Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: oBcN2pQGXcG+dIqrWC/b+9COd7q1evsOIcgOEeRiXWI=
Subject key identifier: ED:E7:E3:1B:BD:EB:C0:32:B8:ED:E9:23:A8:81:BC:B4:79:6F:17:08
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 0199FB46161FD14D8C7EDB24048CAAB58CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 10D9
Signing time: Sun 19 Oct 2025 07:01:38 +0000
Manifest this update: Sun 19 Oct 2025 07:01:38 +0000
Manifest next update: Mon 20 Oct 2025 07:01:38 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: 0XmYrt/QZq56c91kliu6J4yGZfOTo9vnUqlvLJyQGYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:16:1f:d1:4d:8c:7e:db:24:04:8c:aa:b5:8c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Oct 19 07:01:38 2025 GMT
Not After : Oct 20 07:01:38 2025 GMT
Subject: CN=ede7e31bbdebc032b8ede923a881bcb4796f1708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:eb:1b:f3:6b:c7:c8:d3:3c:e2:92:87:d3:
0d:eb:57:08:78:dc:6e:53:ff:8e:aa:ba:a7:c3:1b:
24:03:d5:d1:97:2b:ee:5f:6d:8a:9a:59:00:8f:15:
8a:a1:20:80:b5:dd:29:d3:e0:a9:ce:62:87:e3:19:
bb:b4:f4:ac:8d:b2:df:6b:72:f6:e8:42:23:e3:e7:
07:9f:c7:ad:6f:51:70:76:e8:b6:1a:41:9a:30:38:
35:fd:56:bb:40:2e:c5:0a:f7:be:f1:77:49:b5:9f:
e1:53:28:8e:87:6c:dc:3e:f9:a3:cf:0f:75:32:71:
9a:a3:22:ab:2f:0f:d8:03:98:02:85:2e:d4:ea:3a:
04:59:14:1a:33:ce:8e:26:8b:37:8f:55:12:dc:97:
a6:b3:a2:0d:21:e5:e2:bd:2d:e9:25:eb:f6:99:84:
61:2f:2f:a1:36:a6:fe:d3:99:50:f0:61:d0:d9:88:
9a:d1:4f:b6:67:f8:75:61:06:19:ca:02:e8:9c:b0:
ff:db:2e:f5:e9:e3:7d:36:71:a5:b5:1f:59:ca:52:
5f:bb:7b:bc:90:f9:c0:9b:ba:88:d5:42:c5:0c:75:
9c:c5:77:f9:00:01:59:be:3b:58:d3:1e:27:e0:fa:
58:97:78:3e:55:2f:c3:49:24:8e:29:f7:74:7c:71:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:E3:1B:BD:EB:C0:32:B8:ED:E9:23:A8:81:BC:B4:79:6F:17:08
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:04:da:7a:36:9b:33:73:f7:f7:ed:39:1a:90:77:ea:8b:d1:
0f:0a:5f:35:de:55:f9:5b:65:f6:31:77:af:7e:56:cd:68:db:
91:5c:37:e2:c2:34:e9:b7:b3:89:e4:ac:25:95:da:9a:c1:fd:
11:3b:79:f5:ff:d6:10:85:cf:24:c7:c0:68:03:08:c5:dc:3e:
45:b5:68:9f:eb:e7:78:c4:c7:01:26:3b:ce:f0:73:e4:66:7c:
00:f8:3a:35:fa:09:6d:d4:45:fe:60:2c:0a:9d:d0:84:57:98:
d4:0a:f5:7d:1d:a1:f1:8e:d8:ee:5a:1d:36:18:b2:53:14:de:
5a:78:4e:f0:32:59:10:62:52:79:2c:08:d0:8f:67:97:95:5d:
52:48:30:a5:df:55:5e:22:5f:bf:0a:07:d9:96:6a:75:33:64:
04:ba:eb:0f:bc:81:68:90:45:29:55:32:e1:10:f1:b3:6c:8d:
f2:a6:a1:da:2f:c2:90:ba:a9:a8:74:b7:11:96:00:39:f0:62:
75:13:e7:5f:34:76:d2:84:cf:db:99:18:93:0e:dc:11:b3:bd:
16:c1:92:df:11:3f:c4:f3:59:d6:95:4b:2b:78:c8:20:40:86:
8e:a8:7e:c4:9f:52:0e:67:ee:e3:e1:47:b9:42:25:8d:34:52:
cb:0d:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:33 2025 by rpki-client