Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File: yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier: 9aXRz/2udKpcSRjLaKtf0aVf2u8dJadkUyB8BoplOPg=
Subject key identifier: 28:22:F9:C3:47:D1:22:8B:73:DB:18:2F:24:AD:31:9A:1D:D4:E6:08
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 0199FCFD3050C5C97D8F2E6F602C57901C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number: 0679
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: tXkD2bfGPVOD+ZJNRW9lAnXZ1LLNiCvnM7haJSDJ70c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:30:50:c5:c9:7d:8f:2e:6f:60:2c:57:90:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=2822f9c347d1228b73db182f24ad319a1dd4e608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:07:db:c8:e0:ff:67:05:6b:e7:fe:14:e8:
2a:df:f2:06:7e:5e:82:ab:2c:7d:67:46:9e:7e:a9:
ab:ba:4d:db:a8:d6:63:0a:ad:ee:04:10:1d:43:08:
2a:b4:e2:e3:ce:ee:db:ee:77:3f:63:6c:c1:3d:7f:
f2:3f:e9:6e:c4:eb:b2:f6:49:bb:41:a6:cb:49:b6:
93:7d:5a:91:b1:74:c3:e5:14:51:33:cd:fc:be:29:
00:06:92:c9:14:0b:37:6b:1c:92:e2:63:c2:60:18:
c7:e4:9d:74:53:c0:73:ef:48:7f:ab:ed:dc:e0:4e:
39:f9:68:e2:f6:e9:46:70:02:dc:16:72:50:44:f0:
a6:3e:bc:21:c8:5a:9c:af:f4:c1:6c:5c:19:89:ea:
ee:58:c6:6a:fd:68:93:ae:e9:36:13:24:de:75:62:
97:fd:f7:18:24:14:b9:1a:4c:76:2e:3d:69:e9:2e:
d1:e6:9c:3b:23:67:f3:12:ae:1d:98:b5:c0:f7:04:
ce:1d:b4:c4:ac:58:b6:d0:0d:50:4c:a8:b8:17:de:
be:36:42:90:90:50:4e:03:ca:c2:89:22:e0:c5:23:
6c:b9:ce:ab:90:84:f4:95:3e:81:a9:79:eb:e5:c4:
75:b9:5c:05:04:0c:46:36:ef:f7:77:5c:f1:81:fc:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:F9:C3:47:D1:22:8B:73:DB:18:2F:24:AD:31:9A:1D:D4:E6:08
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:3e:77:10:b8:b9:9a:e4:e9:e6:b1:4a:7c:0c:07:d8:b4:
42:25:d6:d3:d0:10:57:72:3f:cb:74:8d:73:73:93:7d:67:89:
1d:86:10:59:69:1b:37:8a:0e:5b:8f:e4:4b:05:a5:27:16:5c:
0b:2c:46:f3:41:c4:6d:46:f1:48:8a:f8:5e:57:f8:a4:49:93:
55:ee:9a:33:2a:5f:d4:c3:86:d9:87:0e:63:63:c2:bc:11:26:
79:5d:57:01:b2:dd:0f:29:2f:c3:da:0a:01:2b:4e:d2:f4:e5:
a6:70:da:da:68:04:8b:58:90:68:42:ca:8f:7e:dd:00:a3:6d:
a0:df:af:0f:b1:44:f8:67:ba:b9:f9:85:80:0e:0a:17:51:04:
a0:07:14:81:f1:c9:53:de:67:84:82:66:37:64:0a:0a:56:aa:
b1:13:5a:0b:1b:8f:b5:6f:c0:bf:b9:65:b4:21:cc:92:9c:c8:
65:00:29:c0:80:a2:18:1b:0d:7a:1d:4d:d7:72:28:ee:dc:ca:
35:2a:09:36:ce:36:0f:10:12:9b:3e:b6:1f:33:1e:19:50:20:
ce:f4:a2:87:7b:36:8c:64:8d:2c:a4:89:8c:ea:65:6a:9d:c8:
9e:8b:50:5d:b5:49:98:1f:c5:5b:a0:dc:db:61:73:89:06:c2:
d8:4c:9c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/TBQxcl9jy5vYCxXkByAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2NlNGRiYmQwNGUwN2FjZTE5MzdmODBhMTVhZjczOTli
ODAzMGUwHhcNMjUxMDE5MTUwMTE1WhcNMjUxMDIwMTUwMTE1WjAzMTEwLwYDVQQD
EygyODIyZjljMzQ3ZDEyMjhiNzNkYjE4MmYyNGFkMzE5YTFkZDRlNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAIH28jg/2cFa+f+FOgq3/IGfl6C
qyx9Z0aefqmruk3bqNZjCq3uBBAdQwgqtOLjzu7b7nc/Y2zBPX/yP+luxOuy9km7
QabLSbaTfVqRsXTD5RRRM838vikABpLJFAs3axyS4mPCYBjH5J10U8Bz70h/q+3c
4E45+Wji9ulGcALcFnJQRPCmPrwhyFqcr/TBbFwZieruWMZq/WiTruk2EyTedWKX
/fcYJBS5Gkx2Lj1p6S7R5pw7I2fzEq4dmLXA9wTOHbTErFi20A1QTKi4F96+NkKQ
kFBOA8rCiSLgxSNsuc6rkIT0lT6BqXnr5cR1uVwFBAxGNu/3d1zxgfzaQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgi+cNH0SKLc9sYLyStMZod1OYIMB8GA1UdIwQY
MBaAFMo85Nu9BOB6zhk3+AoVr3OZuAMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp6azI3MEU0SHJPR1RmNENoV3ZjNW00QXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNWQ5YTMtYzQ1NC00YjdlLTgwMGQt
NjE3Y2QzZGYzOTViLzEveWp6azI3MEU0SHJPR1RmNENoV3ZjNW00QXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hNWQ5YTMtYzQ1NC00YjdlLTgwMGQtNjE3Y2QzZGYzOTVi
LzEveWp6azI3MEU0SHJPR1RmNENoV3ZjNW00QXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6k+dxC4
uZrk6eaxSnwMB9i0QiXW09AQV3I/y3SNc3OTfWeJHYYQWWkbN4oOW4/kSwWlJxZc
CyxG80HEbUbxSIr4Xlf4pEmTVe6aMypf1MOG2YcOY2PCvBEmeV1XAbLdDykvw9oK
AStO0vTlpnDa2mgEi1iQaELKj37dAKNtoN+vD7FE+Ge6ufmFgA4KF1EEoAcUgfHJ
U95nhIJmN2QKClaqsRNaCxuPtW/Av7lltCHMkpzIZQApwICiGBsNeh1N13Io7tzK
NSoJNs42DxASmz62HzMeGVAgzvSih3s2jGSNLKSJjOplap3InotQXbVJmB/FW6Dc
22FziQbC2EycFw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:48 2025 by rpki-client