Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: uHhvAuAgtLKI3rApSPn3R1OtSwHPhAgKREX5C54vCB4=
Subject key identifier: 8C:DD:A8:5F:72:FA:BF:AB:4A:F5:84:7C:93:9D:6C:20:DF:42:B5:2F
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 0199FDD934516A858510BE5CED81A2EE508B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 19:01:34 +0000
Manifest this update: Sun 19 Oct 2025 19:01:34 +0000
Manifest next update: Mon 20 Oct 2025 19:01:34 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: VkqJ9w1NUh9B3/JW8vkDb4aw5CgP5ssQVh8gJuQ6N1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:34:51:6a:85:85:10:be:5c:ed:81:a2:ee:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Oct 19 19:01:34 2025 GMT
Not After : Oct 20 19:01:34 2025 GMT
Subject: CN=8cdda85f72fabfab4af5847c939d6c20df42b52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:b1:f7:30:b9:70:91:f1:d2:04:9e:76:6c:
f1:b3:5b:e7:4b:2f:28:ba:43:c9:6e:50:63:6a:0c:
6b:06:e8:ce:25:b9:6c:24:08:f2:3b:55:7c:3d:d1:
ee:a5:d2:63:68:ef:13:66:ee:e2:b9:e7:c8:55:03:
8b:4a:61:9a:e5:66:34:77:f8:35:22:03:79:86:23:
85:0e:f4:c8:79:df:fb:6b:5d:46:d5:fa:16:c9:c0:
7c:d6:a2:ce:1a:c2:bf:40:09:7d:5e:30:f0:6c:ae:
63:d5:cf:ec:a7:df:3f:6e:ce:45:e1:4c:23:f2:dc:
66:ca:6d:ee:1a:b5:d8:fc:47:13:32:79:c9:d9:75:
cc:26:14:4c:6e:5a:17:4e:75:08:8b:aa:04:04:7e:
84:a1:56:3d:ed:e6:5d:05:5b:b7:f6:d6:a1:6c:5e:
4c:a0:09:cc:b4:21:dc:fb:b7:65:eb:f7:b5:71:81:
ba:fd:63:e4:7f:a8:89:6f:2f:b4:e0:90:80:2f:49:
7c:89:0d:cf:8f:3f:e1:da:45:f4:19:cc:5a:c2:37:
b2:44:9c:40:29:b9:cb:5f:9d:4d:dc:07:10:2b:49:
06:9c:bd:42:53:57:13:0a:90:6b:6b:e7:f1:e1:5c:
a0:29:84:d7:90:bc:20:37:ac:1b:d6:64:11:25:b2:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:A8:5F:72:FA:BF:AB:4A:F5:84:7C:93:9D:6C:20:DF:42:B5:2F
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bd:75:57:73:9f:21:6e:25:5d:9c:40:b9:ed:31:d2:61:39:
8e:7d:38:7c:f9:25:20:32:4e:ac:e0:39:3f:d1:95:35:33:0e:
ed:f5:9a:02:4a:6e:ef:14:d9:38:35:62:d8:77:7d:a3:75:cc:
7f:ac:de:26:4b:36:ec:8d:c1:f8:34:b8:06:1d:57:2e:4e:0e:
97:04:b8:47:68:53:72:b4:a8:aa:d5:fa:8b:b5:47:e1:ad:83:
58:75:db:68:70:a2:90:a1:fd:ee:40:ef:41:65:52:ec:2e:8a:
ac:ad:fa:eb:40:3f:e2:c1:e0:7d:2b:c3:c4:1c:0d:cb:9d:1a:
68:08:d9:8e:e2:c3:d9:4c:17:2d:e0:c6:1f:74:51:a7:ee:6a:
c6:d0:a1:d3:d9:f6:f4:27:b9:2b:67:eb:56:a4:8f:18:df:2f:
7f:49:8c:19:4c:53:79:b2:35:3c:14:c9:cb:83:0e:c8:d1:76:
bc:cb:8d:52:d9:96:26:b4:5c:7f:f1:da:9a:29:e3:aa:55:a5:
a4:9d:5a:dc:2a:50:0f:fc:44:4b:3d:f6:17:c9:a1:f4:5d:fd:
7e:cd:78:93:36:8c:69:78:70:d4:c6:da:8f:08:94:cd:89:cb:
67:e9:23:0a:13:d0:48:be:cd:8a:07:be:ce:43:00:7a:c0:eb:
15:e1:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:04 2025 by rpki-client