Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
File: YDe79svKAic6peIbuIjj4exnZ98.mft (raw, json)
Hash identifier: 068bNXQujAXKxu+ELBW7042FcSV6+UE7H5KCjn10KnI=
Subject key identifier: 38:6D:0E:D2:8E:E2:D1:DB:10:B0:67:2F:32:CC:84:40:9B:25:91:24
Authority key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
Certificate issuer: /CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Certificate serial: 0199FBEBB965AC8943578E54D300EC17FF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
Manifest number: 0C03
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: YDe79svKAic6peIbuIjj4exnZ98.crl (hash: J0i/Y3rDP3Wu1m+6a5SjyU4mJNU1X7tMH4d1geIFyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b9:65:ac:89:43:57:8e:54:d3:00:ec:17:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=386d0ed28ee2d1db10b0672f32cc84409b259124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:53:d3:fa:e7:2f:91:72:f7:b6:f4:89:b4:
89:7c:9e:3f:25:ba:6f:3f:e6:65:12:4b:ac:b0:60:
4e:d4:98:bb:48:70:f0:f0:86:bc:57:98:9d:9a:ca:
ce:4a:e3:18:36:e4:50:13:6f:ea:3f:d0:af:b4:d7:
99:a5:79:1a:f5:f2:af:5f:36:f1:65:85:97:a9:84:
09:3c:da:8a:da:b4:04:59:69:5f:ee:9d:d7:d9:0e:
24:69:5c:1f:0a:37:49:5a:e4:26:a7:d2:14:e5:ea:
70:41:70:31:8a:d6:36:9e:13:c8:64:54:87:d3:1b:
89:ad:87:ac:1e:3d:e7:4c:dd:6d:c1:89:45:ca:40:
e8:7b:bd:15:58:3a:16:28:90:45:64:df:12:4c:61:
9d:b3:60:3f:6e:d8:e7:71:4b:b3:29:d6:2a:c2:50:
cf:c6:32:f2:6c:e9:ae:37:68:c3:c0:f8:d9:c2:a4:
0c:53:d7:4a:b6:86:41:d5:81:41:a8:86:d8:e6:37:
d1:2a:d1:fa:0a:9d:da:1b:13:0e:1b:e3:a8:0a:ce:
c3:9b:68:74:91:4e:d9:f7:1c:40:f1:fd:40:8a:a3:
13:02:9a:e0:a3:e5:f1:a7:19:4a:08:4a:39:d8:66:
aa:62:dc:db:2e:32:8c:65:99:60:fd:2e:c7:80:59:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:0E:D2:8E:E2:D1:DB:10:B0:67:2F:32:CC:84:40:9B:25:91:24
X509v3 Authority Key Identifier:
keyid:60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3e:e0:18:a9:aa:4d:1c:2b:5e:25:73:6b:94:51:19:f1:ab:
fc:a1:96:78:98:02:d2:69:ce:9c:e3:36:07:38:0c:e9:89:00:
8c:ce:83:c8:8f:87:26:e3:27:22:50:62:b9:11:d6:88:ae:48:
2c:94:ff:70:c0:a8:c6:9d:33:54:2d:4f:4f:06:da:87:06:90:
11:11:30:fb:ec:70:5a:c8:a6:13:d0:8f:18:95:28:05:ad:41:
2b:4c:23:fc:d0:88:ee:f1:b4:6b:bd:2a:f0:c2:74:95:4f:a2:
5d:43:2a:ec:80:80:87:b0:66:1a:37:a4:05:4f:df:dc:91:bb:
0b:16:57:cb:5d:58:d1:57:e4:18:51:1c:25:80:2a:8c:4f:b1:
27:d3:df:63:30:70:f1:c3:e2:d4:8a:cc:61:0d:90:29:df:b5:
63:1b:22:33:24:8a:b9:8b:6c:dd:39:b1:e2:b5:cb:ec:b2:3a:
24:ca:4d:7b:82:3a:7f:05:cb:74:ea:1e:ec:02:44:ac:ec:32:
d0:2a:88:16:c8:b1:a3:25:63:a1:a4:02:e8:41:90:ce:12:e7:
c8:fd:f0:c5:9b:4b:25:33:f0:de:eb:dc:a0:f9:27:29:ef:86:
2f:17:69:fa:84:ce:22:71:97:b6:32:0d:6b:c1:f6:e0:d5:86:
94:c4:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:45 2025 by rpki-client