Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: 3sZE6ejTW3OUsQS7kE8Q3GlatXUfRBU134FT0j+8rVo=
Subject key identifier: E7:DF:20:6F:19:6B:0B:ED:AB:2B:17:19:D6:ED:6B:A3:D6:68:F6:D4
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 0199FCC62B34420480FAAD5BB92E39908D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0B4C
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: qJLrJVcT8YthDZqMiOrc41iI1byf/zaQ5+MVnYUMvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2b:34:42:04:80:fa:ad:5b:b9:2e:39:90:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=e7df206f196b0bedab2b1719d6ed6ba3d668f6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:5d:1b:fa:3d:43:45:57:4c:04:2f:68:34:
35:2d:16:fe:1f:eb:48:76:1d:ce:3a:8a:91:36:c2:
92:73:06:e6:31:ed:23:10:1a:9c:e2:48:d0:10:96:
fb:4a:14:ce:25:a8:e6:a7:bf:19:c2:24:a8:d6:70:
75:3d:32:12:35:39:c8:fa:3b:a4:55:92:1e:40:73:
7b:e3:7b:db:c9:57:41:9a:78:25:56:7c:df:e5:5c:
df:e7:e3:51:8e:db:bb:49:48:50:1e:1e:6f:76:96:
18:31:25:6f:b9:56:00:63:79:9f:9e:ea:f5:d1:2f:
a5:77:c3:fa:b6:69:03:d9:fe:04:2d:52:97:71:66:
4f:87:1b:b5:c7:9e:bd:77:9a:4d:da:e9:17:99:e1:
90:80:4d:6c:93:a7:dc:85:a5:07:69:02:c9:2e:75:
90:3c:3a:24:85:7c:a0:91:a3:3b:53:e5:ff:26:4b:
b7:97:95:7f:87:7c:e9:d5:cf:7a:1c:98:0e:86:5a:
97:8c:e7:1e:8e:4d:d3:44:c7:87:4c:11:bc:69:64:
a8:5d:cd:45:7f:8c:64:ac:06:30:65:67:95:02:5e:
68:e2:90:e1:3c:4c:ee:1f:f1:1d:22:2b:53:04:f3:
c8:27:40:20:9a:da:14:a9:3a:bd:ef:37:c7:24:97:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:20:6F:19:6B:0B:ED:AB:2B:17:19:D6:ED:6B:A3:D6:68:F6:D4
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8b:fd:f8:ab:6e:b7:7f:ef:2e:39:4d:40:bb:2b:84:7d:d1:
36:ba:28:ae:b3:48:7f:b7:49:f3:38:45:4a:26:c4:95:b0:10:
17:ba:34:24:2a:0b:36:d7:03:5b:c3:ad:b7:c0:f8:10:87:eb:
a9:4a:24:bf:ce:8c:dd:41:3e:1f:38:da:12:92:2c:98:15:f6:
cf:f0:9d:b7:e9:56:7b:50:6d:f9:f9:6b:72:f3:4c:36:33:ae:
8e:2d:49:f9:b0:63:61:0e:67:26:33:c8:48:6e:84:a1:c2:94:
50:dc:14:a0:6e:51:86:1f:5c:68:9b:18:71:7a:fd:97:5d:11:
13:19:8c:60:66:82:fa:1c:1e:5a:e9:0d:81:a5:52:5a:8b:e2:
8a:64:90:8c:2d:93:40:4e:ca:89:5b:39:14:3e:3c:5c:e8:14:
cd:b6:eb:35:aa:a3:b0:e6:7c:e6:e8:7c:f8:81:42:18:38:d7:
6a:79:da:4a:f9:70:60:da:74:c0:3c:7b:48:99:63:f2:5b:2b:
bd:2c:de:4c:e4:6b:45:13:27:d7:d8:e3:f6:0d:c6:97:0a:f5:
a5:30:47:a0:ad:d7:30:90:82:cf:2c:d7:e1:ed:75:2a:d3:9c:
60:7b:52:cf:9d:ed:92:d7:b1:69:ca:9e:66:45:7c:a3:cd:4f:
be:fb:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:49 2025 by rpki-client