
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: 2kXMKlPXR9vpq2peQ5JwTqWIiAGFWj8DkSgOVvQlt28=
Subject key identifier: C5:6D:89:07:D0:53:47:78:0B:46:30:04:A2:80:72:5C:87:4D:4D:C7
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 0199FD34480EEBDCA872918E9E8BDFEC007F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0E50
Signing time: Sun 19 Oct 2025 16:01:25 +0000
Manifest this update: Sun 19 Oct 2025 16:01:25 +0000
Manifest next update: Mon 20 Oct 2025 16:01:25 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: JgG0JUZSBOUdyS1p4D038hRpY/lzS6iRhmQcDo+vje0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:48:0e:eb:dc:a8:72:91:8e:9e:8b:df:ec:00:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Oct 19 16:01:25 2025 GMT
Not After : Oct 20 16:01:25 2025 GMT
Subject: CN=c56d8907d05347780b463004a280725c874d4dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:cd:1b:3e:1c:77:ae:0e:ba:8a:dc:52:0b:
37:35:fa:b8:30:7b:a6:37:10:39:04:b7:e0:8a:5f:
56:24:86:2b:b2:4b:3e:f1:b7:12:15:83:74:40:d1:
99:4f:0c:e3:d1:27:94:dd:a6:6a:22:80:d0:45:20:
d3:f7:3d:a4:8f:92:07:90:45:7b:d1:73:ee:f1:4f:
8c:2d:30:f3:fe:2d:c0:15:21:5b:b1:b8:2d:08:5c:
aa:a8:7e:e4:bf:bc:29:de:90:19:5b:ab:19:99:dd:
2c:f6:93:98:ed:7e:c7:2e:f9:81:73:fd:55:47:37:
14:9b:d0:86:db:2c:5b:34:48:4b:04:b9:a7:f6:40:
76:31:52:98:97:af:66:5c:4d:40:8a:52:99:61:a1:
c8:95:1e:48:a0:d0:2e:b4:42:80:b5:30:bb:2b:76:
b7:4a:46:e2:95:6b:22:64:bb:d6:28:93:5f:94:75:
b9:74:aa:17:d5:77:27:af:48:10:ae:b9:3b:3d:70:
d0:db:31:0d:f4:1b:b9:46:c5:bd:3f:4e:f4:d5:04:
da:bc:43:65:d9:27:ab:d8:37:94:3d:99:ce:fc:56:
ae:36:75:5e:53:0b:fc:1d:4a:cf:d5:64:14:60:02:
bc:64:b2:32:63:89:ef:c5:ca:3e:fc:cc:86:85:58:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6D:89:07:D0:53:47:78:0B:46:30:04:A2:80:72:5C:87:4D:4D:C7
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:c8:3e:fe:01:7e:95:e1:e1:74:ae:b3:d3:42:73:45:2e:
d3:ea:2d:5d:e0:4f:b5:fb:aa:6c:ef:1a:a9:f5:4a:45:b4:9e:
db:e2:78:f7:02:20:00:b2:8c:ae:bb:b2:60:4b:30:57:8c:b2:
f5:3f:f8:c8:6e:26:ab:f2:0d:06:0f:e7:24:0e:3a:cc:4c:9e:
f0:92:42:91:6b:c1:9b:53:3c:f0:e1:ee:ec:94:b1:5e:9c:cb:
86:ac:7c:a1:98:b8:84:1a:a4:5f:9a:d5:b3:0a:1e:36:e4:0d:
13:52:7a:80:d6:50:ed:59:bf:22:b6:73:f6:88:a8:b1:57:0c:
37:80:f5:b5:eb:be:20:7d:7a:6e:c9:1d:6b:b7:ce:25:03:ff:
13:6f:a3:37:64:7c:58:e9:9d:8b:56:af:92:15:92:c2:4f:e0:
b0:3d:73:19:c1:30:ab:c4:3a:21:96:d4:33:8b:b8:ad:96:1b:
c2:51:7c:d2:9d:14:3e:2d:20:04:e8:98:a5:da:8b:e0:d0:aa:
d0:e6:3e:e8:22:77:50:3f:6a:50:71:ee:69:36:73:bb:ac:ac:
b4:6a:15:5a:b8:a6:8f:e6:68:89:0f:3e:be:e4:8b:e8:f7:3b:
30:b0:07:d5:6e:aa:80:07:7b:84:c1:f4:67:48:fe:ee:1e:72:
1f:dc:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:21:38 2025 by rpki-client