Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
File: jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft (raw, json)
Hash identifier: ydzufn4tpMHUIsdwZhnQ7vq1MS200IlkqwnSTTRVtZQ=
Subject key identifier: 21:40:01:9B:CD:85:B7:D6:03:FE:CC:57:BD:19:01:62:B1:2F:AB:33
Authority key identifier: 8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
Certificate issuer: /CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Certificate serial: 0199FD34206551090C75CFD25B00C96BB6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
Manifest number: 060A
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl (hash: dyKydvYosTWe2mFfq97L6uXIjUW5j6p3pAypUbCVXyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:20:65:51:09:0c:75:cf:d2:5b:00:c9:6b:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=2140019bcd85b7d603fecc57bd190162b12fab33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:44:c7:23:a8:8e:d9:7a:77:93:1c:df:0b:
eb:90:37:89:a0:7e:de:83:d2:36:54:16:fb:b5:40:
d8:5d:60:2d:88:57:55:b0:33:58:3a:df:2a:fa:f3:
f7:b0:71:6e:93:1c:97:1e:36:22:c9:7d:56:2e:41:
de:79:2a:4f:43:26:34:dc:e3:c9:25:67:a1:30:08:
82:d0:2d:f7:ea:47:dc:90:c5:59:c7:1e:8b:44:b3:
65:55:f2:99:bf:5b:46:0a:36:fb:b8:96:9c:e7:5f:
52:e3:61:fc:02:f1:e8:fb:5a:31:20:bd:b0:04:05:
d6:bd:ca:5d:af:a6:44:70:1d:6c:f4:63:4e:7e:c2:
71:b5:ad:ec:5e:0a:21:4f:a5:ff:b4:14:19:6b:4c:
ad:83:62:e7:a1:f9:68:37:7a:43:d2:d0:35:ee:8e:
1d:8a:32:cc:a4:bd:47:de:15:5a:d9:b3:5f:a3:74:
47:b9:f2:fc:2d:e7:5b:60:36:8d:bc:43:6a:8d:19:
fd:ec:02:55:d3:67:93:29:1c:24:bf:a6:54:1b:6b:
7d:2d:8a:a2:e3:c6:34:68:16:07:bb:dd:dd:39:7c:
8c:5b:51:67:f0:5d:5a:4b:bc:9b:a4:23:c0:1e:8e:
1d:b5:4a:df:4c:09:2c:1f:67:92:49:f1:d1:d1:d7:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:01:9B:CD:85:B7:D6:03:FE:CC:57:BD:19:01:62:B1:2F:AB:33
X509v3 Authority Key Identifier:
keyid:8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c8:c7:fd:e6:e4:64:fe:e7:07:61:db:d3:21:e7:b4:89:e0:
ce:03:69:ee:27:8b:ed:65:85:90:aa:0f:52:1d:1a:c3:9f:3a:
60:cc:82:ab:e7:56:d6:d5:d1:46:78:6d:ee:ce:79:f8:37:6b:
be:66:8e:1e:ba:50:dd:4f:94:68:85:b1:a2:7d:e2:01:d9:24:
be:0e:74:1d:32:21:ab:2c:7e:0d:c4:81:97:71:03:c3:08:b3:
b7:4c:fd:cb:19:1a:35:41:e2:3f:da:be:a8:2d:e8:11:58:82:
b1:1a:3a:29:e6:80:7d:34:a4:4a:3e:ac:55:8c:15:cd:46:97:
ac:67:e7:07:36:3d:55:50:1e:89:4e:76:e6:32:c5:f3:1f:d0:
35:a1:ea:76:f7:68:b8:11:10:d9:d8:60:55:a0:d5:26:ef:17:
04:bc:7f:fb:c3:04:ca:da:78:29:c7:47:d7:d9:90:86:5f:07:
4e:d2:6f:55:f4:f1:bc:74:58:48:f1:36:61:da:0c:c9:30:26:
fa:34:d9:d5:3f:b1:0b:41:24:c6:5b:ac:33:9d:b5:17:0d:c4:
13:35:9a:02:dc:70:3b:49:85:a0:2a:08:70:52:5c:93:e4:68:
8f:5a:a8:cd:b5:0b:d8:90:3e:26:cc:eb:d5:62:1e:38:70:5e:
4e:09:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:30 2025 by rpki-client