
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: x8orRzfTQjXelzPqU1g8sIqJwzoX8rxBnA3Whocsy68=
Subject key identifier: 8B:B6:75:9F:87:B0:D6:79:9D:EE:B1:7C:BD:B8:0A:90:50:BA:BC:D3
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 0199FBEB443270D2CF297441A082970D55B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: yfmhCzI1XotaxIZVxl0BcXrSS4KI06dq6yWd27UDu+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:44:32:70:d2:cf:29:74:41:a0:82:97:0d:55:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=8bb6759f87b0d6799deeb17cbdb80a9050babcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:72:d7:68:d7:4f:86:ec:13:09:48:64:6a:
1c:36:d8:df:2e:19:a2:2c:4a:6c:98:6a:b6:5f:55:
cb:b9:d9:a3:22:45:9c:95:9c:51:31:38:af:67:7b:
9b:db:dc:46:f5:b6:2b:0d:3b:b4:f9:39:bc:23:90:
12:e2:bd:94:27:a5:78:fb:2e:f4:54:be:a1:c4:0e:
36:a2:f5:16:01:93:cf:c1:88:f2:44:98:d5:db:c8:
32:9d:bf:45:a0:a7:13:20:83:5f:78:93:2f:1e:99:
c5:fa:8b:43:3c:25:35:63:8c:e1:47:c7:96:57:85:
13:9a:a5:cb:73:97:48:a5:e4:25:75:fc:32:66:d5:
9d:78:78:1c:26:43:10:eb:7c:a1:e7:f7:e2:40:d0:
9f:58:f7:34:d0:4b:87:cb:22:4e:5a:3a:3b:28:be:
95:9f:a0:54:e3:aa:ef:3b:b0:e6:74:94:4d:2a:be:
1a:e7:92:16:d9:37:79:4e:0a:5f:5d:6b:b5:08:6a:
ab:66:c1:bc:52:c1:a1:13:79:2e:11:70:96:22:3e:
df:03:80:0d:61:91:cf:5a:b1:51:f9:d4:3d:10:e9:
67:0d:fc:ce:70:c5:a0:1b:a2:1b:22:35:9d:68:b9:
0b:19:02:ee:53:ff:d5:38:9d:2b:9b:3a:a2:0d:ce:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B6:75:9F:87:B0:D6:79:9D:EE:B1:7C:BD:B8:0A:90:50:BA:BC:D3
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:28:75:7c:28:dc:d2:f0:f7:e5:51:a3:34:cc:f7:2f:bb:64:
8e:cb:11:cf:d3:dd:9d:79:4e:42:5f:66:48:ce:1e:68:da:5a:
ed:8a:4c:74:b4:4b:31:4e:d1:a4:52:f7:44:fa:93:a6:ed:37:
85:7b:62:f7:56:bd:51:21:97:1a:d6:4e:f5:b7:05:59:e5:27:
0f:0f:37:3c:96:d1:e6:18:19:4e:b5:54:e6:9c:53:1e:4c:c7:
51:cb:66:a1:93:90:fb:68:bf:72:e0:27:ab:bc:fe:42:c8:be:
f0:39:27:08:13:0b:f9:9c:b0:eb:85:7c:b4:99:58:43:13:27:
81:4e:79:27:f7:0d:8a:15:c4:55:68:b2:46:80:6f:1d:2f:02:
95:38:7d:07:7e:eb:fa:65:93:b3:3d:e6:65:07:be:4f:74:a9:
ee:91:e6:8b:0d:d4:8e:71:35:0f:fd:47:b4:84:76:37:64:dc:
ed:5a:fc:46:9f:fe:a4:3b:ad:de:0f:19:dc:23:6c:26:9f:59:
a6:5b:8d:62:b1:2d:09:b5:81:05:22:fd:b9:94:57:20:1c:9c:
05:0a:07:62:6f:fb:34:af:5c:31:d8:81:8f:87:1f:05:5a:6e:
79:64:17:13:70:8e:ba:d5:c7:90:c9:51:00:c0:a8:50:af:ad:
f0:85:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:38 2025 by rpki-client