Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier: duoMRV1g1xuT20RijxiM+G8Kgh2oikUQc87Gk307wn8=
Subject key identifier: 74:CC:D9:C1:88:1D:65:71:1C:58:B3:5D:5F:43:4A:0D:6E:DF:9C:A9
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial: 0199FC8FA7D258C0187FB85486ADC8DE76FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number: 044C
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: rYIK4P+iEiYUyDyMo135f4rmdDRbUVdClyB/kFRi4LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a7:d2:58:c0:18:7f:b8:54:86:ad:c8:de:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=74ccd9c1881d65711c58b35d5f434a0d6edf9ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:83:76:6f:f6:6d:a4:0e:71:1b:c4:69:1c:
22:94:bc:80:3d:5e:de:35:28:e4:2a:57:a7:df:52:
1e:ab:eb:c3:1a:10:dc:99:78:45:81:ba:60:ee:8a:
80:86:a5:93:af:e2:2b:cf:49:d1:f4:9f:04:43:50:
41:d5:b6:89:9c:3b:55:2a:0a:69:32:0c:c6:0e:83:
39:b3:f0:7d:24:19:8d:ba:33:97:3d:fc:c1:1f:c9:
4a:19:41:a4:93:5b:4b:65:59:e2:51:78:1d:a0:06:
6c:33:2e:00:e8:59:d2:97:78:c7:bd:de:69:7d:5b:
9e:88:45:6d:b4:d6:5d:45:f8:03:5c:d4:1c:a2:17:
51:2f:e9:65:da:68:e4:88:a0:b4:01:4e:83:71:cc:
6c:74:0e:43:b5:46:13:51:b6:83:f1:96:45:8b:70:
40:bb:32:7a:56:d1:a7:a6:6e:f3:5d:94:ca:c6:da:
5f:4c:aa:2a:d2:91:70:84:46:a3:f2:69:1a:de:f7:
55:18:b1:5b:ba:93:1c:74:ea:f0:7b:29:1e:d0:96:
d7:12:ab:d4:32:e3:ca:6d:4d:b1:40:c5:66:65:59:
0d:80:1d:f6:95:ed:f7:67:49:77:1f:c6:2e:97:ef:
3a:ba:5f:02:65:84:d5:ff:05:05:5d:4c:5e:d9:02:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CC:D9:C1:88:1D:65:71:1C:58:B3:5D:5F:43:4A:0D:6E:DF:9C:A9
X509v3 Authority Key Identifier:
keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6a:be:43:65:df:dd:73:4c:7b:04:7e:e6:1f:28:72:3f:18:
60:75:52:56:0b:8e:33:d7:ba:50:48:20:e3:e6:63:2b:5f:da:
d1:e7:ff:ff:0a:8c:6c:9b:a6:92:8c:43:b8:93:b8:38:89:94:
ce:08:93:a9:2e:29:25:8a:91:34:e8:e3:16:21:27:8a:3e:3e:
f2:8d:2e:2b:d0:33:88:6f:fd:d5:9e:cd:d9:f9:0d:fe:8b:fd:
0a:93:00:2e:2d:56:bc:ac:0f:e9:41:0d:d6:c1:71:e0:69:22:
e9:09:85:a4:43:a7:a3:aa:57:42:c0:08:74:25:bc:85:ff:07:
4b:f7:37:da:f4:0c:c2:f7:c6:df:46:91:11:3b:56:4c:75:d1:
78:4b:a6:00:49:02:82:13:6a:c4:e7:8c:e8:0e:a2:42:fd:6d:
3a:88:d6:a6:fe:9c:72:4d:07:42:62:61:af:d0:e6:ed:fc:62:
a4:66:16:dd:f4:ab:3a:85:19:5f:9b:86:a0:32:43:7d:99:e1:
96:99:bc:af:1a:12:51:5a:1a:25:5f:6a:8e:fb:d3:4c:37:f8:
44:7f:7f:b9:d5:16:d5:e9:e6:2a:66:2d:f8:d3:a8:a4:60:68:
2b:46:94:e8:a9:a5:fa:dd:1b:e7:2c:9c:c1:b8:fd:33:0b:0b:
20:df:05:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:24 2025 by rpki-client