Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: AZfZCgsgx2HwaNDMyteQdLH/4C2w34Qasb1EfhDEdk0=
Subject key identifier: 34:9F:75:8D:34:3F:44:BF:D3:EA:CA:D0:C8:53:4C:AC:7D:14:F1:6F
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 0199FBEABF1B08742AF5CCEF33F1E68E7F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 0789
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: VuEcbiqaksO03t0SzIrKwYcyBXjB8PzLQukcgisHRZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bf:1b:08:74:2a:f5:cc:ef:33:f1:e6:8e:7f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=349f758d343f44bfd3eacad0c8534cac7d14f16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:f9:3a:86:0b:7d:d7:01:40:39:59:cb:b5:
73:df:8a:2e:24:f4:b3:05:31:2f:81:31:8f:30:89:
58:f3:d1:9d:d1:67:df:7b:01:ed:62:57:a8:01:df:
69:36:85:9d:51:c0:50:14:15:7f:cb:df:8e:03:5f:
86:ee:79:97:b8:3b:8a:2c:5c:28:4f:60:d3:97:1b:
aa:29:f0:02:a0:ea:87:be:66:a9:be:d3:fc:ca:8f:
ea:e4:15:fa:0f:b6:46:b8:2d:76:ea:33:00:1a:52:
c7:82:1f:22:12:b9:6f:e8:e5:32:d2:1a:b4:05:7b:
0c:5e:60:23:b4:36:04:a8:aa:3d:cf:ea:01:a2:f4:
16:83:e7:2d:33:87:a7:03:4c:a0:09:79:44:56:9c:
15:87:29:e0:f7:3d:a5:a1:b4:19:6a:b8:c0:5a:0a:
bb:7d:7e:28:0c:d1:dc:68:a0:b0:fc:c4:01:eb:37:
16:66:38:b0:64:b3:84:c3:83:a8:74:ac:85:25:5a:
b0:ea:76:74:d4:af:b4:5f:85:65:1a:89:e6:1a:c6:
b7:df:f3:90:9c:cd:27:41:4b:61:a3:0d:f3:c1:32:
59:30:56:4e:eb:d0:5d:c4:8e:37:dc:ae:e8:3f:fb:
9a:50:03:a1:a4:a3:44:82:3d:e5:af:76:6d:45:5d:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:75:8D:34:3F:44:BF:D3:EA:CA:D0:C8:53:4C:AC:7D:14:F1:6F
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:00:97:c3:3b:28:2b:ca:cc:96:a2:11:c6:2f:12:5a:5a:75:
40:d7:30:92:9c:3f:3a:04:95:ab:89:15:e2:3e:7b:4e:70:6c:
df:fc:09:51:a2:2f:b3:b5:52:39:6d:d2:84:1d:32:88:ab:1e:
fc:ba:00:85:f9:b7:21:4d:a6:54:ac:f4:1e:6e:ea:cd:1f:15:
39:72:36:00:01:bf:f1:aa:ed:64:51:37:f5:6d:c9:2d:a8:fa:
1e:10:b8:8a:f8:54:f4:f7:ae:88:a3:d3:2c:3f:f1:b5:7a:bf:
cf:f3:5a:0d:bd:f3:2f:85:10:d6:c2:f1:f5:35:77:22:9c:51:
32:84:f4:79:a4:32:08:3b:5f:e5:f8:18:cf:78:a7:c3:d7:d0:
ea:0c:d6:77:75:e3:14:b7:0c:da:d0:a8:0c:07:e9:6d:9a:b5:
86:2c:be:12:9a:b6:02:32:93:dd:82:6d:a2:e1:74:c6:fe:06:
eb:60:61:93:a4:af:65:f6:e3:5f:3f:f8:04:c0:c7:3f:26:1d:
d9:bd:d8:1e:d8:e6:55:8b:6e:46:76:59:82:25:cf:91:92:e1:
84:d3:94:c5:be:e3:ee:64:c7:49:21:ea:b6:74:5d:2d:ca:55:
cf:78:57:4e:54:de:b6:31:2f:ce:57:ac:ea:83:ee:10:16:97:
03:bd:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:07 2025 by rpki-client