Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier: t3PQx1nTgnk/pXykbCR7GpCa9+hWkrzXOwkdzg7Pr2g=
Subject key identifier: 61:09:84:DA:99:96:22:C5:56:BA:D1:A6:4D:45:07:B2:1A:CC:24:9D
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial: 0199FC8F38EDBA92C28998F7553BBA945A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: 0G1JtlUZLfo9UacCJrywtMgchbybtkl8ItrsWUuDxnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:38:ed:ba:92:c2:89:98:f7:55:3b:ba:94:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=610984da999622c556bad1a64d4507b21acc249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:8f:46:6d:ec:d0:e4:90:41:99:cb:44:08:
79:bc:93:24:98:38:d3:47:0a:c2:58:cb:30:e5:b7:
62:d0:ab:f1:b7:49:61:93:98:d8:4e:e8:e9:04:93:
08:e9:b1:a3:32:a3:ac:0f:c0:18:84:f5:1a:86:0b:
6c:4b:1d:36:d7:e1:29:54:31:14:57:65:81:48:f4:
02:f5:8d:78:48:3c:38:e7:eb:89:0e:5a:83:c9:c8:
58:af:3c:80:2a:23:6c:43:07:66:c6:19:85:fb:ca:
35:32:f9:49:33:6e:f2:13:21:e6:1e:09:a4:82:d7:
4d:94:34:77:12:26:90:88:ae:43:87:4f:a0:14:6e:
9f:ce:32:3d:9a:05:99:4e:ce:0a:79:75:2b:7d:01:
a3:3f:07:e9:a2:03:72:02:5c:98:5f:85:80:ce:53:
0c:51:65:fc:1a:5f:34:dc:5a:04:4e:b3:a9:4d:5d:
f3:87:e4:2a:eb:62:75:bc:27:b2:b9:f9:a7:0c:70:
32:0a:ad:3e:e3:d0:61:57:a5:b2:ed:7e:ad:0a:c4:
12:5d:26:69:98:1a:18:b9:10:2a:65:36:cd:c7:73:
28:f2:d6:2c:41:e9:8d:41:55:48:2d:cb:9d:af:09:
20:3b:48:75:5e:71:4a:f9:38:6c:c9:16:59:b4:c1:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:84:DA:99:96:22:C5:56:BA:D1:A6:4D:45:07:B2:1A:CC:24:9D
X509v3 Authority Key Identifier:
keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:a3:31:90:67:ce:5e:0d:e6:bd:8a:00:1c:b8:9e:80:d9:
c2:83:6d:7c:96:7d:d7:25:d9:8b:e3:6a:79:a9:e8:fc:71:c9:
dd:52:da:d2:d2:92:23:96:32:6f:7b:11:3f:21:9e:bf:ed:78:
74:cc:d0:44:fe:5b:9f:17:b7:c8:f8:e6:fc:5b:af:3c:6e:d3:
f6:ae:a7:65:60:fe:8a:f0:39:88:93:d0:43:ee:1c:71:97:a3:
df:3a:9e:8e:53:9f:69:4f:c2:bb:a4:3b:1d:94:64:02:b7:fc:
fd:c4:88:2d:3a:ab:4c:a6:ad:4a:dd:bf:cc:6d:e6:f5:cd:ba:
35:7f:e9:a6:66:bd:a8:66:b2:52:13:d9:26:7f:42:ad:84:96:
7f:c2:68:01:fc:a3:dc:89:dc:31:25:c3:c0:4f:f1:1d:ce:5e:
6e:7e:5e:4e:51:9e:c1:d3:22:87:5d:c1:0f:0d:1d:ea:95:3d:
29:71:73:22:bf:12:10:99:61:aa:3a:b8:91:30:80:a9:d6:f6:
91:c0:55:91:3a:e9:ae:ac:5a:6e:f0:f8:c7:4b:3b:12:cd:35:
5d:84:4c:b3:13:85:20:47:3c:93:67:97:7a:e0:85:39:83:c1:
1a:e1:49:67:a1:2c:35:3d:e6:8d:97:f1:27:44:22:ab:fd:7f:
da:4f:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:58 2025 by rpki-client