
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier: FoyTY9ytpjQwEPzDaGczusgPSOo2APsagBk0TUJKXoA=
Subject key identifier: 18:73:D1:B2:B6:98:32:7D:41:D6:32:63:CC:5B:46:A1:C9:72:EC:CA
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial: 0199FDDA0F8F1288E684756350E9C2E7FF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number: 0BE9
Signing time: Sun 19 Oct 2025 19:02:30 +0000
Manifest this update: Sun 19 Oct 2025 19:02:30 +0000
Manifest next update: Mon 20 Oct 2025 19:02:30 +0000
Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: 07kaKRJGx/I/2qO7jmzm4Dn3IILTu1RZZiDvZVO+N+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0f:8f:12:88:e6:84:75:63:50:e9:c2:e7:ff:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Validity
Not Before: Oct 19 19:02:30 2025 GMT
Not After : Oct 20 19:02:30 2025 GMT
Subject: CN=1873d1b2b698327d41d63263cc5b46a1c972ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:7d:18:8f:f6:58:60:f5:bf:63:a5:0a:92:
3e:71:b9:e8:b4:fb:b1:45:fd:4a:24:b5:14:c8:00:
07:00:3a:1a:4e:93:9d:29:ed:3f:6a:3a:c5:8b:d2:
4b:56:bf:5d:ff:dc:58:5b:e9:12:8d:7e:b4:56:91:
35:59:77:c0:44:54:70:21:91:37:5b:1d:66:02:83:
84:01:cc:4d:c7:f7:90:b1:d0:b7:07:d1:16:86:35:
dd:41:b2:46:19:7d:60:90:3e:f2:46:51:f5:9b:27:
5c:dc:67:dc:bf:21:9c:0b:a2:36:6d:a8:9f:6b:07:
e4:b3:3c:68:1d:fc:fd:42:9d:97:4c:13:e0:ec:16:
04:6e:f3:c7:11:7f:6d:91:17:d2:45:54:1d:e4:90:
65:05:ee:15:b7:5b:c7:14:0a:26:7b:4a:08:c6:05:
c3:a1:7a:bf:3b:b0:5c:50:86:fc:60:25:3f:3f:fe:
72:fe:55:e2:45:79:38:4d:49:b5:ce:a0:fe:f5:4c:
7b:c2:72:97:40:23:a0:a1:24:ec:3e:71:a8:3c:69:
fe:42:4c:c2:a1:d5:63:77:f7:83:a3:61:4d:06:d5:
4f:5b:13:d3:ec:09:63:71:01:f1:7c:3e:34:a7:24:
e8:92:11:4b:9b:85:ff:67:04:8c:99:b9:7c:4e:79:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:D1:B2:B6:98:32:7D:41:D6:32:63:CC:5B:46:A1:C9:72:EC:CA
X509v3 Authority Key Identifier:
keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8e:f2:7a:90:3b:e0:9c:75:7c:80:ea:14:4b:a2:33:8e:f8:
58:f6:53:48:a1:65:fa:3d:e2:c6:00:81:03:91:88:7b:27:ac:
ae:4e:55:ea:b7:e9:cb:6b:8e:8b:08:43:69:0a:a0:b3:47:16:
1a:6c:9f:45:fd:ee:e6:f2:67:c8:7f:7d:e8:b7:6b:9c:f5:67:
a9:9e:4b:97:5c:64:40:e6:d1:1c:46:ad:d4:25:c9:60:4a:f3:
b5:a4:31:21:74:ac:56:b1:37:95:d4:e3:89:34:40:a9:b0:53:
f3:75:88:72:80:bc:71:27:1e:bc:d9:45:56:7e:c4:1b:bf:bd:
37:6a:ac:4c:fa:d9:67:85:2e:e0:29:97:5a:a3:61:fd:fb:bc:
47:c4:ad:68:89:99:db:80:bb:ce:92:3f:90:22:63:1f:21:f5:
8f:f6:30:ba:bb:9a:dc:28:ed:4a:14:56:9b:a2:36:39:b5:1e:
ab:3c:43:a8:89:29:2b:57:f3:99:99:6a:52:47:3e:30:6f:00:
71:7b:62:5c:c9:09:46:29:4e:ff:9f:36:44:f2:db:6e:d4:8a:
d9:27:84:11:fe:7c:52:52:73:60:e9:79:df:5b:56:1a:53:40:
4d:a8:4a:91:4d:23:1a:52:5a:fa:19:34:9c:29:e4:d2:60:58:
15:f7:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:37 2025 by rpki-client