Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: foNSrBTd1mNEEyR5okeTq3j7fLIqu3QKEfZlGdzVXxE=
Subject key identifier: 1C:D0:91:75:0D:C1:06:ED:F7:3E:F5:4A:6D:2C:61:E8:D3:F8:44:09
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 0199FDD9A9F1716060E708D018B5A94D7371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:04 +0000
Manifest this update: Sun 19 Oct 2025 19:02:04 +0000
Manifest next update: Mon 20 Oct 2025 19:02:04 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: NPXDe9doGjtaRz4KiZThRea2ktTwHw5VITOr9y0YdJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a9:f1:71:60:60:e7:08:d0:18:b5:a9:4d:73:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Oct 19 19:02:04 2025 GMT
Not After : Oct 20 19:02:04 2025 GMT
Subject: CN=1cd091750dc106edf73ef54a6d2c61e8d3f84409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:ca:6b:c1:5d:a0:d2:fa:5e:ae:3a:5e:d1:
0d:e0:0a:36:30:4e:a5:bf:3c:44:cf:1f:c8:4e:77:
13:60:2c:db:4b:fe:fb:a4:11:91:d0:d9:4c:60:45:
00:46:73:8a:d1:38:3a:53:2c:23:0e:c1:98:a6:c6:
ed:7e:9b:6e:50:b5:01:7e:c4:47:c9:0a:12:83:75:
e3:26:c9:20:67:4c:5a:27:1e:82:91:ca:74:00:31:
69:c6:81:a6:bd:dd:37:a9:29:a4:e0:70:94:53:8c:
aa:dd:cc:88:fc:bc:d9:40:fb:87:b4:03:ed:5d:ec:
2a:29:ce:f6:ef:47:30:c2:5c:c6:02:95:00:a4:1c:
0f:ed:6a:3a:29:fb:42:2f:35:12:48:21:82:aa:a6:
d6:2e:7f:a7:e9:1c:6a:6e:da:cf:0e:50:b0:64:34:
49:6d:69:b0:b9:45:a7:e0:8c:6d:48:8d:6d:45:d4:
8b:64:f5:a1:52:8f:a4:ec:f1:b4:6e:bf:61:e5:6e:
75:38:7c:8c:dd:36:be:0e:18:f7:18:31:db:b8:43:
52:b5:ca:5c:71:c7:51:29:8e:9a:cf:6f:10:39:ee:
65:69:cb:dc:b1:f5:10:e3:bf:25:56:22:0a:f4:6c:
f2:a8:9f:e2:ff:96:0d:1d:18:1c:e4:a0:7a:17:9e:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:91:75:0D:C1:06:ED:F7:3E:F5:4A:6D:2C:61:E8:D3:F8:44:09
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e3:c3:3b:c6:ab:be:66:46:5d:3b:58:00:57:5d:97:49:ca:
2e:de:59:80:8c:b7:eb:90:51:96:b2:fc:d1:a6:40:7b:3c:f3:
e2:00:ab:2f:c0:2a:ce:5b:62:03:f7:91:8d:0b:19:31:ea:87:
76:43:ef:c9:95:d6:8f:35:65:26:15:37:3e:21:8e:64:73:06:
6c:3e:08:6d:f2:c1:74:9d:06:ca:0e:89:01:3d:4a:78:2f:26:
67:8b:59:de:3e:11:3d:4c:fd:e4:c0:bc:22:15:f4:29:c4:92:
4e:f6:2a:f1:fe:ab:1a:55:87:78:df:78:2c:bb:e9:77:2a:b9:
ad:9b:dc:f5:cc:35:a1:83:38:46:71:5e:1f:07:b5:7c:cb:b5:
74:c4:7c:31:37:57:26:dd:0e:5a:ad:ec:c1:2b:69:86:29:f6:
a7:c4:ad:44:4b:3d:c6:78:19:e1:08:62:91:13:66:69:9a:b0:
f9:47:63:9a:3d:d7:e8:48:c5:03:fa:b6:67:2d:50:7b:45:4e:
0a:ac:92:ef:fc:39:57:36:6f:76:99:e7:61:22:ac:65:33:ff:
5d:32:f4:ba:89:13:22:7d:1b:64:dc:ed:ab:e1:4c:a3:25:d7:
da:a3:6e:99:f4:88:2e:37:82:f8:17:10:3c:f1:57:93:b9:29:
30:98:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:23 2025 by rpki-client