Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: Pzw27foujR7FX4Qipk0cRd7zAGBCDEUrXMqybpDxEmM=
Subject key identifier: 05:E0:EA:67:B1:03:C6:3E:60:67:51:B0:CA:6A:FC:C6:72:D4:DC:7C
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 0199FBEA8B09D3D4F51B29DD0D018DEE252D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 135F
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: PSTATA2n+jxhBCLTF2f25bCVYBzQF7JjnO5HGveKkyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8b:09:d3:d4:f5:1b:29:dd:0d:01:8d:ee:25:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=05e0ea67b103c63e606751b0ca6afcc672d4dc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:81:35:db:85:e7:bf:f1:45:23:24:b8:19:b9:
a0:1c:8e:50:1c:cb:c2:7c:d5:79:09:87:cc:55:7e:
96:2d:84:14:ee:49:5e:b4:c4:96:6e:76:bf:d6:ec:
25:94:e0:86:b7:d8:41:e8:f9:96:b0:fb:22:5e:42:
80:d1:f0:07:29:3b:cc:3a:43:17:37:05:80:9f:e0:
85:fe:01:ec:0b:78:98:7f:48:03:01:28:15:a4:da:
a6:55:7b:4e:41:57:60:2b:08:8b:c7:d4:ba:76:0e:
2d:c0:cf:bd:ad:b4:bd:8b:35:d3:8a:2c:04:82:50:
03:37:ec:2a:df:12:53:42:0c:30:d3:25:61:c2:d4:
70:b0:84:12:00:ee:2f:bc:fa:a5:10:8b:66:50:e9:
71:69:fa:ff:00:8c:88:76:0c:a7:6c:3b:33:32:9f:
e4:6c:cc:f6:f8:a8:06:37:94:1d:3c:25:7d:fe:67:
03:3a:dc:68:9f:e0:b9:50:56:7d:0d:1d:e9:c0:26:
6c:57:f4:d0:69:27:0c:d7:c3:0f:13:36:87:20:48:
bc:f2:65:b1:4c:e1:46:0e:3b:a3:73:04:ce:fa:45:
86:55:71:02:02:cc:21:d1:cb:9b:cb:34:24:87:ec:
34:0d:dd:45:d9:94:82:48:72:98:aa:ce:1f:de:4b:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:EA:67:B1:03:C6:3E:60:67:51:B0:CA:6A:FC:C6:72:D4:DC:7C
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:92:ce:54:b7:3d:7b:18:98:d4:c8:44:2a:9f:7d:04:15:
e7:76:93:ca:10:e8:68:46:bb:7d:81:c8:e6:84:5d:4f:ae:67:
ae:07:d4:98:17:06:54:d2:9c:5c:40:da:c2:62:ca:e6:67:6b:
b6:e0:b9:69:14:49:ad:69:61:89:67:db:4a:a7:c4:9f:5e:bf:
1f:35:11:39:ff:20:a2:aa:00:e8:b4:a8:21:07:ce:8c:c6:5f:
82:4f:1a:41:f8:98:3a:9b:20:64:01:a3:44:6b:a4:0c:a2:b2:
1a:e4:cf:91:bb:ac:86:b4:c5:f7:ce:3e:56:c0:c4:42:c4:27:
31:e1:90:c8:21:5e:a2:a3:89:dc:64:da:80:f3:06:0d:54:ba:
07:03:25:8c:eb:1a:26:31:f7:7a:96:3e:b0:fc:b1:fe:97:99:
69:75:54:8a:43:4a:b6:a1:37:f1:1c:b6:d0:63:a7:0a:4a:c4:
25:b3:10:b0:32:1c:41:64:2e:22:6f:03:54:cb:2d:14:d6:ae:
ee:f6:cc:64:96:ca:d9:20:a8:7a:35:91:86:cb:a2:01:4e:c4:
54:2b:b1:44:86:aa:53:69:a7:c5:60:2c:67:a0:a5:7a:4b:b4:
f6:a2:42:55:af:5c:8a:8d:2e:c8:fe:54:1c:05:a8:c2:a0:36:
5c:31:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:13 2025 by rpki-client