Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier: VJcVR+FM9OmYbu/BJ1u6vcjZd4ap+9+ckwF2OQclnfs=
Subject key identifier: 23:F9:BC:61:03:D4:04:78:28:27:1B:06:E8:80:A5:80:3A:45:53:B5
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial: 0199FBEB16273D5662BC9DC0338E9BCB5C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: rfTbPTcSdjOXhjca20FThSZ3KK4cNNG7HVMH/8NgEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:16:27:3d:56:62:bc:9d:c0:33:8e:9b:cb:5c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9187af710f6285e13553071328b9d994852c471
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=23f9bc6103d4047828271b06e880a5803a4553b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:fc:7a:12:09:09:71:7e:67:8c:9b:d3:24:
7f:6f:bb:b6:0a:ff:2d:00:c0:eb:2b:ef:ec:6d:45:
3d:e4:97:b8:82:97:ad:78:f8:b2:b7:b1:69:ea:5a:
68:8a:99:2f:c1:5f:ff:95:8d:da:5e:9a:75:70:22:
3d:c6:20:31:88:27:d6:bc:41:21:cb:20:9b:3c:46:
66:ee:f1:db:d8:95:e5:ce:ce:43:e0:d9:a2:3c:85:
9b:e2:3d:6b:37:43:f5:b6:05:5f:f1:90:80:09:61:
80:55:81:c9:93:03:94:41:c9:5c:88:14:0e:24:e9:
b6:98:ab:0b:a9:be:52:48:88:23:7f:8e:8f:ea:2d:
f3:29:ee:93:74:5b:4b:50:d1:be:6e:07:1c:8d:9d:
1c:29:72:c3:25:c5:4b:92:49:e2:77:7e:7c:a9:7d:
61:1f:bb:63:df:4c:16:a4:92:4f:68:17:a0:82:d9:
9f:8b:a8:9b:5e:45:f9:e7:c4:9c:24:e4:62:43:b2:
c4:b9:db:dd:a3:2b:95:00:da:d2:6e:26:96:75:bb:
d2:4e:67:03:bb:62:89:c3:c8:5a:06:f4:2d:40:8d:
ec:6c:9d:19:b7:36:3d:a7:23:3c:8b:ae:2d:79:18:
8d:06:48:15:b1:ee:01:50:e7:24:89:1e:bb:f5:64:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:BC:61:03:D4:04:78:28:27:1B:06:E8:80:A5:80:3A:45:53:B5
X509v3 Authority Key Identifier:
keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:08:96:a4:99:52:5b:1d:91:fe:90:75:1a:d6:3b:10:cd:7c:
2e:2b:52:41:5b:d5:89:eb:84:6e:47:d5:9f:a0:ba:54:19:72:
c0:01:0f:cd:2f:d6:66:8c:50:b6:09:bf:79:bc:66:bc:41:bc:
2d:10:40:5b:47:34:54:48:00:8b:a0:12:e1:56:63:90:e2:1a:
34:a9:7b:55:dd:03:a9:79:f7:81:46:8c:2a:21:42:42:32:9d:
e2:6a:22:6f:e7:cb:f9:5b:eb:dd:f2:c5:2c:74:00:66:70:21:
8d:4c:23:f0:e5:43:72:88:0d:f2:17:db:9b:78:c7:39:47:df:
e4:76:3f:1a:f2:8e:31:5e:fe:25:e8:71:64:d2:dd:b2:02:ab:
15:66:3c:ae:fe:cc:8b:c7:27:03:91:d6:83:f0:3e:bb:bd:7a:
9f:4b:75:ce:e9:3f:e1:d4:b2:2c:8f:26:37:3a:0e:40:49:2f:
3c:a0:46:b8:88:a1:65:73:eb:59:84:80:6a:1b:d4:64:b3:16:
90:1b:62:3a:5a:9a:6f:54:86:f6:44:4a:2a:30:41:fc:1b:83:
2a:1e:87:68:f1:8c:c3:6f:4d:f4:67:21:62:0a:c1:e9:df:5d:
8f:96:4b:a1:70:2e:e3:dc:35:c1:f7:cc:95:c7:eb:c6:ca:be:
d2:4b:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:12 2025 by rpki-client