Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
File: YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft (raw, json)
Hash identifier: bA/pzwy3EzaATtLcWRSPycze+516nYfLs7Tu0Rosuco=
Subject key identifier: 8D:92:A5:CE:10:74:3A:65:29:4D:44:7D:F3:47:91:2A:66:7E:4B:5D
Authority key identifier: 60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Certificate issuer: /CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Certificate serial: 019A5007758D892D00D442FB79A778242E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
Manifest number: 036A
Signing time: Tue 04 Nov 2025 18:00:57 +0000
Manifest this update: Tue 04 Nov 2025 18:00:57 +0000
Manifest next update: Wed 05 Nov 2025 18:00:57 +0000
Files and hashes: 1: YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl (hash: 75K6GM0mgSv1M18aWSs/nRQk3C/zw/ddDyOnzWWj/N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:75:8d:89:2d:00:d4:42:fb:79:a7:78:24:2e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Validity
Not Before: Nov 4 18:00:57 2025 GMT
Not After : Nov 5 18:00:57 2025 GMT
Subject: CN=8d92a5ce10743a65294d447df347912a667e4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:9f:da:fe:18:6d:52:dd:d4:69:8c:02:a2:
c1:f2:a4:04:c7:2d:65:2c:39:58:1f:15:6b:ea:23:
2f:94:c5:b8:5f:41:54:17:85:9a:7e:a0:50:e2:22:
2e:11:e5:dd:26:8a:a0:c2:64:25:1b:4b:be:b4:49:
7f:23:43:d5:51:e2:ff:df:6e:29:21:4f:83:67:63:
36:a6:f2:c1:20:a6:95:9b:ac:56:7f:e2:cd:f6:96:
fe:a6:3a:31:aa:1f:72:f8:3a:f9:c1:ee:f6:c4:ee:
94:03:0f:46:21:44:f2:61:eb:9b:39:6d:4f:af:99:
69:7c:83:ec:f9:1f:85:02:50:14:64:7d:a5:5c:20:
29:e3:f7:dd:10:df:a2:69:d0:6d:9e:cb:e1:29:57:
d3:48:9f:ea:3f:ec:16:46:98:72:5b:64:84:fd:8a:
a0:70:58:a6:6c:ca:c7:38:21:8d:d2:97:6f:30:e8:
c6:67:2d:04:71:2f:c7:7f:eb:72:aa:59:47:d3:48:
5f:91:5f:f6:5f:61:a3:5b:f2:b2:e8:d4:32:33:41:
10:09:f2:2b:9b:93:4b:a5:ae:7c:69:11:09:a4:be:
88:73:41:11:a3:68:8a:64:44:56:2f:86:71:45:12:
8c:63:49:5d:f2:60:2f:ec:9a:0f:75:32:cc:41:eb:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:92:A5:CE:10:74:3A:65:29:4D:44:7D:F3:47:91:2A:66:7E:4B:5D
X509v3 Authority Key Identifier:
keyid:60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cf:69:ac:2b:96:08:1b:89:be:da:33:70:b5:05:b7:67:af:
5f:c3:11:48:e8:c3:d2:7e:82:ac:1f:e0:4b:03:24:1e:c0:6f:
6e:8b:5c:34:ab:9e:a1:94:ce:0e:95:a7:e7:29:18:69:8e:de:
35:c8:d6:a1:4c:f7:d3:00:35:19:0c:f2:ee:31:1d:41:54:2d:
ae:2f:73:71:5f:0d:68:e1:81:6d:a7:e0:a8:a1:3e:3d:8b:74:
42:27:82:c0:3a:5a:ca:cb:6f:76:49:d1:b2:c4:ef:12:0c:63:
a5:23:45:d9:0b:e3:c3:eb:d6:25:60:dd:8b:13:0a:47:55:d6:
f4:68:f7:11:e5:7c:a3:40:6b:d9:05:b7:40:9a:5c:5a:a9:ac:
91:80:e3:03:fc:64:9b:85:0a:61:05:4f:2b:1a:70:4a:86:77:
33:cf:17:90:40:ec:61:5d:df:87:ed:3e:2e:39:a0:1c:df:71:
aa:48:04:9f:42:ad:f2:9f:03:a2:e6:fc:79:99:5b:82:b6:ef:
eb:4e:b7:32:3e:b9:59:9d:a1:a0:13:35:1b:4a:82:f6:9b:46:
57:e5:cc:ef:3a:31:32:8f:39:64:9b:f3:56:b3:69:6c:c3:59:
0e:af:14:eb:af:45:9a:a4:43:05:13:a6:c1:43:44:cc:92:e2:
39:37:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:09 2025 by rpki-client