Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: mCJwCRlXHYjpN/yGWa8F6XpKePxyPIUKaV5x170y0Z0=
Subject key identifier: 94:0C:60:A8:74:F4:59:81:2B:64:F4:79:5B:18:DF:82:39:71:1E:A9
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 0199FBEB31382806E756E6887C7910826722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0AA7
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: yG5Bg/8hYp8FkU2rmtzsnsiNipXiHPI3YTDziYFzqCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:31:38:28:06:e7:56:e6:88:7c:79:10:82:67:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=940c60a874f459812b64f4795b18df8239711ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d2:30:34:03:77:f1:30:62:3c:13:7a:1e:96:
20:fc:3a:f8:63:6b:51:a0:5f:61:de:80:c8:6d:8c:
2d:cb:e1:d6:03:f0:de:65:60:61:0d:5b:8f:be:1f:
58:f4:04:2a:40:a8:e5:2c:6f:6f:d6:13:90:19:15:
4f:98:60:46:9d:b2:81:48:4f:23:c8:9b:72:67:bc:
62:41:8a:36:0c:bc:98:b5:16:81:2f:cc:3c:0a:7d:
f9:5f:0e:2c:fa:61:76:9c:d1:73:e5:a4:6f:b3:2f:
1e:d0:95:59:41:03:34:34:71:75:dc:08:83:5d:33:
3e:34:29:40:48:2e:6b:5e:46:a5:8c:ce:69:3a:80:
06:11:8a:d3:32:c5:1d:16:97:80:a0:5d:72:78:10:
df:92:a6:38:83:d9:33:c4:68:98:65:13:f3:27:76:
39:d8:8b:9f:74:ac:bb:cf:f2:88:24:68:6c:cf:2e:
5c:9e:42:55:c4:68:ee:4c:35:3b:2d:d8:c2:88:4f:
8b:6c:d9:ea:a1:67:00:a7:b6:44:f5:98:fd:02:61:
01:54:e5:8f:bc:57:62:cb:1e:d5:28:45:aa:d3:4b:
72:8f:e9:57:01:c8:f6:d6:ee:3a:d2:75:21:6a:6f:
c5:ec:45:40:02:58:4d:65:53:fe:c9:53:e1:46:cb:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:60:A8:74:F4:59:81:2B:64:F4:79:5B:18:DF:82:39:71:1E:A9
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:72:23:06:bd:79:b5:cf:be:87:5b:d6:bb:ac:23:1f:5c:0b:
d1:e8:ca:62:a4:79:92:4e:df:dd:77:f0:bf:e3:e6:ec:46:1d:
b0:0c:eb:20:b7:68:7a:ce:2e:d6:0e:c4:1a:23:4a:d8:9a:08:
fe:b7:b2:3c:d7:1d:f6:51:07:0b:12:a8:17:2d:d1:cc:64:4a:
ab:d2:3e:3f:bc:26:c4:bd:65:09:95:74:e6:07:58:34:74:57:
65:8a:07:59:2a:62:20:22:e0:0c:13:bd:70:44:95:97:58:78:
37:87:1b:a1:63:86:2e:01:40:5d:ca:49:72:cb:64:7f:04:bb:
e4:da:6a:49:ef:47:9a:91:5f:93:ff:5e:55:d6:90:c6:4b:43:
75:b2:2b:2b:dc:b0:84:18:7f:49:af:ee:3e:e5:36:37:12:db:
f6:d6:6c:f2:00:db:77:16:9d:3b:3e:5c:44:b0:2d:37:0b:de:
7f:a0:09:60:68:1c:95:63:f6:5b:fa:bf:6d:c8:7c:be:7f:8b:
44:0e:21:7e:d7:8d:2e:92:bd:39:d4:0c:ef:23:54:d4:73:6d:
59:80:05:13:df:8c:35:af:f0:a3:13:68:13:e8:50:ca:00:95:
ac:0c:3e:5b:a4:d1:6b:f2:ce:38:77:bc:b3:07:d0:c7:85:9f:
7c:7d:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:43 2025 by rpki-client