Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: zWvo/zhfb1bTTjCQwTB1O3TXRcmAwDc2bRhUOijK0IQ=
Subject key identifier: 1A:5F:3F:19:DD:7C:75:48:63:CA:98:86:94:F4:D0:EE:6B:E6:31:3F
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 019A50E3199C2055D47254540869EF452E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 11FB
Signing time: Tue 04 Nov 2025 22:00:51 +0000
Manifest this update: Tue 04 Nov 2025 22:00:51 +0000
Manifest next update: Wed 05 Nov 2025 22:00:51 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: Ul7VbY1r+6MuuWQJTdTnHmS85z7gfMVDO4p7K4zBBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:19:9c:20:55:d4:72:54:54:08:69:ef:45:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Nov 4 22:00:51 2025 GMT
Not After : Nov 5 22:00:51 2025 GMT
Subject: CN=1a5f3f19dd7c754863ca988694f4d0ee6be6313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:55:c0:02:4e:c9:df:8d:56:d2:f5:b3:a7:
fe:86:8f:d1:40:40:b7:82:9e:e1:a8:97:91:98:c9:
e5:59:f4:ca:dc:1f:52:dc:f0:60:8d:be:76:21:12:
5b:95:80:49:19:e9:0f:5a:89:ba:3a:87:8e:92:bd:
fb:af:c2:c2:0c:39:3a:0f:87:5b:f1:e7:d2:10:03:
5d:58:3f:5c:fc:60:60:e5:62:e0:3c:ea:0f:9a:77:
5b:15:0f:70:5b:cd:a8:11:9d:57:17:c4:86:8d:32:
db:19:c4:c8:6f:db:49:86:01:c4:b8:8e:53:0d:dc:
e2:45:97:7b:fc:50:06:4e:66:26:be:be:13:a9:64:
b0:f9:39:cc:41:f5:83:ab:f0:2d:7e:b3:92:8b:08:
1f:77:44:2c:1c:ae:c7:ff:aa:96:00:44:05:ef:fd:
b8:88:d4:ca:a4:c5:ee:52:96:7e:26:39:d3:ac:24:
0b:20:d7:c8:e5:62:8f:bd:8d:aa:bc:e9:2c:c6:d8:
cc:7d:a8:82:88:09:6d:97:0c:bd:07:b9:fa:0b:5d:
fe:15:8d:e3:82:37:f7:46:70:3b:56:2b:6b:1e:ba:
cf:f0:81:39:09:15:87:a8:15:54:62:b7:bc:dd:92:
07:02:39:d0:4b:41:76:7d:31:1d:e1:78:7e:f5:06:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5F:3F:19:DD:7C:75:48:63:CA:98:86:94:F4:D0:EE:6B:E6:31:3F
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:12:9c:77:d6:7f:bc:4e:29:03:bd:0d:6c:b8:09:a3:72:0b:
c8:00:21:15:89:1c:ae:2a:73:9d:d3:a1:5b:86:1d:62:6b:db:
2e:33:82:52:23:44:e5:e9:8d:2d:d6:30:94:bf:09:f1:d8:a4:
5d:86:43:e9:d8:1a:67:77:aa:37:c0:a2:aa:6d:61:7f:42:16:
87:ce:75:94:ee:2a:59:9e:f2:6b:1f:10:64:5f:79:82:f7:b8:
97:68:af:b9:40:73:f9:19:e7:58:45:27:a9:de:3b:81:3c:99:
3c:b3:44:40:f6:42:67:3a:1f:ad:15:6b:49:46:46:b0:34:d1:
e2:47:d4:cb:70:fc:ff:3a:cf:02:d3:f4:3a:dc:59:e3:c4:d7:
83:f7:4d:3f:6d:56:76:4d:90:f0:dc:d4:dc:d2:4a:44:9e:2c:
51:79:26:10:52:5b:aa:3e:b8:2a:a7:97:b2:c5:1a:01:38:9c:
c9:8b:6d:17:a7:1e:b4:4b:1c:7e:d4:f3:16:57:bf:9e:bf:c5:
cd:60:f6:5b:37:e3:ea:2b:aa:5e:df:c3:f5:ed:7f:8d:db:65:
12:50:51:c5:2b:73:ec:a1:89:bd:8c:cb:41:83:3f:ec:61:46:
0b:ca:43:43:f2:6b:f1:d9:ce:5d:17:3b:aa:8c:99:b0:7f:b5:
85:51:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:32 2025 by rpki-client