Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: lkG8kH6+hJKQW369YMlJcZroxsMqzwuy4N1DKp3pkMc=
Subject key identifier: 2E:3B:67:51:9F:5A:BC:A8:FD:18:47:40:BA:3A:50:4D:0D:96:64:A5
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 0199FB4583CBD672492DB4E6D59E294F992D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 0BE6
Signing time: Sun 19 Oct 2025 07:01:00 +0000
Manifest this update: Sun 19 Oct 2025 07:01:00 +0000
Manifest next update: Mon 20 Oct 2025 07:01:00 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: PA3Uc1QLxeeZRaQvi6itQwijhhARqWjdfjEnRwZIV9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:83:cb:d6:72:49:2d:b4:e6:d5:9e:29:4f:99:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Oct 19 07:01:00 2025 GMT
Not After : Oct 20 07:01:00 2025 GMT
Subject: CN=2e3b67519f5abca8fd184740ba3a504d0d9664a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:9b:3c:06:82:b4:30:7f:64:82:c4:91:8b:
50:f2:b4:30:76:64:63:f7:87:f0:49:36:09:45:e2:
22:48:6b:c9:cf:60:32:bb:e4:f7:ba:c9:a4:4d:fa:
84:a3:f6:80:f7:24:b6:be:dc:b3:fc:3c:11:15:bb:
3b:88:5a:5c:32:8e:ff:a8:5b:d2:89:8a:44:06:bb:
49:47:9b:b1:bd:6c:27:39:8e:f9:9c:f8:30:d2:c4:
1a:42:c2:b5:31:4c:7b:2c:64:ed:15:38:20:56:fd:
1f:b9:5e:e3:0c:4d:79:4a:af:ee:99:5f:ba:5b:4c:
59:ec:9d:e7:92:36:c6:be:c5:cc:35:c3:94:82:9d:
ac:cd:f6:a4:c1:b8:3d:18:23:f3:86:45:8c:87:b3:
98:9d:4a:38:63:c1:64:e9:9c:3b:c5:e3:c9:71:4c:
8b:12:99:69:84:90:76:d5:2b:04:74:15:3a:61:63:
71:d2:3a:18:ee:ad:1c:4b:e6:9f:d8:03:b6:b2:9f:
33:ab:18:19:d5:29:bb:b0:04:8b:3f:8a:8b:86:4e:
b5:1a:b9:31:d3:6e:ce:a3:04:e3:cf:a6:03:63:a0:
d8:fe:16:f5:7e:8a:bb:de:09:75:9d:4b:4a:a6:ab:
02:16:b8:ad:12:e0:9c:02:e1:32:32:ec:04:4e:45:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3B:67:51:9F:5A:BC:A8:FD:18:47:40:BA:3A:50:4D:0D:96:64:A5
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:eb:b6:aa:f1:77:36:2f:9b:7d:d5:1a:0b:64:af:08:e7:8a:
74:bc:6e:13:42:c7:bb:cd:58:16:37:53:4b:6d:fc:ec:98:5a:
37:7d:15:c8:37:34:9a:5f:69:f0:57:e9:d3:7b:66:b7:cc:bf:
ae:3d:f6:e3:81:aa:74:94:df:23:2b:8b:8c:b0:04:c3:dd:0a:
6b:7a:a0:59:bd:72:aa:38:6e:b2:54:11:df:f1:e6:f4:4a:e0:
dc:e0:2a:86:dd:22:b2:a3:5e:f4:1e:da:09:40:db:b7:e6:d0:
53:a2:37:a8:ea:ed:e2:8d:a6:4a:38:53:7f:de:2f:b1:e8:ef:
22:78:d6:01:b5:8f:96:94:ab:95:05:c0:86:7b:cf:ea:77:6e:
53:79:fe:26:5e:b8:65:b4:03:d3:49:3f:fa:45:1a:00:6c:36:
46:4c:04:1e:17:f6:f6:8d:70:30:e8:4f:1e:15:89:83:15:f0:
f2:e6:c1:a4:84:f3:ee:58:56:dc:9a:66:c2:af:e9:17:af:d3:
40:23:1e:a9:47:80:9b:51:98:85:11:cc:81:56:14:3c:f7:90:
9a:fe:7c:3f:62:89:7e:ef:43:24:40:46:88:79:d8:e8:ec:85:
d5:66:cd:8c:cd:8b:0d:f2:ee:30:82:fb:6c:39:d6:25:59:3f:
49:54:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client