Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json)
Hash identifier: nnuggfC8vljNlz58nR+tlTZWKquXQ5Wa6hmsMrrDK/M=
Subject key identifier: 43:1B:8D:4C:00:36:9E:B2:E8:CD:13:11:AF:4B:6F:13:8A:BE:68:3D
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 0199FE47580E8C517FE0050696794799E076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
Manifest number: 039D
Signing time: Sun 19 Oct 2025 21:01:52 +0000
Manifest this update: Sun 19 Oct 2025 21:01:52 +0000
Manifest next update: Mon 20 Oct 2025 21:01:52 +0000
Files and hashes: 1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: m/J8GNOsI76TF8YyQgtnfDPUDvsKjZHckLrfDQBB39w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:58:0e:8c:51:7f:e0:05:06:96:79:47:99:e0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Oct 19 21:01:52 2025 GMT
Not After : Oct 20 21:01:52 2025 GMT
Subject: CN=431b8d4c00369eb2e8cd1311af4b6f138abe683d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:b7:34:28:52:05:66:01:4c:ba:01:6e:e3:
a9:15:d5:4a:c5:01:e2:e3:d3:fb:43:04:0e:46:73:
7f:87:71:70:97:8a:03:60:f9:6f:37:ca:46:0d:0b:
45:f9:0a:8e:93:b4:a1:fa:42:4b:11:9b:5c:86:ab:
76:a6:91:42:86:52:0a:4f:07:15:54:73:6b:49:20:
0b:bb:e9:92:f7:3d:a7:2d:a6:eb:ef:c9:e6:17:2b:
17:7f:a3:bf:ce:38:a5:0c:05:2a:cc:e9:9c:55:c1:
4c:b7:5d:d0:9c:4d:68:e3:d4:ab:f4:8d:7d:64:d6:
85:c0:03:54:16:c3:5e:23:70:3a:0e:4a:4d:af:6f:
db:ae:bc:a3:24:74:d9:21:e4:e3:ba:5c:29:1c:ac:
cc:1a:ba:db:1b:80:f5:af:5a:55:89:cd:51:6c:24:
33:3f:b3:67:43:47:27:f4:3c:c5:5b:1e:c1:be:79:
74:b8:c4:13:3b:fb:ed:e2:56:02:95:0c:c5:38:8d:
a7:5c:08:3e:ec:f8:1f:9d:05:50:db:9c:ca:63:dd:
cf:d6:c6:15:45:8b:d5:24:86:c9:66:09:a9:e3:50:
47:0c:04:be:aa:e8:c7:e2:b2:55:a5:9d:9a:9a:86:
74:96:ff:9b:9d:31:6d:fb:c9:7b:4e:e5:9e:b6:a5:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:8D:4C:00:36:9E:B2:E8:CD:13:11:AF:4B:6F:13:8A:BE:68:3D
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ed:7f:25:d8:d4:9a:ea:1e:15:44:aa:f8:07:11:41:3e:9f:
81:f1:bb:1e:64:5d:15:8b:07:9f:ec:59:25:f9:e5:c1:d3:86:
91:3c:df:31:83:e6:05:46:1b:7b:0d:ab:4c:f4:39:63:dd:72:
62:2d:b0:d2:a4:6d:b4:b9:49:35:fb:b6:41:dc:ae:51:6d:dd:
dc:2b:7c:2a:18:8a:ec:d9:25:01:74:ef:3b:1c:17:a3:4c:a6:
cc:ac:d2:74:21:9f:63:fd:71:72:98:69:50:06:35:e9:e8:84:
35:67:92:67:4a:8e:8f:ce:ac:28:8e:8b:bc:89:bb:0f:87:9d:
0e:4b:e3:16:a1:cc:4d:22:93:c7:95:33:d1:10:20:4e:4d:4a:
a1:8d:3a:00:db:dd:0e:b2:ea:d8:56:3b:a7:d6:9c:fc:82:53:
2e:b4:4e:c8:69:70:73:c6:b8:7d:2b:18:00:06:cc:cb:a4:0d:
94:49:06:09:b4:13:e3:14:31:aa:d4:86:27:6a:86:9a:99:21:
25:4f:57:7e:1b:48:8f:6e:5a:25:fc:ac:b5:3b:e7:08:62:3a:
97:dd:aa:d8:dc:94:04:a8:16:b4:cd:3c:a6:10:79:26:d7:e8:
90:ae:7c:f9:b3:d4:35:31:88:9d:f4:ef:67:f4:26:26:f9:91:
9d:b3:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:07 2025 by rpki-client