Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: D3Bz0lbZ/upO9BnvxFOfbptli7giawvB6ptg9Zg6ZU8=
Subject key identifier: 21:4E:7E:49:98:ED:0F:29:9F:CA:5B:01:C4:E7:3D:4F:E5:A8:4A:3C
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 0199FC58C3A97413FABBAE44A60815C370EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 076B
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: nJDFDQ9M64iW+ZAqflEaDQTM4njldNgK0lM2MoLLFeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c3:a9:74:13:fa:bb:ae:44:a6:08:15:c3:70:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=214e7e4998ed0f299fca5b01c4e73d4fe5a84a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:80:e5:7a:c6:f1:a4:af:99:af:6d:53:62:
9c:22:75:21:4e:92:b3:1d:0a:64:66:94:d3:df:31:
b6:64:18:ca:59:0f:91:ef:67:24:5d:99:de:9d:25:
16:07:69:a5:13:79:1a:e5:ca:f2:21:04:5d:e4:aa:
c4:75:64:d9:4e:85:64:37:1b:a1:8d:d0:77:a5:75:
8b:12:fb:48:22:82:bd:a8:20:16:a1:8b:29:98:44:
a2:f3:df:6b:7d:12:33:2b:a4:2e:84:38:b2:1c:94:
3c:b6:ea:05:f8:9f:86:9a:95:ba:a1:27:29:dd:8d:
16:e5:8b:41:1b:b4:92:92:f7:45:27:ed:78:52:04:
9b:50:1b:20:84:33:7f:28:96:f9:7c:a4:cb:ba:c7:
ad:7e:7b:08:fb:9c:ac:a3:fb:38:1c:f7:ef:89:8a:
3d:1e:53:ed:d7:48:f3:9c:cb:1b:3d:81:de:78:66:
17:88:28:e2:72:d5:6f:8f:ed:e4:57:b4:bd:dc:00:
1d:e7:f3:be:12:09:f8:e2:48:54:fa:c4:9b:24:4c:
a2:99:30:1c:e1:d4:0a:c8:50:bb:32:15:ca:eb:00:
80:ce:dd:6c:29:5b:5b:e9:1f:e7:da:2d:65:1b:29:
d7:fb:5a:f6:f2:54:01:96:81:ff:a0:3c:0d:f7:ed:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:7E:49:98:ED:0F:29:9F:CA:5B:01:C4:E7:3D:4F:E5:A8:4A:3C
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cc:32:81:75:c1:ad:dd:18:b4:58:0f:35:62:ae:b5:94:3c:
51:76:25:df:92:78:c7:d0:b4:f5:34:6c:aa:1e:34:ff:6b:28:
85:de:88:bd:f8:59:d7:de:df:bb:0c:5e:cc:10:d6:fe:2d:45:
26:47:08:82:8c:eb:d9:89:e7:39:4d:77:88:0c:9b:25:a9:33:
89:40:d3:ff:26:b0:b6:ca:fb:ff:e2:e4:7c:e1:62:6e:c5:6e:
73:27:5c:82:19:c0:a6:67:2b:51:01:d3:47:56:8f:2a:95:1b:
e4:f1:d9:93:65:95:32:48:e5:cc:e4:e2:f6:63:5a:df:48:e7:
10:cb:87:50:63:55:82:85:d4:1f:98:a9:4d:65:90:f8:e8:ad:
f7:b2:f4:b5:da:ae:6d:e1:3b:12:9c:76:b9:0d:6f:16:5f:74:
fa:87:8f:fb:ad:bb:e9:db:2d:1d:00:e8:9d:34:30:a7:4e:00:
b6:5c:3a:42:e6:6d:89:d1:56:2c:b7:ad:95:94:3e:df:4f:9f:
46:a8:b1:10:67:fa:de:84:64:2b:c6:b4:9e:6d:8d:02:02:77:
71:a7:93:7f:a8:22:93:9f:96:e7:84:ca:f6:0d:ca:1a:ad:c8:
3e:56:b4:e2:39:33:b2:d9:7e:6a:d4:75:0b:10:e6:41:77:a2:
88:c2:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:54 2025 by rpki-client