Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: PGQyeH9L7lNtuKZvHGaWuNlN0TxDoe3Uu6QalQmZd6I=
Subject key identifier: 75:3E:E5:2F:28:E7:E0:B8:E0:43:7F:53:61:B9:32:27:5C:8F:8E:DE
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 0199FDD937D189BE40DB5FE219C00DE969A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0DE8
Signing time: Sun 19 Oct 2025 19:01:35 +0000
Manifest this update: Sun 19 Oct 2025 19:01:35 +0000
Manifest next update: Mon 20 Oct 2025 19:01:35 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: LTrL3mcFlqXcbmlq/Gq3SgipdhzV9pjeYY2r/xff1fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:37:d1:89:be:40:db:5f:e2:19:c0:0d:e9:69:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Oct 19 19:01:35 2025 GMT
Not After : Oct 20 19:01:35 2025 GMT
Subject: CN=753ee52f28e7e0b8e0437f5361b932275c8f8ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:44:27:48:a3:07:d6:f8:13:7b:52:b6:3c:
14:35:70:92:8e:52:a3:55:f2:9e:d8:ea:b3:af:b2:
ef:7c:ec:43:f5:6d:29:30:6a:69:1c:5b:e7:07:74:
9d:58:7f:ec:83:ce:34:72:f0:c1:5f:dd:7f:d6:c0:
00:e2:a4:60:47:f0:cf:d5:39:02:09:f9:cb:45:20:
1b:eb:f7:98:c8:a1:85:8d:d9:2f:c0:db:1b:0b:c2:
4a:9d:05:bc:14:b2:1c:c1:1e:60:4d:89:53:64:45:
ce:fa:aa:53:9e:67:3d:ef:14:11:a1:33:f7:45:d5:
88:92:d6:4a:6e:21:75:dc:de:c6:ca:94:c2:ee:72:
a5:17:84:2c:58:d0:11:65:a0:37:84:a2:e5:87:80:
8c:2b:8a:83:40:5d:d8:04:20:78:4a:e4:cc:21:43:
7a:db:24:41:00:ba:ef:d2:42:fb:ee:70:32:38:f9:
88:5f:b1:79:41:d2:47:79:c5:51:2c:ff:33:19:3c:
fa:7d:c0:cb:65:59:9f:62:df:64:f6:47:87:e0:11:
50:d7:a3:e2:52:38:b3:04:fa:5c:33:c7:24:b1:6b:
12:ea:f8:f5:1f:43:00:43:2a:d0:c0:26:23:49:0a:
2d:c6:03:c8:db:4d:92:4b:85:78:41:bb:f7:c4:3e:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3E:E5:2F:28:E7:E0:B8:E0:43:7F:53:61:B9:32:27:5C:8F:8E:DE
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b5:63:43:ae:ae:b7:83:a5:1f:ee:61:27:98:e2:02:de:63:
74:3d:34:a0:50:f2:97:c9:f5:5c:bb:c4:22:16:46:cc:1c:33:
b4:1d:fc:5e:af:a6:7d:e9:f6:5d:7c:f8:75:66:de:2a:a0:d3:
bd:7c:56:49:67:66:7f:49:fe:ba:d3:49:07:8d:1f:9f:ff:89:
10:ae:4d:8e:7b:2f:b2:67:52:78:9c:bc:4f:4c:6c:5d:1e:c5:
cf:f4:e0:78:8b:bb:42:d5:72:d9:47:c4:ea:a0:b9:10:8b:b5:
96:ed:ed:1c:2d:b0:79:ca:9c:81:db:1d:43:c4:f2:cd:ce:7f:
26:e5:13:1a:3b:e3:cf:80:c2:f9:e2:bc:38:f5:8d:2b:43:58:
4d:6f:97:84:bf:c4:32:39:cf:dc:7a:b9:87:d6:6d:6f:47:2a:
0d:5d:5a:71:4d:6f:10:04:18:e5:d1:96:a9:72:83:9f:aa:ef:
96:8c:83:a3:a0:85:79:69:2b:d9:eb:9e:fd:16:18:51:f6:9d:
35:b9:ad:2a:d7:89:0e:8f:91:3e:f9:12:e7:91:fd:57:d9:ea:
0d:85:e0:c5:60:e5:2d:59:9a:26:80:65:fa:04:ce:b8:93:08:
07:00:79:81:a9:58:51:0a:bb:e3:b1:1f:4a:35:d5:40:78:33:
f0:64:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:02 2025 by rpki-client