Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
File: yj7NoA-sC_tjsoVD6itdXx5N9ss.mft (raw, json)
Hash identifier: QJ8+fDX3LmjUgCRaQb9ueZ9Hrlxo9zkdyOxbwhIcEDE=
Subject key identifier: 03:99:7F:48:E5:94:CB:AD:7A:DF:1B:CB:4C:7B:38:51:48:81:EA:B4
Authority key identifier: CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB
Certificate issuer: /CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
Certificate serial: 019A00DA7EDB617CA645DDB47BFD49CDDC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
Manifest number: 02E1
Signing time: Mon 20 Oct 2025 09:01:50 +0000
Manifest this update: Mon 20 Oct 2025 09:01:50 +0000
Manifest next update: Tue 21 Oct 2025 09:01:50 +0000
Files and hashes: 1: yj7NoA-sC_tjsoVD6itdXx5N9ss.crl (hash: pywL1WIF+pdVsYOZ/v0dlLmnAwBAYH44gBSgpnNpSo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:7e:db:61:7c:a6:45:dd:b4:7b:fd:49:cd:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
Validity
Not Before: Oct 20 09:01:50 2025 GMT
Not After : Oct 21 09:01:50 2025 GMT
Subject: CN=03997f48e594cbad7adf1bcb4c7b38514881eab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:e3:03:c1:e3:da:79:cd:75:b6:77:60:92:
55:63:e5:27:7f:b9:2e:54:d3:e6:0a:5a:ea:43:11:
20:79:4d:63:a9:c0:62:ab:3a:4d:25:e7:5e:33:be:
51:0f:30:2c:69:b6:fa:12:93:94:8a:9f:33:09:ac:
38:70:df:82:6c:db:cb:0f:b6:84:de:bc:5c:61:4c:
e1:d6:12:e5:54:ca:12:b8:88:8f:44:05:a9:fa:d5:
3d:25:48:98:2d:d4:01:b1:df:58:f6:6d:94:c9:24:
41:7d:63:9a:59:f4:8c:b3:ef:a5:71:76:c1:5c:9a:
dc:3b:93:11:08:bf:5d:9e:46:c2:87:2a:fb:82:17:
2a:c1:3f:d3:da:9f:3c:a2:be:a8:1d:7e:51:62:37:
72:f5:f0:a5:7a:47:e9:9a:a7:d5:85:03:e4:4d:bd:
ee:5e:04:c7:1a:2d:0d:50:7e:81:ce:f8:a0:1e:b9:
3a:ec:34:a0:68:6c:17:a8:9f:4c:1f:46:74:8a:20:
5f:ed:fd:6c:59:40:50:00:4d:6f:82:01:4d:5e:da:
73:0f:b6:2b:fe:12:99:68:16:c4:60:f3:52:96:36:
d6:33:f5:4d:3c:f9:bf:55:c5:5b:85:f0:9a:e8:af:
4e:c5:a6:9f:40:52:df:03:5e:0f:f6:c2:af:88:cb:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:7F:48:E5:94:CB:AD:7A:DF:1B:CB:4C:7B:38:51:48:81:EA:B4
X509v3 Authority Key Identifier:
keyid:CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:99:3c:bf:db:94:30:22:3c:e0:50:d9:2c:e2:75:b3:42:c4:
16:12:10:ad:3e:1c:f2:b0:79:d4:1c:16:9b:0a:a1:8a:56:f3:
38:5e:a8:9e:a5:da:b4:da:be:03:20:92:9e:60:4e:40:4c:94:
23:28:fd:51:85:b5:ae:67:aa:cc:3b:ca:c8:18:0d:6a:69:4b:
fe:76:c7:7d:de:b7:c6:46:02:13:6d:c4:81:d8:25:c4:3a:e5:
24:7a:54:ed:cd:a5:0a:2f:11:f1:4e:b4:b2:de:2b:99:53:57:
98:3d:2a:4a:88:89:9c:4e:94:6e:41:04:b0:9d:38:f5:90:bc:
2b:4f:1c:e4:e5:23:45:68:ae:68:f0:2e:a6:a3:7d:02:c4:f4:
ce:e5:15:bf:89:28:18:d4:19:8f:e8:b1:76:1b:c5:2c:cb:9d:
88:db:64:9b:c8:a0:ca:ef:9f:e8:6a:9c:e9:d9:c7:81:aa:93:
b3:ce:e5:06:7e:ee:f1:95:54:09:a0:b0:bf:ae:83:da:f2:3d:
4a:82:5b:47:25:1b:bb:86:fd:e2:99:b1:0e:05:69:0a:28:55:
ea:30:66:12:be:76:23:0d:c4:89:2c:fa:9d:da:c6:0d:53:ac:
df:f6:a9:58:10:75:e8:3c:a3:54:7a:7c:f1:14:d1:88:c8:a1:
98:52:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:42 2025 by rpki-client