Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File: Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier: f7gQPiSXLkP1uszD5zt2HURzsG5cYeslC44FmXlSHOo=
Subject key identifier: D6:9A:33:12:E0:AB:F7:22:B5:CE:54:22:C9:FD:FA:84:14:B9:94:C6
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer: /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial: 0199FF22BC1419553F16E0EDE60B9F84F640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number: 0CE1
Signing time: Mon 20 Oct 2025 01:01:30 +0000
Manifest this update: Mon 20 Oct 2025 01:01:30 +0000
Manifest next update: Tue 21 Oct 2025 01:01:30 +0000
Files and hashes: 1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: IT/cxcFU+5CFbaQ0TDSxMSmcABhM+Zagwt1EHYDjyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:bc:14:19:55:3f:16:e0:ed:e6:0b:9f:84:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Validity
Not Before: Oct 20 01:01:30 2025 GMT
Not After : Oct 21 01:01:30 2025 GMT
Subject: CN=d69a3312e0abf722b5ce5422c9fdfa8414b994c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:d1:ce:ac:43:e0:ee:34:b9:87:42:43:00:
fd:d7:7c:dc:ab:14:50:d9:6c:5e:ff:d6:fc:ca:4d:
8c:ff:34:3e:94:c0:57:ee:8e:05:8b:3e:8d:0a:c8:
ac:8b:cc:db:15:43:19:c3:ce:2a:33:72:b4:0f:f1:
13:4a:d2:8f:86:90:eb:46:da:75:eb:21:96:8f:52:
8c:61:71:72:cd:2b:57:76:a1:4b:e0:7e:de:66:01:
85:ca:97:77:28:3c:a3:a1:aa:8c:87:24:81:3e:37:
9e:03:1c:2f:45:6d:16:3c:46:68:5f:44:ba:6c:63:
be:a7:29:f8:8b:08:7c:64:bb:67:7e:75:35:89:5a:
f7:7b:fa:0d:17:43:51:d3:27:dd:18:ad:d3:e3:4c:
23:6f:e6:8b:38:b7:fe:41:da:03:8e:5b:ec:1e:63:
eb:b3:4d:e4:35:af:a5:dc:1f:c7:21:28:82:38:14:
25:57:42:7f:a1:0f:51:e2:87:0f:63:84:ac:84:88:
a6:5c:58:2b:f8:9a:bd:b6:c6:96:38:79:36:d2:a0:
0a:3d:fd:21:6a:8a:b4:e9:ef:ff:06:8d:38:77:65:
d0:89:8b:83:66:29:aa:45:3f:b8:e1:d2:b5:4d:03:
d1:75:a4:2e:18:c5:6c:d4:7a:e6:9c:3c:ef:00:5f:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:33:12:E0:AB:F7:22:B5:CE:54:22:C9:FD:FA:84:14:B9:94:C6
X509v3 Authority Key Identifier:
keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8e:24:f4:f1:e5:b3:b4:08:54:b0:28:ff:24:34:55:d7:27:
0a:02:61:1e:d5:cd:1e:19:c6:36:25:82:af:04:c1:2e:04:41:
a1:7e:15:c9:fe:eb:4b:0c:4d:9a:09:39:6c:95:fc:5e:07:40:
35:33:f1:e3:d8:38:90:07:8c:ab:70:0f:df:60:3d:3e:e7:c0:
6b:40:3a:3a:73:d7:a3:49:16:42:83:da:14:bc:b9:b0:57:70:
b3:46:99:2a:d2:fc:ce:cc:a1:50:f7:04:99:94:5d:a7:c9:9c:
80:b0:17:0d:5f:04:bf:6d:0a:e1:44:d9:e5:71:61:dd:25:c8:
da:0b:43:20:93:92:79:cc:a9:58:33:9c:c8:1c:3e:35:6d:11:
5f:49:dc:39:0e:31:de:73:26:05:1a:40:45:51:c0:96:95:42:
62:12:f4:00:eb:08:6a:52:dc:00:f2:07:f9:93:ab:68:b1:bf:
35:64:8f:cb:26:c5:0d:8a:11:6c:49:cf:a9:ee:c7:0f:35:15:
8c:e9:5c:db:f0:32:e1:3e:85:bf:40:25:e8:8b:62:4a:ac:0c:
85:4d:32:d7:87:72:06:c0:44:0e:52:cf:06:b3:e3:23:a9:c0:
7c:a5:f8:e6:9a:4f:27:08:35:e8:c8:66:e7:6f:cd:54:5e:d9:
aa:00:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:48 2025 by rpki-client