Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: FbkItjKtvk3WkPwHji+/TfkaTf4uDIaCCx8GoV3HECk=
Subject key identifier: 1D:06:A4:C0:BC:7D:E7:2A:CC:82:C8:18:9B:F6:B6:7D:20:2B:A4:92
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 019A00350AFDFB0FC8A963A095BB42306358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 05F6
Signing time: Mon 20 Oct 2025 06:01:07 +0000
Manifest this update: Mon 20 Oct 2025 06:01:07 +0000
Manifest next update: Tue 21 Oct 2025 06:01:07 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: 4DtO9cpoWYDfYLI5H4VWN7EZzBamwEl7vuLYhxp5yBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:0a:fd:fb:0f:c8:a9:63:a0:95:bb:42:30:63:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Oct 20 06:01:07 2025 GMT
Not After : Oct 21 06:01:07 2025 GMT
Subject: CN=1d06a4c0bc7de72acc82c8189bf6b67d202ba492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:54:1b:87:2d:21:24:2c:d0:b5:ca:42:5b:
aa:94:63:ad:03:3c:42:91:98:d6:cf:08:f4:37:c5:
29:09:74:d9:f8:3a:b4:de:4b:88:75:54:4a:3c:47:
36:3a:40:0e:4d:62:6c:7a:99:57:5f:d6:6c:d3:3e:
e3:e0:af:dc:25:b4:fb:b1:3a:85:39:3c:b7:57:bf:
8f:f1:ff:05:41:c6:14:0c:d9:d9:6d:41:84:43:e6:
0b:ac:62:d9:a1:32:05:8a:c5:c5:dc:d2:23:cb:7e:
a6:c2:ce:99:b3:e7:ac:85:8d:57:46:b9:0f:48:4d:
3b:ce:4c:65:8d:c6:af:90:b5:c6:c6:3d:69:23:d8:
1c:6e:85:fa:9e:cd:89:9b:41:4f:b7:80:9d:eb:e1:
7a:07:4b:f4:4a:20:8f:a2:c3:c8:58:61:67:d6:30:
84:12:70:0d:9a:9f:c3:e6:f7:96:0e:e2:32:e9:97:
3a:08:95:a8:a5:85:5b:98:f5:de:7a:b0:4e:f7:91:
7a:57:6f:f0:07:29:78:77:1f:64:f2:d9:08:ce:cb:
b0:ca:2f:5b:52:15:6a:7e:4e:ab:9f:16:68:b8:c9:
00:3f:a2:85:33:20:ec:3c:13:41:f1:65:42:56:56:
f3:f8:91:61:58:b1:21:81:0d:da:c2:4c:9a:fe:1e:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:06:A4:C0:BC:7D:E7:2A:CC:82:C8:18:9B:F6:B6:7D:20:2B:A4:92
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:a0:85:43:da:fb:4d:ec:b6:b8:bb:cc:5f:4f:b9:4c:ef:
23:ee:78:aa:25:14:08:b3:e9:b4:08:65:0b:c2:e0:26:08:96:
ff:91:e5:cf:cb:bb:0a:d1:e4:72:e9:3e:b6:7f:b2:64:97:5e:
58:38:6d:f2:42:28:cd:aa:7f:cf:b9:26:d3:95:d0:60:2c:20:
56:3d:aa:8b:c0:63:96:9d:fe:8b:39:8d:d6:06:cc:df:11:c8:
75:14:d7:c1:58:74:de:0d:58:da:8b:97:46:23:55:97:1c:d9:
36:74:0c:ab:93:2d:74:48:88:07:7b:ba:c1:2d:f3:07:f0:54:
96:bc:0e:c5:9b:42:db:82:a2:44:a4:89:3a:01:14:b1:46:f3:
76:44:4a:62:7c:16:67:dc:d1:0f:67:ab:79:80:ec:3e:82:ec:
81:75:7e:51:e6:77:53:45:38:6f:fa:f2:10:d6:c4:a0:a8:a4:
da:80:da:95:d6:a8:d4:f2:97:50:bd:47:65:c3:e5:f0:20:7d:
54:f6:b0:7d:19:ba:dd:6c:15:f1:1f:01:c6:de:49:b5:36:c6:
bc:59:20:22:d0:d3:04:7a:95:bc:8b:54:15:ac:70:b4:6a:40:
2e:89:69:1b:f1:8c:b2:d4:0d:8e:be:19:ed:16:0d:4b:51:e2:
1f:ff:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:24 2025 by rpki-client