Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: qrierO5TqdLBT8dzzJW4TY+iw6NUyd0JaQZ0Tpb4Skk=
Subject key identifier: 63:23:53:C8:04:B6:EF:0E:29:3C:07:06:01:75:A4:F5:15:AE:FB:82
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 0199FD3480FDDBE2F6404C1D3E2F01D776A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0D9B
Signing time: Sun 19 Oct 2025 16:01:40 +0000
Manifest this update: Sun 19 Oct 2025 16:01:40 +0000
Manifest next update: Mon 20 Oct 2025 16:01:40 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: 3mCCpxkB1OdmZ1xa6+r4hC1uSf4U5GwhWiBKlhHoIKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:80:fd:db:e2:f6:40:4c:1d:3e:2f:01:d7:76:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: Oct 19 16:01:40 2025 GMT
Not After : Oct 20 16:01:40 2025 GMT
Subject: CN=632353c804b6ef0e293c07060175a4f515aefb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:7f:0c:52:b6:5a:ee:1d:bf:9c:1a:51:0e:
8f:ed:9b:9c:0c:0f:e0:79:d5:3f:3d:5b:b3:1d:53:
9c:1d:5e:21:88:db:b7:5d:30:ed:01:0c:fd:d0:aa:
d5:0b:a7:4c:f5:8a:a4:ba:63:60:c5:b5:b2:40:23:
88:8d:90:4e:15:fa:85:e2:26:96:71:70:71:df:20:
22:6f:80:d3:54:74:56:cd:c1:4b:e6:30:cb:59:fd:
e7:dd:fc:5a:fc:f7:a6:92:d8:af:bf:08:ca:88:d9:
19:5a:92:04:87:d4:15:fd:2e:3e:62:0b:f5:83:f8:
9e:11:f9:3e:bd:81:94:6a:45:43:c7:52:22:88:00:
57:0f:37:47:47:d2:33:0c:c7:09:9f:8c:64:d4:6d:
92:07:83:84:43:20:98:57:00:2e:3f:33:59:3e:6a:
42:4b:b7:d7:94:e7:db:c7:37:dc:a1:4f:cb:d2:e2:
91:fb:b3:1a:c9:0e:1e:27:47:94:24:1f:91:af:31:
1c:6b:10:a7:03:93:be:bf:03:b9:e0:a4:08:b9:0f:
eb:8e:19:40:25:57:64:9c:93:30:0e:f3:37:c6:65:
9d:0e:89:cb:30:f0:5b:0f:1e:74:19:cf:4e:5b:5d:
44:63:f2:9d:1e:93:bf:97:54:bc:41:8e:3a:c8:4f:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:23:53:C8:04:B6:EF:0E:29:3C:07:06:01:75:A4:F5:15:AE:FB:82
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8e:d8:ec:6a:9a:72:ca:69:7f:d3:d2:fe:ec:21:62:47:86:
53:4c:e5:ac:dd:08:d2:8e:02:50:cb:2b:cb:a1:17:60:6b:fc:
cb:a1:bc:45:49:29:9b:ce:70:bb:8b:21:67:1d:eb:2c:05:0b:
73:a9:d4:49:75:8b:34:7c:5f:91:93:63:ae:81:0a:27:bb:52:
4c:4e:85:b4:32:b7:04:a1:96:17:50:2b:1b:31:b9:54:9f:71:
d4:8e:88:75:f6:ea:36:4a:32:18:1c:bd:80:81:f3:7d:b6:96:
75:d1:b0:e5:d1:c6:d8:c9:68:85:fb:98:e6:07:47:36:bf:66:
87:c1:e8:68:bf:23:90:bb:e0:9f:31:0f:3d:80:e3:4e:5c:e2:
d0:9c:78:ba:2b:30:ff:6f:2c:2d:45:4f:7b:32:b1:5b:23:fe:
30:d1:f6:3a:77:85:13:82:8a:fd:0c:94:b9:3a:dd:dd:59:5e:
b2:a6:66:17:fe:aa:d5:03:2a:60:d3:33:22:c5:4a:7b:80:28:
86:2b:96:94:ff:ac:88:27:b1:84:45:96:1c:8d:03:70:c9:76:
e5:b3:6c:eb:56:11:80:25:37:d4:f9:31:ec:4d:af:98:22:ba:
ac:24:b8:d1:a5:89:8f:05:df:5f:49:c5:5f:2a:e3:d4:96:63:
cc:6a:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:01 2025 by rpki-client