Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
File: ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json)
Hash identifier: iDRZ3axd+lZrm3cP5hM3ZNCMhyVqnnU98ckGubbYRNc=
Subject key identifier: 06:95:26:14:B6:EB:51:B6:56:41:BD:D4:55:70:D6:67:4F:23:EF:03
Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
Certificate issuer: /CN=c92a961c87ac90518ea752f185bb65128aba2866
Certificate serial: 0199FBEB3ED00F2368D29810F5FA052953B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
Manifest number: 0386
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: DaLBtVX+bWuRJCMs63XD1+37g6azHnPvKnUW/2Lz//E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3e:d0:0f:23:68:d2:98:10:f5:fa:05:29:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=06952614b6eb51b65641bdd45570d6674f23ef03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:1c:e9:33:1c:bd:0f:e7:9f:4e:59:3d:13:
f9:6e:6d:99:a7:20:b0:7d:67:3c:9c:3b:bb:a1:8f:
ff:ee:c0:ca:61:9a:a3:7e:c5:8c:d1:19:38:a7:d7:
e5:ed:e3:d8:af:e8:99:c7:31:95:0e:05:c3:67:d5:
eb:4b:7d:65:07:4c:81:2c:6a:65:e3:25:9b:b7:78:
31:59:37:d7:69:15:77:14:c7:21:d0:2f:45:5f:07:
3f:eb:e7:c3:da:20:c8:c2:91:b8:d5:ae:54:01:de:
38:73:d8:d2:e8:9a:e6:de:89:6e:dc:b8:bc:10:15:
2b:b0:eb:59:07:bb:7f:c1:d2:bb:25:1e:ff:49:93:
dd:8b:d5:eb:2f:f4:9a:79:4e:15:38:da:c6:36:b2:
9c:15:d7:8a:03:46:1b:20:ff:e1:25:17:00:8e:3d:
46:40:9c:7c:7a:65:d0:57:40:fe:82:f9:0f:d6:6f:
bc:f5:4a:dc:e1:76:37:8d:89:14:e5:9f:0d:d3:08:
24:f1:96:d0:98:67:91:b6:c6:69:df:c9:15:bb:ea:
2d:1e:b6:0a:14:b1:4f:79:67:1f:9d:5b:51:27:7d:
8b:f1:88:8e:4a:79:a3:f7:d5:28:c5:0b:54:c2:67:
67:3c:c2:60:ab:31:65:4e:db:c7:48:f2:99:27:df:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:26:14:B6:EB:51:B6:56:41:BD:D4:55:70:D6:67:4F:23:EF:03
X509v3 Authority Key Identifier:
keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:00:b7:90:12:cb:bf:c5:8c:8b:32:d9:78:86:39:c7:d3:9b:
22:9b:b0:b3:46:37:8e:84:4c:4c:61:1b:bb:1a:f3:9e:96:45:
7f:a2:58:24:ac:f5:86:18:1a:52:16:36:b8:6a:48:1f:a3:b9:
8e:22:ed:eb:fe:8a:4b:50:43:a7:57:a9:e3:87:75:b0:92:04:
1d:c6:47:d4:03:81:03:55:dc:b1:e9:d4:e5:e8:70:d0:33:09:
00:31:e7:b8:a1:48:09:22:0c:74:c3:77:72:e9:54:ac:cf:b7:
e3:43:2f:2c:12:e3:1c:0c:a6:af:b8:b1:0a:c5:5c:56:41:cc:
34:cd:4d:df:d6:d9:ac:e4:86:cf:63:6b:8d:3e:a6:f0:36:69:
0d:37:30:06:b1:a3:cc:f2:13:93:c2:2d:9f:2e:e9:40:7f:54:
7a:14:2f:b2:9b:ac:7e:3f:4a:b0:f6:20:e4:4e:09:35:3d:6b:
09:1f:e2:3f:d4:e0:de:d8:a2:b5:9c:33:b9:94:7a:82:2b:6c:
c2:01:af:1e:46:05:e1:54:49:08:bb:19:5c:45:2d:f4:4c:e4:
a5:6d:ce:11:d5:68:8d:8f:c1:a3:64:69:61:d1:9a:f0:c0:3f:
20:b2:cb:5f:b2:03:9e:29:3f:b1:10:63:63:6c:36:bb:09:61:
ab:1c:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:38 2025 by rpki-client