Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier: eRCm00XyBni6r+miK++h+WucScJ9ssDieDuASCJqbf4=
Subject key identifier: 6F:59:6C:7B:72:2C:62:C6:2A:2B:AA:70:8D:F0:AC:61:C3:2A:1B:7A
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial: 0199FB4624E1073AF61D67AEDD589F40D270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number: 0FA6
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: rSyIOOLmXBrTWYCYvElig5WYBI+8eS/0PSbp3UbpCPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:24:e1:07:3a:f6:1d:67:ae:dd:58:9f:40:d2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=6f596c7b722c62c62a2baa708df0ac61c32a1b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:25:13:61:30:49:d7:47:8b:fb:4d:97:18:
3b:41:47:f4:49:98:c3:40:5c:71:d6:b1:41:97:9f:
77:16:e6:c6:fc:82:9b:c1:bf:82:dc:9a:b4:dc:81:
d8:fe:c8:8f:1c:f3:51:94:0e:63:36:3e:10:24:b4:
6a:e3:94:3b:b3:11:73:8e:b3:5b:88:de:a3:5a:2c:
b4:87:77:3c:64:d3:21:1f:de:5e:97:28:85:ca:c8:
2f:42:58:3c:eb:ee:db:8b:7b:ae:df:fa:27:a7:6a:
66:c1:6f:d6:ef:55:5c:92:2c:65:44:e5:70:ef:6d:
40:fc:5e:bc:65:85:29:0d:cb:6a:5e:97:0e:ae:d4:
5a:bc:d1:92:ed:7e:6d:55:db:3c:28:7d:b1:cd:97:
06:78:9c:52:16:df:f1:bc:59:5d:d7:4f:39:00:c3:
46:04:4a:f8:cc:e6:e8:49:07:4f:f1:51:c4:19:38:
a8:f2:1d:8e:a6:94:5d:35:2a:c2:00:06:73:78:1e:
b8:13:b6:1b:38:c1:64:16:ff:af:ba:c8:0f:36:18:
41:85:c2:f9:b6:be:80:83:3b:4e:cb:f9:07:90:2e:
41:a0:0b:3b:1c:5e:bb:fe:0b:0b:38:54:f7:de:ed:
11:00:dd:b6:b2:90:e4:d2:68:56:c9:43:6d:88:c4:
98:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:6C:7B:72:2C:62:C6:2A:2B:AA:70:8D:F0:AC:61:C3:2A:1B:7A
X509v3 Authority Key Identifier:
keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:59:3e:29:43:51:0e:74:67:ef:d9:bb:f0:dc:e6:d7:10:
68:09:79:41:06:84:56:63:9c:4f:e2:b5:e7:b4:00:f5:e4:71:
79:aa:57:8a:56:20:10:0e:99:23:f5:51:40:70:0c:65:eb:09:
1b:85:84:74:36:c5:78:5e:20:c9:c9:f0:28:d3:f0:87:df:95:
63:92:42:dc:a4:8b:84:57:ef:83:7e:11:a4:9e:73:f1:05:a7:
55:17:7e:91:98:47:9f:25:8e:66:de:0f:73:81:a9:77:7c:81:
10:7b:f4:6e:d3:4f:a9:6c:32:04:a5:a1:6d:08:99:98:5d:79:
22:ba:ec:0a:aa:82:6a:f3:bf:c2:20:22:62:9b:9d:d0:5d:83:
01:8e:fe:0f:fe:dc:d1:66:9a:38:5b:c2:7e:62:f3:63:47:8c:
b3:7e:d6:e2:02:68:ae:a3:1d:3b:64:89:85:bd:ed:78:ac:2f:
23:e2:09:3f:7b:9f:2b:83:be:60:7a:07:e4:cb:8c:ac:89:c7:
77:f9:97:9d:57:a1:c4:90:df:5e:32:82:1c:e2:58:f5:bd:0c:
06:7a:fb:7a:e4:51:e0:0b:3a:73:69:d6:7e:e8:97:94:a1:60:
94:bd:45:f0:e4:c2:59:71:1d:ed:43:84:05:fc:8a:b1:5f:08:
67:59:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:13 2025 by rpki-client