Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
File: yGEQ5MdkHRgOjxkgrGX7788G18c.mft (raw, json)
Hash identifier: hBjN4M/5/i2W/R+6J0eaL8iRsPSSjD+qYdULj0uCV/g=
Subject key identifier: F3:35:01:45:D9:DE:FF:28:9E:FD:C5:98:F4:E4:F1:44:4B:F7:F9:FC
Authority key identifier: C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
Certificate issuer: /CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Certificate serial: 0199FB7CDAF24CD3B78BA79E221744624DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
Manifest number: 0175
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: yGEQ5MdkHRgOjxkgrGX7788G18c.crl (hash: l/6ObdDPG7QVWYq7bA4ZUd5sck/bA2s88jp5LXzXZx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:da:f2:4c:d3:b7:8b:a7:9e:22:17:44:62:4d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=f3350145d9deff289efdc598f4e4f1444bf7f9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:13:74:d6:06:18:d3:b1:fb:64:85:7f:86:
fe:71:6b:35:99:9b:f0:3a:34:b9:85:8d:4a:2f:e2:
0d:0c:45:e1:70:b5:ef:0d:73:e5:d1:60:09:28:70:
c8:ac:e0:89:dd:c1:59:b0:42:47:9b:97:f3:b4:46:
b8:ef:d9:15:01:13:65:12:7a:05:e5:c3:f8:50:d8:
c8:7f:f0:73:13:45:7e:6a:ff:9b:a5:1e:8b:a4:70:
88:b9:f7:77:23:dc:80:ba:32:90:42:94:d6:82:f1:
b3:2e:ff:f6:7a:60:0c:6d:ec:ed:fe:08:99:da:13:
28:7f:4c:03:1a:ad:41:aa:0a:aa:ae:3e:2e:c2:0d:
cb:31:cd:e7:40:93:d6:69:ad:f3:30:3c:c3:0a:6e:
01:cb:13:7e:f1:43:4e:2b:22:61:92:e8:46:c0:e7:
b2:38:ad:24:f6:26:64:d6:f7:4c:4b:56:14:78:8e:
8c:3c:10:96:b7:a4:e2:e8:e0:24:2b:3c:4c:cb:5c:
42:df:d6:85:b1:88:90:a9:15:84:71:00:34:68:e8:
99:90:48:18:59:38:5d:ca:31:64:92:04:c5:9c:8a:
02:ea:f5:78:01:a7:f1:a5:cf:db:22:d5:7d:e9:be:
31:8a:1e:a5:05:a8:18:57:f7:0d:a5:16:4c:1c:51:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:01:45:D9:DE:FF:28:9E:FD:C5:98:F4:E4:F1:44:4B:F7:F9:FC
X509v3 Authority Key Identifier:
keyid:C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:59:29:8b:8b:24:5d:31:07:a3:ac:a5:85:13:06:9b:21:
69:de:62:9d:66:6b:66:94:71:88:f4:37:4c:94:1a:80:49:01:
77:d1:cf:1b:25:0f:68:0b:ff:da:27:0e:c7:54:c3:77:04:6d:
5e:1b:4d:cc:a8:60:ab:d9:40:12:76:f4:43:a4:c9:56:c3:c1:
76:02:37:7f:a6:bd:11:8b:64:c5:79:6f:9b:12:12:09:96:32:
17:74:b5:92:71:1f:89:c3:51:dd:7c:75:c5:8c:7a:a8:08:5b:
27:a2:22:52:3b:31:70:5a:40:da:a8:58:ab:c0:2a:21:39:71:
a9:7c:8d:6a:21:07:ad:53:4d:a2:d2:22:2a:4b:aa:06:37:e3:
77:93:f8:6b:34:52:f3:5d:4d:a1:3b:4c:c5:00:1d:8a:d8:e1:
09:bb:9b:a7:a9:65:a0:fb:ea:a8:68:29:aa:64:45:fa:c4:38:
90:c5:1d:37:4c:7e:6e:b9:d9:5e:b3:87:c3:d3:09:12:35:e7:
1d:69:2a:f0:0c:1b:43:d1:59:b2:33:ff:9f:42:f1:36:42:82:
86:44:d1:ce:1c:f7:0f:36:e5:ca:97:9c:4f:6e:d2:8c:c0:84:
9d:4f:bb:83:a5:7c:65:da:df:21:9b:ee:54:12:0d:2b:1a:9a:
48:b7:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:17 2025 by rpki-client