Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
File: YZmtJxLZe7wR4V39skAnE66ADL0.mft (raw, json)
Hash identifier: K54jMpZf14EsOTrTvt5fs+ibcyDAorqEAo8uPIHDbw0=
Subject key identifier: 85:0A:68:55:48:61:8A:AC:9F:BD:EE:50:02:13:6B:33:9C:9A:61:70
Authority key identifier: 61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD
Certificate issuer: /CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd
Certificate serial: 0199FA6A329150366E1BDB2A5EA6BCD108C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
Manifest number: 66
Signing time: Sun 19 Oct 2025 03:01:27 +0000
Manifest this update: Sun 19 Oct 2025 03:01:27 +0000
Manifest next update: Mon 20 Oct 2025 03:01:27 +0000
Files and hashes: 1: YZmtJxLZe7wR4V39skAnE66ADL0.crl (hash: w0Idzt32HjjrFco/oWMeEFWKjxo92aYTkjEgR5Y4hy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:32:91:50:36:6e:1b:db:2a:5e:a6:bc:d1:08:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd
Validity
Not Before: Oct 19 03:01:27 2025 GMT
Not After : Oct 20 03:01:27 2025 GMT
Subject: CN=850a685548618aac9fbdee5002136b339c9a6170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:dd:f1:48:0c:e6:ef:0b:f4:c3:06:06:07:
3c:23:24:ef:61:a4:20:65:f3:57:08:28:4a:74:f2:
0d:57:83:3a:72:95:6c:a6:a5:62:81:df:ab:94:34:
d2:c7:6a:f9:c9:8f:72:b1:cd:75:fd:fa:0f:22:31:
e7:69:e8:68:c6:63:62:fb:f9:2c:2d:38:18:37:a5:
07:cd:83:6a:f2:f0:0b:36:e4:e8:30:19:1a:bf:29:
59:ea:98:08:ce:3a:7a:bf:4e:e1:b9:c4:f1:23:c0:
11:88:b0:51:75:db:3a:3f:da:28:f6:94:22:52:db:
e4:89:91:03:82:2c:cd:60:21:ba:64:e7:ca:65:c3:
eb:b7:cd:00:98:fe:cb:f9:3b:a8:e9:98:61:59:67:
c8:32:e4:46:2f:d8:60:4f:53:65:73:2d:3d:7a:50:
6d:09:a9:0a:20:8d:ee:a4:36:a2:1d:b0:b2:25:e8:
ef:b3:46:3e:a3:6e:8f:e7:f2:8e:34:7b:06:33:3c:
dc:18:2a:a6:c4:77:67:ea:f7:0f:c4:43:aa:54:bc:
70:58:68:ce:3e:f5:f4:ec:a3:52:a4:21:bf:d9:7b:
be:dd:79:57:26:d2:67:42:b6:7a:88:49:9b:19:59:
32:66:46:f5:f1:41:bb:dc:18:cb:34:85:8a:b5:ea:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:68:55:48:61:8A:AC:9F:BD:EE:50:02:13:6B:33:9C:9A:61:70
X509v3 Authority Key Identifier:
keyid:61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:d8:04:95:1a:c9:1c:ed:35:7e:33:93:2a:75:b1:cc:4d:
78:e4:1d:ef:eb:b7:47:5b:07:c2:27:1c:63:7f:1d:63:fa:c6:
b3:6d:9d:89:f9:ed:78:9e:ad:48:9d:15:b4:a2:9f:62:8a:22:
68:bd:7a:61:68:2e:fb:75:ce:67:13:cc:6c:a8:33:20:33:c4:
1a:0d:0b:20:58:be:b5:09:e8:fc:dc:2f:f6:0b:30:03:eb:71:
eb:0e:78:13:e9:2a:bd:ee:0a:01:d0:9f:d3:ab:af:f2:1e:53:
3f:aa:02:e0:a8:8e:bb:28:3c:f3:e2:de:60:c8:eb:cc:fc:7f:
08:5a:cb:bd:60:82:1e:12:b7:3c:62:a4:f7:30:af:e3:19:e4:
b9:7d:8d:6f:49:17:d2:4f:f0:58:88:2a:fc:83:63:75:a1:99:
06:fd:c6:6f:1b:d0:f5:37:e8:88:82:a1:89:d1:36:e2:e6:86:
7f:93:23:c0:e0:d3:f5:45:5f:79:43:79:c8:a0:5d:ff:77:cf:
d7:7b:42:4e:e7:9a:c8:8f:82:8b:90:d9:09:b3:5e:01:08:45:
45:ee:c6:18:96:e5:20:99:c3:5e:69:28:e1:85:2c:98:31:d9:
0d:88:11:89:24:32:ba:6f:28:f8:c6:3b:b1:15:84:aa:77:ef:
64:dd:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:11 2025 by rpki-client