0:40:ef:45:cc:22:9c:0f:47:0d:d6:
94:db:11:db:0e:2b:16:41:88:7f:cf:f1:6c:c6:0a:3d:a4:ce:
a5:d8:5d:18:10:87:06:18:c8:e0:d0:76:9b:a0:5f:41:4f:7a:
c8:8f:36:24:16:d3:7e:ad:e7:2b:c1:49:b1:29:ba:ff:f4:0f:
7d:30:e6:50:5a:fc:62:ea:e3:7d:56:91:16:d0:3b:cf:b1:4e:
9d:b2:46:74:d6:80:14:be:b1:4e:94:66:5d:e6:cc:14:1b:b8:
0a:cc:83:59:cf:df:0b:57:6b:de:f7:c7:95:a9:1e:0c:6a:0c:
fa:c4:11:8a:57:3a:3b:dd:7b:fd:79:6a:c4:3a:9a:e0:94:23:
72:6b:5b:37:71:6a:b8:84:0c:ba:99:2b:e4:f1:d0:12:78:7a:
e3:0b:8c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tQRHGok/d2HkMLDFGOLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmIwMjc5ZmNkMjNhOGU1ODNmMzQ1YWI5MDQ3MjhlNmQw
ZTRjNjIwHhcNMjUxMDE5MjMwMTM5WhcNMjUxMDIwMjMwMTM5WjAzMTEwLwYDVQQD
EyhiOTk3ODhiMjEzOWE3YjVlOGRiZWZiMzQ3OGM5OTM0ZmI4OGNiMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCWmCV0uZkJ5G5mrvDJ3P6QIL+L7
aXaRrcfYlVpU66koQ4oTJYBWf6pILezdkHSNwaTY07qLCOVQ3FZd6esPJysUzb5m
AK+OUfylkEZntkDIklGbEoXDeXH9lVsdeClMHTKkrcqZ7cTTVBdcqKVVYB0C1sZe
V8ie3XjTmjelry7Mvz/Cn0Q4KtVWJSFiDHOz9bis16dBy0xEpm9rEW69UDKiWOEc
d/9dmKwHz+33UjaVul9Bsfi1iFOBvg6EExLP5W4oR0E6EqH3kiLxVpSaJCHDYd+p
MuMsXC0jerQ/HkqIq+2IHylYj1GyLGQvAVIE4t9uCnGQlK2YA+RXaO9jpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmXiLITmntejb77NHjJk0+4jLOYMB8GA1UdIwQY
MBaAFMv7Ann80jqOWD80WrkEco5tDkxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgt
ODBmODIwMjcxNGRhLzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgtODBmODIwMjcxNGRh
LzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWYQgxJi
BvhYepDosnUAO+O1uQvy5YSboeVMnNGBwEitfeE5sHuRYoTky2OR4IywqSDXHgA8
SP9XeeErM5LL6BG0poQlUJ8rEHgyDTee7b74xkvYcczq6uCt675rVwVt+OBA70XM
IpwPRw3WlNsR2w4rFkGIf8/xbMYKPaTOpdhdGBCHBhjI4NB2m6BfQU96yI82JBbT
fq3nK8FJsSm6//QPfTDmUFr8YurjfVaRFtA7z7FOnbJGdNaAFL6xTpRmXebMFBu4
CsyDWc/fC1dr3vfHlakeDGoM+sQRilc6O917/XlqxDqa4JQjcmtbN3FquIQMupkr
5PHQEnh64wuMow==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:21 2025 by rpki-client