Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
File: yAH8mVpSGvH1Atnq8S1mIaZMr00.mft (raw, json)
Hash identifier: kBkppsfWbvN36ggaM8tJKSu/2+PapZIL6oiEpgOmmuw=
Subject key identifier: 79:3F:8B:98:96:9D:63:79:FD:5A:BD:4C:C5:96:D9:89:7E:C7:2E:F8
Authority key identifier: C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
Certificate issuer: /CN=c801fc995a521af1f502d9eaf12d6621a64caf4d
Certificate serial: 0199FBEC456CC81A876633C1F19CDD60738B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:03:09 +0000
Manifest this update: Sun 19 Oct 2025 10:03:09 +0000
Manifest next update: Mon 20 Oct 2025 10:03:09 +0000
Files and hashes: 1: yAH8mVpSGvH1Atnq8S1mIaZMr00.crl (hash: y21eNpisjcEenbPZH0T2VziuLM8d72J3NgKMFFyIUYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:45:6c:c8:1a:87:66:33:c1:f1:9c:dd:60:73:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c801fc995a521af1f502d9eaf12d6621a64caf4d
Validity
Not Before: Oct 19 10:03:09 2025 GMT
Not After : Oct 20 10:03:09 2025 GMT
Subject: CN=793f8b98969d6379fd5abd4cc596d9897ec72ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:44:87:3d:ad:b8:9c:f4:a2:61:c8:37:af:96:
6d:a0:93:0f:14:5e:d7:d9:0f:83:be:56:08:dc:a7:
1e:f4:28:88:e1:11:2e:34:3c:01:73:bb:84:70:31:
5d:3d:5e:cd:c6:99:00:4a:74:90:74:71:e3:52:b3:
9c:fd:70:04:1b:99:4e:01:48:fd:53:63:74:28:b5:
19:f7:d9:57:85:db:3d:6e:00:21:cb:70:66:7c:66:
70:fd:6f:41:c5:d6:06:f2:6c:4a:da:2c:3d:ac:d2:
c7:b3:8a:7a:f2:43:d4:f4:31:ca:84:df:1a:27:7b:
15:4f:9f:03:88:c7:ef:77:2e:44:0f:d2:bc:ac:5a:
92:69:42:6e:44:40:08:61:31:7f:c3:81:3f:50:1c:
e8:22:ad:71:68:f6:60:00:32:8c:09:56:06:6e:79:
36:8a:25:3b:05:5d:bd:19:80:70:69:ef:46:58:0a:
32:e2:75:db:f5:1b:c6:71:b7:34:2f:f8:11:fc:f8:
7c:27:99:13:d5:77:c1:2f:96:b5:3b:d3:77:d5:42:
51:e6:17:e2:14:3b:0f:49:1b:87:ad:ac:0e:e0:2d:
ca:c5:d7:a6:db:ce:d2:8b:e7:ce:b4:6d:c7:22:f7:
de:b6:c6:20:6e:63:f1:a6:9f:13:48:05:52:02:42:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:8B:98:96:9D:63:79:FD:5A:BD:4C:C5:96:D9:89:7E:C7:2E:F8
X509v3 Authority Key Identifier:
keyid:C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:dc:ef:a1:6b:34:3e:08:ab:a0:26:ba:66:04:d8:e3:a6:
9a:5d:ac:80:09:f4:d5:a9:09:f8:21:d4:1a:7e:86:a2:e2:ea:
4e:f5:1f:10:5c:7f:84:fa:8e:be:ed:11:9a:c4:06:66:29:2d:
dc:bf:7b:d9:b4:84:9b:ba:21:df:91:8a:33:56:cb:47:d6:0d:
67:b2:99:69:90:24:15:78:22:c7:5a:9c:4b:88:52:c8:d7:19:
d3:59:5d:df:3a:42:ac:67:6a:55:53:c0:92:5d:3e:8e:41:4a:
51:5e:0c:76:1d:12:7b:12:8b:fc:c9:7c:a0:9a:38:bf:97:71:
49:18:82:05:20:78:78:fd:9e:be:5d:14:ed:eb:f6:ec:49:e5:
a2:72:da:67:5a:d8:b8:a1:ec:b5:59:12:d6:28:eb:d5:8f:37:
8b:f5:a9:b7:1e:89:18:a1:27:c4:21:d9:e2:c0:27:2a:74:9e:
2c:2d:5d:c0:58:b6:6c:74:2f:e7:9f:cd:03:74:49:e3:fd:2a:
c6:e8:32:b4:3c:50:14:21:1e:38:6a:b0:cb:72:06:c5:f8:73:
9a:34:c0:93:fa:3e:11:a8:57:e1:bb:06:a5:2f:69:06:0d:01:
26:e2:8d:eb:5e:60:3c:27:fa:82:af:a5:32:e9:df:bf:90:e5:
43:aa:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:57 2025 by rpki-client