Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
File: Yv8lPFoTQ6JWma4I51dnrya52-U.mft (raw, json)
Hash identifier: EVj4deXhA+yvNemacCRiSD94hJOkS4XJl0OGtkOePlo=
Subject key identifier: 2D:6E:3E:AB:D0:CA:81:9F:31:6B:E6:55:3E:C9:33:CE:5D:97:0F:96
Authority key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Certificate issuer: /CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Certificate serial: 0199FD3412CC046568E7C47195C9D1804D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: Yv8lPFoTQ6JWma4I51dnrya52-U.crl (hash: nMv721oJv/yVYUkU5cEJJ+y/tzb/RMSfGxfO6NP25Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:12:cc:04:65:68:e7:c4:71:95:c9:d1:80:4d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=2d6e3eabd0ca819f316be6553ec933ce5d970f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:78:16:58:fc:8f:a2:ae:b0:2f:39:b3:a1:
11:15:5a:26:34:ba:e3:fa:06:54:59:86:c4:2c:b3:
94:ad:17:8b:ba:0f:02:40:78:e1:e1:4e:ac:38:69:
e4:9d:ef:c1:09:83:07:8a:f7:69:1e:f4:29:cb:f2:
80:05:7d:79:28:8e:a2:b2:c0:f2:6a:12:6b:73:99:
6e:7c:b3:89:e2:41:37:73:30:47:71:3f:f1:65:a5:
c5:fc:18:24:97:b5:dc:c4:60:b4:8d:93:09:83:2c:
67:d3:a0:ff:e8:5f:07:22:94:2e:15:97:47:e5:9c:
8c:36:75:82:96:00:4e:40:88:4a:95:35:af:98:43:
cf:a3:67:fe:4c:37:d1:61:73:74:9e:d3:1a:ff:50:
36:cd:a9:d7:a5:af:db:d9:de:37:78:5c:1a:7a:6d:
3c:2f:a4:ce:df:02:3a:08:8e:b9:6a:b9:bb:e3:70:
39:c8:db:70:1a:bc:f4:fe:9c:13:bb:d0:39:e0:d0:
de:50:ef:84:20:25:e8:c5:9a:de:ef:b5:3c:ff:ab:
c8:9f:71:1d:e8:97:61:fd:f5:ae:6d:10:41:95:4e:
b8:43:d3:9e:3a:c2:73:7d:88:7f:b9:b9:c3:be:e1:
a6:d0:d6:8d:2c:3f:70:ba:a7:9a:70:9b:40:8e:32:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:3E:AB:D0:CA:81:9F:31:6B:E6:55:3E:C9:33:CE:5D:97:0F:96
X509v3 Authority Key Identifier:
keyid:62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a2:7c:20:4b:cc:79:ac:8b:cb:47:c0:79:3f:8d:18:97:35:
30:51:84:db:79:91:1f:b1:56:29:7f:35:21:a6:9d:98:00:e9:
b9:a9:50:a4:60:53:9f:f0:54:7d:a8:ea:07:cb:ca:fd:b2:ee:
44:a1:f0:d7:ed:b9:46:8f:13:aa:e0:0a:72:da:ae:35:b2:e0:
f6:f0:0d:1b:a6:8e:d3:9f:e4:d0:11:b4:c7:9d:ad:85:1c:65:
22:be:82:50:dd:b0:63:e3:95:6b:fa:b2:ec:bb:4c:8d:70:f2:
78:ed:0a:69:bd:ea:67:39:a3:57:5b:dc:1b:e8:94:cc:35:da:
e2:85:a7:f1:2e:3e:7e:7a:f0:67:c9:bf:c5:da:27:6b:58:a8:
e5:3a:6b:85:bf:cf:a2:b1:e6:87:1c:c9:da:6d:eb:9e:0b:c1:
33:65:32:d7:14:76:a9:c5:66:0b:40:ad:5d:f5:39:68:7b:0f:
bd:75:ee:7d:64:31:33:91:71:97:dd:65:e9:a9:7b:70:e3:f0:
2d:5f:e8:4c:f3:b8:c4:0b:d7:16:f4:d6:2f:dc:09:88:af:ad:
48:60:be:67:36:f6:8e:4d:34:32:48:4b:7e:e8:36:48:75:ad:
8e:1e:ae:56:59:48:81:1e:df:00:23:46:6c:57:d8:d3:93:78:
05:8d:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:58 2025 by rpki-client