Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: niknyp/L4oNqgF19JZGNYbn35+oSetpduUFEJv2IFQc=
Subject key identifier: 26:A9:58:97:BE:08:68:78:32:56:1C:09:11:98:A1:D3:18:17:7C:86
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 0199FAD82AD041652056EE894BDF909EFE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 75
Signing time: Sun 19 Oct 2025 05:01:34 +0000
Manifest this update: Sun 19 Oct 2025 05:01:34 +0000
Manifest next update: Mon 20 Oct 2025 05:01:34 +0000
Files and hashes: 1: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: 0kLYzcU634zQk8J2dCQ9MIU7Qc+yEcqWHmtjOeo05sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:2a:d0:41:65:20:56:ee:89:4b:df:90:9e:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Oct 19 05:01:34 2025 GMT
Not After : Oct 20 05:01:34 2025 GMT
Subject: CN=26a95897be08687832561c091198a1d318177c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:8e:9d:90:e4:0b:fa:64:f2:87:39:80:c1:
65:b6:82:7c:c5:38:84:e1:20:f0:7c:97:14:ae:8e:
5e:20:01:8b:bc:a9:c0:9c:92:45:8f:40:ae:7e:67:
b6:72:e8:b8:45:f2:ee:8d:9b:12:97:ff:a9:af:06:
3c:03:97:fc:54:b5:2d:5e:0b:11:6d:b9:b6:99:31:
60:14:b8:4e:3f:93:fd:dc:6b:6a:cd:d8:37:0e:81:
80:12:3d:5f:20:03:4a:18:80:78:5a:cf:48:17:1b:
47:ac:b8:f9:23:fa:e2:47:b6:da:c6:ad:58:d2:10:
05:d1:c9:f0:95:73:04:57:9f:37:eb:67:62:e9:31:
37:64:9a:07:0a:b3:72:0d:b4:f3:7a:80:43:8d:5a:
92:9e:b6:7a:68:55:f3:1e:e5:f7:6c:73:15:c6:d5:
27:0e:9c:aa:a3:92:54:cb:60:08:49:1d:5d:ae:bb:
15:45:2c:37:36:0e:f7:ac:92:3b:f3:75:52:ae:96:
bc:95:d0:08:db:cb:c6:c6:25:b0:97:fc:ef:df:00:
99:4d:79:32:ba:67:22:fd:62:12:8c:08:b2:a1:ae:
ab:d2:4b:2d:bf:0a:28:11:73:52:8f:eb:d7:c5:c9:
7f:4c:c3:f5:d2:4f:8d:c6:2b:cf:25:3e:8e:c6:dc:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:58:97:BE:08:68:78:32:56:1C:09:11:98:A1:D3:18:17:7C:86
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:15:16:a0:07:73:42:22:54:cf:11:75:a1:9f:14:c3:1c:56:
4b:24:fd:2a:db:0b:37:4a:ae:75:b0:b2:ba:75:05:4a:4f:4f:
c8:20:69:da:fb:18:1a:bf:fd:fc:2f:66:28:79:cd:83:3c:c0:
e9:f5:7e:38:dc:5c:ad:2c:05:3a:54:23:ea:3c:4a:fa:6c:3b:
26:7a:65:3b:55:b5:ff:1a:c9:f0:c7:17:e6:80:1e:74:07:3c:
4f:85:81:a0:a5:8f:56:97:46:09:a8:e3:6e:a9:ea:2d:64:30:
74:2a:f7:5a:17:83:3a:2f:4a:92:a8:ff:f3:1c:78:ea:66:a3:
15:f8:19:3b:35:75:66:04:de:fc:8d:b4:80:13:7a:03:3e:1f:
99:71:88:fc:fa:54:57:fa:a3:92:27:3b:a2:a6:d4:4b:93:3d:
2f:0d:02:cf:75:64:13:39:59:2c:db:f3:85:c7:fa:42:f4:44:
bd:7d:d3:39:04:a6:62:7e:ee:ea:75:44:37:85:f1:d2:58:61:
f2:68:15:8e:b6:fd:bc:2b:2c:5d:ab:e4:c7:ba:07:6e:bc:e4:
cd:4d:20:8e:90:11:ed:ad:5d:b2:f7:dd:76:ac:4d:be:97:ad:
b9:48:df:5a:fe:0a:61:c2:9f:c1:3d:28:ff:4f:63:3c:af:2e:
5e:fd:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:06 2025 by rpki-client