Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier: NoUqA/L5ZzIMUpHLWNQyfgsXpqDrKpWQ9FfVItUhrRE=
Subject key identifier: 33:C0:F5:11:E2:E2:FE:60:BD:AA:62:72:4F:76:F8:FC:10:7A:32:8F
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial: 0199FBEA71A4EA2E4B2570FC881DCC56FF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number: 03CF
Signing time: Sun 19 Oct 2025 10:01:09 +0000
Manifest this update: Sun 19 Oct 2025 10:01:09 +0000
Manifest next update: Mon 20 Oct 2025 10:01:09 +0000
Files and hashes: 1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: md/2IilksHXc+Wgm/kAIS4OrqsOde7fBSKFI51R5VQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:71:a4:ea:2e:4b:25:70:fc:88:1d:cc:56:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Validity
Not Before: Oct 19 10:01:09 2025 GMT
Not After : Oct 20 10:01:09 2025 GMT
Subject: CN=33c0f511e2e2fe60bdaa62724f76f8fc107a328f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:76:40:58:da:1e:b4:22:4c:d9:8c:da:fe:
36:29:d3:ee:11:e2:18:14:8f:de:58:9c:a3:0f:d7:
d4:82:1e:79:7a:de:f1:97:0f:db:2b:b1:14:26:02:
8f:40:54:77:10:6f:6b:7c:5b:93:ad:a8:d4:0d:79:
5a:d0:bf:ae:57:45:e5:1c:99:0b:9e:f7:d0:45:87:
03:f6:4a:3a:1f:18:cd:b4:ba:54:6f:5f:88:8f:1b:
c1:40:b8:d0:2c:4f:56:41:e0:f3:cc:69:f9:6f:cd:
e1:73:40:02:d6:1e:9b:4c:43:44:57:33:37:a9:1e:
52:6d:05:2b:f6:e4:e1:80:b0:1c:b6:04:ee:5d:63:
3d:7d:31:4e:6e:74:57:07:70:53:3c:27:74:5f:c4:
53:f3:51:66:b0:87:bd:02:54:e4:d2:42:5a:a6:70:
eb:82:80:c0:9c:ed:37:eb:38:f8:59:fa:24:46:66:
18:7f:fb:ae:58:b2:2d:fb:8d:aa:b4:4c:45:4c:e6:
98:9e:c1:e9:1f:0c:bd:0f:68:bd:a8:da:b3:98:a0:
b2:42:8a:d1:8b:cc:25:ad:d0:22:6b:9f:fe:af:13:
df:ba:28:d4:d8:2b:e7:7d:89:c6:50:07:c9:24:c9:
65:97:58:95:cd:7d:f7:a5:c7:55:44:9b:3e:d8:e8:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:F5:11:E2:E2:FE:60:BD:AA:62:72:4F:76:F8:FC:10:7A:32:8F
X509v3 Authority Key Identifier:
keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4e:10:b7:86:9e:23:20:ac:c5:f4:0c:43:a8:ac:43:1a:b8:
8f:60:d0:78:c3:f1:1a:1c:ae:15:9a:64:55:8f:54:1b:78:9c:
f7:12:9b:aa:1e:77:0c:a2:63:29:36:78:ba:e4:e1:66:94:7e:
d7:53:0c:2b:91:dc:a0:cd:87:ee:63:43:fd:dc:c8:44:e2:ad:
11:30:84:d8:61:6d:f9:c5:2f:e2:d0:43:0d:89:49:82:19:f3:
7f:71:c3:05:ed:a5:c2:7d:30:d4:f7:dd:6d:e9:7a:68:30:91:
49:34:f3:17:64:27:2e:45:2a:ea:91:06:2f:d1:3f:a4:2e:26:
12:96:79:d5:cb:25:13:58:d3:46:84:f9:77:ab:ae:6e:85:96:
a1:60:dc:9e:25:39:ab:ce:a5:a7:e8:b4:21:c7:28:54:db:e4:
0e:e9:fb:8b:ea:1f:04:06:7f:6b:92:88:bd:22:07:c2:97:6a:
60:3c:23:b0:d2:39:cb:99:8f:5b:96:b5:2a:55:39:9c:50:10:
c1:12:78:8d:18:00:76:5e:8a:64:a9:e5:43:be:83:db:e9:f0:
e1:1b:6c:64:82:16:c2:22:60:0e:8a:ab:6d:54:69:5f:36:71:
2c:35:e2:a7:dc:0b:ab:e1:dd:39:24:8c:1f:27:f6:15:ff:c9:
53:ef:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:12 2025 by rpki-client