Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: EiGA8G3bq6EZyC7HwMafq5kNd/TIvGQaTwh8fEFSuI8=
Subject key identifier: 0F:B9:24:BC:A6:96:B6:76:81:16:E8:DB:0A:33:57:AD:42:81:62:3A
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 0199FCFD659BE48EC8506F3B2A777FF840BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 01F2
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: CqjCO7M4ZA5zx38W0EGYh+sIiZpiyyfYW4lHDrVaTNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:65:9b:e4:8e:c8:50:6f:3b:2a:77:7f:f8:40:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=0fb924bca696b6768116e8db0a3357ad4281623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:4e:e1:71:34:89:7b:6a:e5:09:22:ce:fe:
59:8c:65:d6:f8:8d:6c:e7:54:74:e1:c8:50:4c:63:
03:28:45:3f:c2:2a:3a:56:24:cd:e5:6a:60:d6:6c:
00:77:d0:76:8c:ee:91:29:e4:19:f5:67:9f:65:e3:
4c:a9:59:24:73:c3:32:8d:a0:24:c9:6e:54:e9:d4:
f8:4c:1f:0a:eb:45:29:c7:f4:4d:26:3d:cb:a6:97:
0e:f2:45:7c:9f:ef:9b:5c:db:aa:64:ca:1a:19:4a:
5a:23:35:8a:fa:6b:53:80:a8:1a:91:59:0e:20:44:
5d:c0:2d:59:11:a5:a5:00:8c:ea:77:2e:f0:38:84:
a2:ad:d2:fc:c6:98:aa:94:95:07:81:8c:3f:49:aa:
f4:93:57:6a:7a:21:be:6c:52:d1:06:b6:29:e6:b5:
c4:75:ca:45:c5:66:05:e7:0f:2f:52:a5:0a:81:94:
d2:70:fd:cd:ba:da:3c:e1:32:61:f2:fa:a2:e1:e3:
72:b5:1a:2c:53:fb:f8:39:be:36:d0:50:11:b4:70:
ea:07:d8:11:d6:fa:75:aa:ea:8d:d1:66:e6:f0:e4:
fc:44:db:07:48:e8:98:ad:b3:48:dc:cc:3d:b4:9e:
55:4d:40:b8:38:fa:f7:8a:a0:bf:33:b1:3b:d4:fe:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B9:24:BC:A6:96:B6:76:81:16:E8:DB:0A:33:57:AD:42:81:62:3A
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8d:3c:c8:fb:11:96:7c:91:09:35:55:c7:81:82:bb:b2:fa:
a6:64:04:99:af:3d:1b:f3:46:58:19:f4:f6:3a:35:87:5b:2e:
3f:d2:2b:75:9c:79:b4:d4:84:6a:8d:53:26:ec:c7:d8:29:6d:
b2:70:a0:f1:1a:74:5c:cd:77:92:8b:98:3e:c1:59:06:37:8b:
37:50:e1:92:ee:8c:e1:c1:d4:9b:dd:92:7e:40:5d:bc:15:99:
65:e2:f4:5f:30:b0:34:16:7f:a2:01:7c:3e:27:d7:f2:3d:2a:
c4:ae:44:5b:40:1f:0c:74:e2:5e:a5:9d:85:51:1c:65:8f:bc:
2e:d0:40:ce:38:76:3c:ab:a5:fd:96:5d:ee:c0:f3:7d:7b:dc:
ba:31:db:4e:90:5e:4d:08:18:96:1c:4b:ae:c9:33:fd:50:8c:
dc:8c:c1:dd:c5:b8:de:4a:e3:b7:8f:f4:50:41:cb:70:a1:f7:
c0:6d:ac:bc:b1:64:7d:ef:b6:98:3b:fe:b8:35:e1:84:37:28:
f0:2f:ce:4b:d6:b5:63:67:c2:3e:02:66:de:ab:5d:25:69:a7:
1d:40:81:56:e1:c7:98:13:31:f1:81:e2:b3:6e:20:c4:79:53:
f2:90:bc:3a:f3:37:aa:c9:fe:f3:0f:e8:eb:64:c9:c5:d4:20:
60:30:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:50 2025 by rpki-client