Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier: LRsuyQ2U8l05mPlP6XTAtoH7vmPbvVQSciZ4t0NEISM=
Subject key identifier: DF:04:7D:3F:FA:0E:6E:9C:EB:BA:6D:2B:33:C3:FC:17:1F:B1:BE:8E
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial: 0199FCC683FF3DDC1CA594553D69843C869C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: MjQweU5/yOKIMIMkPDA3OJebbL/t+XtshOQW+EYynj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:83:ff:3d:dc:1c:a5:94:55:3d:69:84:3c:86:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=df047d3ffa0e6e9cebba6d2b33c3fc171fb1be8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:13:93:a9:78:c6:cb:d1:9c:58:ec:0c:c8:
51:58:84:1e:4c:84:10:36:f5:1b:6f:51:b9:a6:b6:
c6:97:73:89:56:e8:69:ed:c7:3c:1e:bc:12:26:67:
d1:26:27:53:5d:6e:4b:2e:e7:58:92:1d:c0:64:ff:
d6:0f:fd:99:0e:d4:b1:a1:d8:9d:d4:5a:e7:fc:0e:
f5:53:77:af:af:d7:24:31:7a:e6:c9:a9:1a:50:68:
60:cd:74:74:c9:5e:49:57:78:b6:27:a1:24:0d:b5:
05:1e:f0:9d:47:37:3e:8c:f9:39:4c:ab:ca:63:b1:
3e:53:1f:ce:35:58:6c:85:34:92:f1:5b:99:82:bc:
7f:3f:4d:c9:8c:53:c0:e5:65:85:ae:7a:36:65:0a:
18:47:93:53:b3:f6:66:7f:e1:02:a2:93:cd:7a:63:
80:ca:40:95:99:8a:83:a0:ec:e3:87:d7:9c:23:0b:
e0:a8:d5:a7:4b:bc:34:ae:15:c5:26:f8:88:a2:07:
f6:54:48:14:b1:f9:51:44:2e:74:6a:3b:99:76:d1:
0c:9e:c6:ef:9e:8c:46:9e:14:6c:0e:8a:29:a0:24:
6c:7a:ed:30:e8:e6:bb:29:f1:ba:a4:d0:fc:6f:7a:
d9:c6:73:3a:a3:5e:04:f6:c4:69:34:77:d4:a6:23:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:04:7D:3F:FA:0E:6E:9C:EB:BA:6D:2B:33:C3:FC:17:1F:B1:BE:8E
X509v3 Authority Key Identifier:
keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:38:f7:4b:74:19:9b:c2:bb:38:d0:f3:c2:7e:0e:a1:cd:e6:
0a:1f:d9:44:d4:da:f5:ec:3b:af:64:df:82:2d:ad:de:b3:2d:
0e:4a:56:88:ae:2d:44:13:aa:4b:0f:3c:7a:19:12:bb:55:72:
2f:c8:a2:70:13:73:fc:63:59:af:7a:d9:42:8f:09:dc:dc:70:
28:e5:15:be:11:f7:8b:f9:dd:5a:38:05:b0:51:6e:0b:d4:5a:
bb:77:38:fc:29:18:20:f5:06:2d:12:65:c7:1c:4d:6c:4b:8f:
b3:45:b3:dc:ad:55:93:bb:f7:f7:25:51:b2:9c:26:94:c2:06:
fe:3d:9a:73:6b:41:5e:19:b6:45:48:07:e1:73:79:ff:8f:1d:
02:83:a8:51:44:d0:95:cc:98:c4:ca:bf:2d:99:16:59:02:b3:
26:ed:ed:31:fb:8f:80:74:ed:5c:4e:1b:d5:60:a4:57:97:05:
e9:1d:06:62:e2:ea:cc:d5:5e:7e:ec:8c:b3:43:5a:4b:93:8c:
ae:6c:e5:c4:d8:98:f2:b0:c3:ee:7e:1b:86:9a:2e:0f:74:5a:
f4:b4:4c:6c:19:2a:17:79:d2:d9:d0:62:8a:8f:3e:c6:c5:18:
f9:bb:9c:58:2a:96:8d:6e:7c:73:3b:f5:b5:e2:54:48:c4:4f:
2b:27:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:18 2025 by rpki-client