Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
File: ys4LZXV7SJmVtfwzShRV5KNfBks.mft (raw, json)
Hash identifier: UriN4tIXpAo8IzWVpNYC5PcTMypjpSUleVrz7CFSR6E=
Subject key identifier: 49:7F:C6:DA:F1:8E:83:60:3E:CC:78:03:F0:D9:EC:57:B7:84:5A:E1
Authority key identifier: CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
Certificate issuer: /CN=cace0b65757b489995b5fc334a1455e4a35f064b
Certificate serial: 0199FB7C9CC4BF753D90D9D739D0AB14F06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
Manifest number: 0149
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: ys4LZXV7SJmVtfwzShRV5KNfBks.crl (hash: d5dHBgAgEOCvodqMjEyQKu7tdON/75ngArXBbzaBQyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9c:c4:bf:75:3d:90:d9:d7:39:d0:ab:14:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cace0b65757b489995b5fc334a1455e4a35f064b
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=497fc6daf18e83603ecc7803f0d9ec57b7845ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:da:33:50:41:4e:11:b7:22:e8:2f:4f:a3:
fc:6a:1e:21:ca:a6:08:f6:2f:b9:88:22:6c:63:4b:
51:f5:1a:11:12:06:7b:ac:94:e3:a2:78:6a:79:4e:
b7:0e:40:03:6b:0e:e3:36:6b:b3:13:20:98:33:61:
40:10:5e:83:20:85:5c:88:28:b6:ae:ba:3b:dc:4e:
93:e0:0b:eb:41:da:b3:fb:dd:d2:47:88:6e:6f:d2:
03:2b:bf:c6:9c:ff:06:12:de:42:2c:cb:9d:16:1b:
fc:5f:8a:9e:1f:e5:eb:eb:c7:be:d7:a9:80:57:6f:
2c:e2:2c:91:32:f3:58:b6:f1:15:48:e7:39:6b:4a:
95:02:8f:cb:7c:9e:5d:1d:9b:bb:41:8c:44:5c:cc:
92:84:cc:65:db:7e:1d:77:a8:0d:5a:bb:54:1a:db:
a1:0e:7d:10:96:0b:b4:eb:2b:a2:2a:9f:28:e0:d0:
ae:c6:22:bc:30:52:8e:66:13:2c:55:c4:94:c0:72:
0d:eb:01:2f:62:74:96:41:15:e0:ee:f0:f0:d1:a3:
b4:38:92:2f:ec:b8:4b:75:1f:27:4d:1c:61:1e:1b:
f2:35:b3:88:96:a3:70:e3:76:4f:80:69:e7:71:77:
a2:6e:ef:ce:cb:08:f3:1b:a2:98:ab:d1:9d:03:5d:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:C6:DA:F1:8E:83:60:3E:CC:78:03:F0:D9:EC:57:B7:84:5A:E1
X509v3 Authority Key Identifier:
keyid:CA:CE:0B:65:75:7B:48:99:95:B5:FC:33:4A:14:55:E4:A3:5F:06:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ys4LZXV7SJmVtfwzShRV5KNfBks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/ys4LZXV7SJmVtfwzShRV5KNfBks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:61:19:e9:0f:a3:b8:1c:76:dc:dc:7b:8d:53:99:e1:fa:
2c:25:b2:09:38:34:38:29:6f:8a:b6:77:c0:b3:f4:14:b4:11:
b9:eb:b6:2f:ab:9d:fa:10:2b:fc:e1:1e:f7:2e:8f:85:8e:09:
92:98:9c:1f:1d:05:1d:50:fa:aa:95:eb:a6:ca:55:7c:dc:75:
a0:03:b3:12:3e:a8:e1:f4:fc:43:34:ee:b1:ec:65:99:dd:04:
4f:db:e2:a5:5a:f3:7a:6e:86:1c:56:ca:7c:69:47:6a:c7:97:
e6:31:09:5a:91:1a:cf:9a:d7:b9:09:cd:94:4d:87:6e:87:aa:
aa:59:90:35:ab:ff:83:88:30:46:4b:8e:6d:26:3b:dc:ae:82:
50:e0:48:a6:c7:45:c9:3c:41:3e:71:f4:d8:ed:a2:b7:08:fa:
10:1c:aa:b1:14:14:4c:78:2f:47:1d:06:a9:76:50:32:8c:d7:
de:5b:00:37:fa:f2:7c:c1:63:76:f3:f1:f2:56:89:a0:37:0b:
aa:d4:97:11:9c:e9:de:7d:03:da:21:09:ee:af:4c:f4:85:00:
78:cf:41:f7:fa:90:ff:c2:92:71:e1:76:d0:e3:7d:b2:5f:3a:
ac:1d:71:88:1e:99:f1:da:a7:6d:df:df:4d:3c:1b:cd:c3:b8:
48:ef:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:44 2025 by rpki-client