Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier: Hyd5wZ+EmCf80s+08vsjKTipNCXvmmevFHRCI9JN3Bo=
Subject key identifier: FA:AC:ED:82:3A:A6:0A:C3:11:DE:B0:85:2C:F5:50:56:D0:75:1B:04
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial: 0199FBEB56691EA0331FCD0782C17C3357FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number: 076A
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: zE8Boh8ae15bQVIocfwddcytTsYRKNXTGCZ0t5U+gUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:56:69:1e:a0:33:1f:cd:07:82:c1:7c:33:57:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=faaced823aa60ac311deb0852cf55056d0751b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:63:6c:48:36:28:95:a7:6b:54:e9:1f:c0:b1:
94:8b:c9:0b:42:7f:ba:d8:7a:15:02:4d:c9:c8:53:
f5:29:b1:59:90:21:87:0e:5d:86:e3:8b:b3:32:79:
bf:fb:0e:7c:08:87:41:46:19:e7:da:47:a2:c6:79:
b5:49:04:aa:8e:d5:6d:13:50:5b:f8:15:55:0e:03:
75:92:dc:9f:ed:4a:65:9b:bb:c8:88:fb:4a:6f:5c:
60:29:a4:88:34:e1:4f:f8:d1:27:64:d6:0c:a5:c1:
88:bb:ab:07:8a:be:78:f4:44:bd:10:05:43:92:67:
3f:00:34:10:43:07:f9:cc:f4:0e:bf:c5:64:b2:43:
aa:c6:ce:28:33:b6:5a:c6:67:5d:df:cf:9a:c7:93:
71:2b:9d:18:d7:e3:c2:b3:8c:5d:41:6e:4a:2f:5b:
79:9f:9a:07:d4:af:97:16:24:89:f6:70:a8:e8:55:
e1:7b:3e:20:7e:d2:4c:92:5c:ec:a9:c4:4f:65:9b:
f6:55:ee:e4:09:39:c7:83:05:ae:46:8d:3e:d8:f0:
1a:5b:34:5f:9a:f2:4e:d8:3b:56:b2:36:9c:c6:2f:
e7:be:8e:3f:64:9f:05:99:e4:f3:a1:08:63:b4:52:
75:5e:d2:fc:2e:94:33:88:d1:a5:3a:14:7b:b3:87:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:ED:82:3A:A6:0A:C3:11:DE:B0:85:2C:F5:50:56:D0:75:1B:04
X509v3 Authority Key Identifier:
keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:33:1c:23:85:6f:34:a0:7f:e4:92:bc:da:db:06:cc:55:98:
ad:dd:8c:25:df:e2:14:78:e9:e9:a8:91:96:60:9a:32:55:6e:
2d:46:78:5b:0d:6f:b3:1c:39:0c:7a:f1:00:f5:e2:25:58:8e:
ae:d9:83:b6:8e:65:cc:15:3c:a2:72:7e:92:0b:98:bd:b9:b0:
0b:86:8b:f5:6b:15:5f:6c:ca:e0:73:9a:10:38:6c:5e:8c:93:
56:46:be:4b:20:35:39:b0:c8:0c:a4:15:b1:f7:de:69:85:7c:
9e:03:26:b9:67:19:02:58:aa:0f:d7:ae:d4:b1:9d:00:74:9a:
b9:cb:c4:21:5b:97:4f:76:dc:d7:e1:ce:a8:b2:0f:c7:dc:7d:
91:b0:2f:45:de:ec:33:5a:54:ca:3a:bd:7f:c7:7f:2a:3f:f8:
0f:89:b5:69:cb:e9:3f:14:bd:00:99:36:a0:28:35:ff:68:2d:
a4:84:d1:d8:69:46:74:ff:83:8c:2d:51:25:ea:b2:5f:c5:e0:
cd:94:34:69:45:e6:5f:0f:d6:ac:fd:da:47:b6:ae:b2:c3:96:
bc:15:f5:f3:7b:55:29:a0:70:ff:fd:25:7c:d4:38:6a:d9:e1:
cc:ab:7b:73:72:26:72:39:93:97:a0:77:15:25:e4:44:a1:d5:
ac:aa:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:48 2025 by rpki-client