Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
File: yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json)
Hash identifier: /Pm3h+I3jNLUyRPnXX2pEUYtj8pRAhIeVfYKytcv0Uk=
Subject key identifier: D3:A8:99:AE:F7:3C:9F:28:A7:74:BB:06:C2:C0:75:1B:C5:8B:FC:F4
Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Certificate issuer: /CN=c980d19c3bfcc4047156776f02a349898e46b90d
Certificate serial: 0199FFC865BD09719112ED97D908991AE3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
Manifest number: 09FF
Signing time: Mon 20 Oct 2025 04:02:27 +0000
Manifest this update: Mon 20 Oct 2025 04:02:27 +0000
Manifest next update: Tue 21 Oct 2025 04:02:27 +0000
Files and hashes: 1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: OVhqimc4RWTJUkocWeRT5YqzIKGmtMgmuiRyuaTluJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:65:bd:09:71:91:12:ed:97:d9:08:99:1a:e3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d
Validity
Not Before: Oct 20 04:02:27 2025 GMT
Not After : Oct 21 04:02:27 2025 GMT
Subject: CN=d3a899aef73c9f28a774bb06c2c0751bc58bfcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:d9:b0:d8:fb:0f:9e:c8:39:58:c5:49:87:
73:95:27:a5:88:5a:b3:4a:95:89:46:03:98:9a:60:
fd:86:23:0b:d7:51:02:7f:c0:5e:92:99:45:52:ee:
ed:0f:0f:9a:3d:c7:53:69:23:4f:03:c2:ba:73:dc:
0e:9c:1d:48:9a:13:0c:3b:cb:b5:ce:07:e7:e5:d1:
bd:13:19:fa:a8:86:72:c2:e1:21:a7:3b:e9:e4:90:
0e:6d:ee:28:3d:4b:f0:28:b1:ed:12:1d:f0:a7:30:
3b:26:31:90:2a:8d:49:9b:6b:a2:b5:9a:f0:df:fa:
bd:06:62:5e:dc:b3:dd:dd:3f:82:66:ba:b5:a1:7e:
ed:48:97:dd:58:c6:8d:a5:f3:01:94:7a:fe:6d:7b:
db:96:91:52:fd:1c:c3:18:9f:60:0b:4f:20:e5:e8:
73:51:a1:f1:e8:f1:f2:a9:51:63:1a:51:f2:ad:05:
d6:a9:9f:63:a1:0f:cd:93:c2:f6:d1:1b:df:7a:2f:
33:62:3a:69:b1:9a:ca:fc:f5:d2:10:15:b6:f9:78:
28:54:29:59:06:9d:f9:2e:7f:fc:7c:af:c4:6d:75:
2d:14:61:48:54:29:3e:85:dc:59:83:37:b0:46:56:
10:2a:4b:4c:27:77:c6:5c:c9:6c:63:b7:2a:9b:97:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:99:AE:F7:3C:9F:28:A7:74:BB:06:C2:C0:75:1B:C5:8B:FC:F4
X509v3 Authority Key Identifier:
keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:6e:26:b5:e0:4c:c1:bb:67:6e:38:44:5d:e8:f1:35:00:
0c:88:a3:b9:d2:5d:a1:f1:15:68:ab:ad:24:67:d7:af:74:d3:
5b:66:b6:59:f9:50:fb:06:aa:b1:1c:96:15:d7:af:3d:81:64:
e4:28:dc:36:52:59:25:ed:71:69:28:36:1b:99:5e:7a:14:0d:
8f:bb:84:cb:e4:36:6f:f4:fb:98:69:4b:1c:3b:35:85:fc:3a:
8c:c5:97:08:c3:23:fa:41:91:a2:87:42:ac:6a:85:aa:37:70:
21:5d:25:8f:cb:be:96:bd:77:36:c1:f5:44:31:97:18:25:64:
fa:30:67:04:48:73:72:20:49:f6:49:e1:e4:5c:aa:be:c1:eb:
4a:45:9b:ba:08:09:d8:0c:9c:b0:1e:a7:54:4a:37:03:37:dc:
17:6b:84:e4:29:50:27:43:98:84:43:8f:58:b9:49:e6:8e:8c:
2d:a1:bf:0e:03:18:65:e6:61:f3:56:73:02:17:5c:5e:26:02:
85:fb:86:dc:f8:4f:03:21:28:4a:b4:06:c6:77:61:0b:33:42:
71:74:bb:5c:87:c3:8c:fe:4a:d5:96:a0:76:cd:b7:60:71:5b:
06:8b:b3:9d:e0:f4:46:39:35:f1:9a:ff:e0:94:89:bc:12:aa:
12:84:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:45 2025 by rpki-client