Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: UTjhF56eIKyOignSxxoFobO5t6a6f0tjhL/izqjL4zc=
Subject key identifier: 66:93:B8:2F:0A:74:7E:80:22:01:A1:4E:DD:34:1B:81:1E:58:E6:93
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 0199FDD9E92B5D0E0DA40BE75643346EDF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:20 +0000
Manifest this update: Sun 19 Oct 2025 19:02:20 +0000
Manifest next update: Mon 20 Oct 2025 19:02:20 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: F5z/nsfOTLvfCzFjSOqWkNkui0/g1C0uwpFKS33DZK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e9:2b:5d:0e:0d:a4:0b:e7:56:43:34:6e:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Oct 19 19:02:20 2025 GMT
Not After : Oct 20 19:02:20 2025 GMT
Subject: CN=6693b82f0a747e802201a14edd341b811e58e693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:e1:84:0f:0c:db:72:83:16:9d:35:e9:3b:
16:c7:99:60:ac:a5:9d:ef:43:22:cd:88:f2:6f:6b:
61:b1:5a:6f:6f:7e:0b:86:a4:a6:58:68:6d:75:05:
f5:92:8d:fa:ca:29:f6:51:0f:ca:75:ca:dc:05:b7:
33:e8:70:71:17:e3:43:02:71:0f:8a:e4:35:29:7d:
d7:57:15:ae:f1:dc:3a:be:d0:03:c4:ff:2a:5d:39:
c9:0c:be:0f:2c:8b:c3:72:5a:de:cc:db:a1:11:3e:
0a:24:d3:02:44:03:35:a3:ef:39:b4:b3:35:42:31:
7d:28:ee:47:fa:bc:73:72:f8:8a:e0:c5:fd:0b:04:
a0:37:3e:5b:60:e1:39:1e:03:c8:e2:e3:46:55:c4:
02:df:29:4a:11:6c:07:33:5a:77:05:f9:78:f5:cb:
6e:bd:d8:b4:45:b1:28:92:92:ba:08:4e:39:c1:16:
78:de:f7:26:ae:d3:12:1b:61:f5:bf:7a:9a:bd:c3:
1a:91:20:eb:2e:3d:16:db:61:e1:86:6d:8e:38:d2:
8f:a1:70:ef:72:8e:8f:c6:77:65:08:96:c9:dd:3c:
ad:22:c4:63:c2:54:22:79:b0:8f:04:02:2a:73:12:
0d:e1:d4:9e:41:a7:22:1a:ec:fa:16:f0:4c:d2:41:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:B8:2F:0A:74:7E:80:22:01:A1:4E:DD:34:1B:81:1E:58:E6:93
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fe:65:15:55:7d:7b:68:3b:00:32:6f:7a:40:e2:f8:7a:65:
0b:91:27:14:ff:67:37:f4:0b:b5:a2:69:58:a6:2f:a1:49:50:
02:2b:d3:27:56:4c:6c:5e:f6:18:d9:0e:6b:93:bb:1f:7d:7b:
07:ac:f1:66:17:53:a4:56:e1:22:3e:60:73:2a:99:6a:c6:87:
fc:3f:28:e7:68:29:02:b3:af:e5:6c:fe:02:51:c1:9a:b8:4e:
91:fa:ba:4a:94:08:85:4b:1a:18:9a:03:06:b1:88:0b:c7:c5:
5f:3e:5c:00:ad:85:01:9a:9f:b1:aa:d3:0b:3f:ce:cf:49:af:
8d:7c:26:01:e3:1e:3a:19:d7:9f:52:b9:8d:a4:62:16:82:06:
04:4f:50:27:cc:12:22:2b:08:95:00:53:ee:34:06:e9:bc:03:
f1:af:2d:dd:06:86:8a:2d:4b:e8:2d:aa:4c:b2:95:2f:f6:3f:
a6:99:e9:32:ec:a0:dc:fe:69:22:0c:57:67:0d:32:c3:f6:79:
8a:0f:79:8d:b8:08:d1:1e:64:4a:dd:5e:66:3a:07:8e:06:26:
9a:7a:c5:f7:bf:f5:3a:d1:d8:a5:56:0c:d9:e2:81:88:d8:10:
ca:bc:9b:a3:20:6c:69:3a:59:05:7f:b5:78:28:6c:01:fb:77:
ca:16:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:09 2025 by rpki-client