Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier: /Qpw4Sv0ubC85g9kgyolFWxUmmVSqtUmhifPYE8ELxA=
Subject key identifier: 04:36:DD:FE:7F:35:0D:CF:73:FA:42:3A:0B:A3:98:08:BE:02:52:88
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial: 0199FBB36D547516D2933E16503191D93FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number: 0E17
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: 6oKFQxNLIrp+CxuNyzhuKTRfkl88pNk0nkW4S0RdXb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6d:54:75:16:d2:93:3e:16:50:31:91:d9:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=0436ddfe7f350dcf73fa423a0ba39808be025288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:cc:33:94:d1:62:ad:e4:fb:56:29:70:ca:
09:71:cc:22:af:69:9d:19:9f:45:5f:23:0e:6d:ef:
a5:9e:bb:97:c5:77:04:b7:5e:28:47:7e:24:92:89:
68:91:35:00:2f:36:6f:11:d8:a2:6d:ef:45:1a:0f:
3c:ab:c6:a0:e3:a7:66:1b:40:34:15:4b:ce:39:45:
4c:50:fa:db:29:06:7a:29:e5:62:9f:1a:31:6e:b1:
0f:ee:55:32:ae:62:58:75:19:96:01:3a:b2:31:ca:
91:49:5c:3b:d7:1b:f0:d4:1e:7c:d3:d6:52:05:58:
5b:9e:b1:e0:45:77:cf:c0:bc:71:d2:3c:74:db:8a:
31:a4:3d:15:7b:cc:a1:1c:cd:b5:5c:ae:cd:fa:e4:
ac:bd:90:ea:4c:db:d9:e5:e6:83:d8:c9:27:19:0d:
e5:97:53:53:77:d8:0e:a3:63:d8:a9:08:22:99:d3:
1c:36:dc:a7:32:80:81:59:68:53:49:c1:7c:fd:6a:
ec:a2:c2:97:f0:f8:7f:ec:4f:83:e2:82:49:e9:5a:
2c:04:7f:a8:71:d7:f8:6b:d3:db:dc:62:f6:b5:ba:
e8:4c:f6:40:83:e0:9d:5b:21:98:3a:e6:80:6e:d9:
f3:99:af:c4:fd:84:d5:4a:7c:fe:3c:41:ba:99:b0:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:DD:FE:7F:35:0D:CF:73:FA:42:3A:0B:A3:98:08:BE:02:52:88
X509v3 Authority Key Identifier:
keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:63:9d:a1:10:dd:1d:30:95:2d:c9:d9:43:d7:eb:3c:29:6d:
7c:88:89:c6:33:da:ec:af:a7:ee:28:30:b8:95:20:19:43:95:
14:18:cf:3c:90:32:03:24:fd:49:f2:3c:76:5c:d6:6b:90:d6:
72:d8:01:b6:b2:1c:b9:c5:36:31:6e:e6:0f:93:29:29:82:76:
c3:4a:b8:89:06:de:4e:2a:4f:f4:0e:b4:20:61:ac:35:15:2c:
ed:70:a2:08:24:ed:00:f5:fc:b9:f9:d0:bd:16:44:60:ec:c1:
ef:98:ef:04:97:3c:3a:b0:4a:c6:62:e6:9b:e3:aa:1e:e2:af:
e6:ae:be:c7:2b:40:fc:ff:e0:e2:d4:9c:af:1a:cb:ed:4b:05:
b6:a5:66:ba:8c:5b:d6:8e:ad:1e:95:8f:0b:56:fc:75:65:12:
87:bf:8f:3d:13:7b:8b:0f:c4:4e:5f:57:2d:c6:88:7c:19:07:
96:3c:eb:8c:ab:3a:09:ca:67:8b:6a:30:ec:ec:4c:97:8c:23:
c6:76:0f:c4:f6:78:5b:6a:94:a7:87:6d:3f:fa:46:72:96:ce:
9a:c1:96:81:ca:3a:c4:28:5e:b3:c8:3c:2d:b6:15:47:a2:26:
af:a8:4e:40:3c:d3:e4:be:e7:a9:ed:5f:fa:b5:38:51:80:59:
88:97:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:08 2025 by rpki-client