Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: dYP/ySfkuCFDh30SUhU0fqx5EVnuIWB4Rdsb7ZVRqi0=
Subject key identifier: 6E:AC:22:B7:4A:15:28:93:00:4A:17:55:52:0C:B6:EE:79:B4:4F:C5
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 0199FDD8C0C7C12E1B138E41A57177DBEDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0C67
Signing time: Sun 19 Oct 2025 19:01:04 +0000
Manifest this update: Sun 19 Oct 2025 19:01:04 +0000
Manifest next update: Mon 20 Oct 2025 19:01:04 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: k1ETki9Jmc/sZUaDXMgDxVSRZj1syhNxljyZXWbZUBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c0:c7:c1:2e:1b:13:8e:41:a5:71:77:db:ed:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Oct 19 19:01:04 2025 GMT
Not After : Oct 20 19:01:04 2025 GMT
Subject: CN=6eac22b74a152893004a1755520cb6ee79b44fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:63:1a:26:bd:49:8a:b7:ad:2f:bc:0b:54:
6c:87:ff:41:f0:9e:07:66:ec:32:33:68:33:f9:29:
af:7b:72:4a:7f:87:22:45:e3:a9:31:ad:76:d1:a6:
ff:9e:1c:ac:1d:80:67:5b:bf:2f:a1:09:72:3d:b3:
30:a4:ab:dc:69:42:3c:2b:7d:8f:62:c1:41:6b:f5:
23:28:2f:69:92:8a:cc:00:d9:8b:46:38:07:27:61:
52:d2:2b:de:70:ae:fa:9b:e1:59:48:bf:3e:8d:dd:
fa:e1:2b:54:d3:18:2c:7a:a0:fb:2d:d5:ff:44:2e:
8b:72:b7:e2:d7:04:4e:d9:7a:78:9a:c6:37:16:9c:
b2:4a:a0:5f:be:a3:b9:d8:80:58:ba:df:82:be:20:
1a:fb:42:b9:05:fb:2e:0c:c2:8b:39:4b:6b:2f:f7:
d9:bf:3d:a7:12:47:b6:18:f9:5e:e3:38:63:37:47:
e3:c3:a6:a0:ce:10:ac:ae:ed:d8:57:b8:42:25:3a:
8f:02:5e:aa:4e:be:c2:d9:9e:b5:ad:91:3d:d4:ff:
27:d2:1e:aa:d4:b6:03:1b:ce:a5:40:a6:06:2c:55:
39:21:23:ad:fd:f7:38:3c:d0:21:2a:79:94:b5:54:
fb:11:e1:db:f8:e9:1c:8a:7d:f4:c8:ec:20:83:7b:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AC:22:B7:4A:15:28:93:00:4A:17:55:52:0C:B6:EE:79:B4:4F:C5
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:05:a0:1b:12:f5:07:11:a7:a7:cb:22:5f:5b:d4:c1:b3:6c:
4e:49:ec:71:13:64:1a:40:62:e2:9c:90:49:62:f7:88:c2:71:
b2:e3:1b:c7:55:aa:b1:e9:b1:d2:00:6a:6b:03:78:bf:c2:30:
3e:5e:f9:93:0f:c3:8f:91:fb:26:ea:6c:3b:29:24:fc:f3:db:
d9:16:6c:25:41:b4:84:2d:ab:31:f7:21:fc:8b:33:ac:00:55:
82:b4:ac:bf:e3:76:f8:6e:31:bc:20:39:cd:31:a2:d6:79:28:
d1:22:2a:ba:23:3d:9f:53:0d:52:b5:b2:85:aa:7c:7e:a7:b9:
d6:ed:d1:b5:24:2a:73:1a:bd:5a:d1:d9:d4:3f:e8:ed:bb:53:
3b:a9:38:9d:8e:df:b7:93:65:0e:f3:1a:8f:de:eb:5d:59:48:
58:8e:a7:c4:ea:8d:fa:ef:f5:2e:a0:67:8a:f8:44:1b:f5:d5:
48:3b:43:46:b5:47:3f:ff:0a:5a:62:cc:59:54:85:66:91:e9:
0c:5c:1e:b5:da:e3:7c:db:b3:c0:77:b1:86:a4:a3:6c:8b:41:
ca:23:95:f1:82:6f:82:6d:d0:48:a1:ff:8f:c7:6f:e2:09:37:
c5:93:c5:d9:11:d1:4f:6f:25:42:b8:d8:f4:7a:2b:10:69:10:
a2:8a:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:09 2025 by rpki-client