
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: ayBu4qdGCzXr1ET2JXtK3TKGnZlOhwgKdARVupk6V2o=
Subject key identifier: 9A:6C:A7:48:AD:41:F3:AA:70:58:06:29:1D:12:46:1E:04:3A:95:79
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 0199FAA161C834CB770D30E697C86C2F12F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0DD5
Signing time: Sun 19 Oct 2025 04:01:44 +0000
Manifest this update: Sun 19 Oct 2025 04:01:44 +0000
Manifest next update: Mon 20 Oct 2025 04:01:44 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: cBqv6CfGOkRoC0hDvxbp1OzR1yNJV9nuh6LXvsIirwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:61:c8:34:cb:77:0d:30:e6:97:c8:6c:2f:12:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Oct 19 04:01:44 2025 GMT
Not After : Oct 20 04:01:44 2025 GMT
Subject: CN=9a6ca748ad41f3aa705806291d12461e043a9579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:eb:50:28:99:0c:06:66:cf:a9:83:98:4a:
dd:c3:06:ab:7b:30:15:c6:61:c4:9f:90:ca:ac:1c:
a7:df:07:3e:35:0c:e5:ec:a8:ae:ac:4d:0f:00:75:
41:5e:6d:f5:4c:fe:03:0d:79:97:b2:93:a6:5a:39:
a5:af:9f:f8:12:44:d7:e4:5c:7c:1d:09:28:dd:d5:
6f:36:44:5a:21:62:cf:7a:11:e9:56:03:43:27:7b:
a9:77:ce:30:fe:7b:35:fb:db:a7:a9:1e:ab:06:38:
d8:96:eb:1d:6c:e0:f2:de:0e:7d:72:7a:bd:aa:c8:
17:9f:ba:7a:72:be:5b:a1:7f:e3:85:1e:91:4a:dd:
c9:68:ec:3e:b5:5d:04:8c:5a:81:36:0f:56:8e:b1:
98:da:79:0e:6d:99:09:46:2f:19:a0:3b:d5:8a:9f:
72:40:3b:98:70:2b:24:dd:ca:42:3d:c6:0a:c7:34:
9e:8a:bc:cf:92:e9:a2:de:0a:6e:f4:05:2d:5d:2d:
1e:1d:dc:e6:2c:59:fb:95:fc:3c:c8:de:46:a7:32:
23:f4:1b:6e:d8:d4:f0:56:ee:07:83:a6:a2:32:f2:
37:33:72:c1:85:26:04:03:99:17:9f:88:eb:39:b7:
ce:ed:29:49:d5:08:71:5b:62:3c:8a:ab:56:35:bf:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:A7:48:AD:41:F3:AA:70:58:06:29:1D:12:46:1E:04:3A:95:79
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:d7:65:bd:9d:39:0e:b4:ab:b2:d3:83:d5:6f:a9:1a:8b:
a2:48:3d:59:05:c1:c2:c7:8d:40:19:3f:86:2e:5e:c3:fb:54:
13:4b:a1:5c:9f:0f:c7:b7:c9:8a:fb:f8:13:52:60:3d:07:ec:
29:18:3a:a2:97:c3:84:5a:c8:18:38:39:5a:28:70:6f:64:b2:
6f:95:62:80:b5:ef:c4:e1:e3:d2:f1:02:ac:b8:36:29:d0:72:
8c:f8:1b:43:c2:2a:6f:82:a6:5b:e2:e6:7d:9b:41:4f:a1:91:
b9:9a:47:30:f1:d6:a5:a4:61:ac:6e:3c:d7:55:f3:51:1f:07:
e1:06:00:b5:99:93:45:b6:dd:4d:51:e9:90:fd:28:35:e0:fa:
af:01:dc:b0:15:25:32:08:70:6a:1e:9b:c0:23:15:94:89:fa:
18:7e:66:9d:3e:53:a6:ef:19:18:3a:75:63:de:2c:2a:14:6b:
dc:70:6d:f3:c5:49:b6:8b:e2:69:e0:2a:bc:ea:8d:1d:44:a7:
a7:08:c4:de:30:90:c2:68:f4:76:82:82:32:55:25:50:9c:d3:
5e:eb:31:18:cf:b2:b4:8b:f5:da:46:32:bd:36:48:07:09:10:
90:e1:fa:cf:d3:f2:62:50:4d:aa:a7:4e:c7:c9:1b:c0:05:68:
55:52:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:24 2025 by rpki-client