Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier: ER7rxCZpmzi5888A+/9i2Aw3fhCBzNnZa/qycDOyL08=
Subject key identifier: B9:6F:82:BE:1E:CC:85:C6:0E:C1:76:92:6B:B5:F9:97:E2:C6:B0:C5
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial: 019A503DF32CD80E2EA09B1129A59201FAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number: 0682
Signing time: Tue 04 Nov 2025 19:00:28 +0000
Manifest this update: Tue 04 Nov 2025 19:00:28 +0000
Manifest next update: Wed 05 Nov 2025 19:00:28 +0000
Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: IgJ+LwnVa9ciRLxHJcGcGL4st/uTnbStwYQzRNlIqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f3:2c:d8:0e:2e:a0:9b:11:29:a5:92:01:fa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Validity
Not Before: Nov 4 19:00:28 2025 GMT
Not After : Nov 5 19:00:28 2025 GMT
Subject: CN=b96f82be1ecc85c60ec176926bb5f997e2c6b0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:b5:81:ed:b3:00:40:e9:b5:ca:88:21:1c:
a0:d1:cb:a4:e3:f6:19:db:d8:08:42:97:8e:ef:2b:
8a:9c:3f:e8:97:51:a5:54:b6:73:be:33:a2:b9:5d:
5f:bb:f7:55:35:31:64:b9:6c:58:86:8a:d9:48:b4:
c4:89:32:f6:01:00:98:3f:21:b3:da:dc:72:54:59:
72:eb:9a:d8:28:1c:08:03:bd:fe:6b:a8:94:f9:31:
ce:81:c4:5a:18:21:cb:42:a0:15:24:cf:13:41:5a:
20:80:20:9c:12:78:e7:f4:3f:08:fd:8f:ab:12:18:
f0:c7:41:1f:32:3c:87:7d:cf:71:ba:68:93:e7:f4:
64:1f:a3:9b:ae:29:1c:70:0a:0e:9b:b9:9d:12:0c:
59:6b:78:90:d8:66:d2:cb:a0:f7:c7:62:53:1f:f7:
70:e4:20:f3:c6:ce:4a:ae:71:40:06:5c:43:79:9c:
d0:d7:f4:95:07:9a:1a:8c:36:94:d7:c9:7c:82:e6:
f0:af:11:88:81:a6:7e:e7:21:b7:66:ac:2d:3f:0d:
c4:31:71:9c:e6:d6:7b:9f:54:43:e9:f9:ef:e7:3e:
79:cc:b6:ae:2c:4f:97:83:3b:77:87:09:ba:f0:32:
4e:ae:c8:17:0a:89:21:f0:fc:ab:b5:c0:7d:41:d4:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:82:BE:1E:CC:85:C6:0E:C1:76:92:6B:B5:F9:97:E2:C6:B0:C5
X509v3 Authority Key Identifier:
keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e0:bd:4a:d5:33:71:7e:27:f6:0f:56:18:ad:ac:10:15:0e:
e6:22:aa:5d:37:66:a2:58:9f:e5:ee:7e:ab:71:62:9f:cd:ab:
db:14:92:17:d4:a9:b3:7c:9c:5d:6d:37:58:5d:ca:94:da:be:
9c:9d:2f:b6:8c:b6:b1:70:7a:64:e5:73:fe:c0:65:9f:34:99:
d1:2a:0c:22:aa:36:9b:df:f5:cc:0b:9a:1b:2a:13:09:f7:8a:
fd:4f:3c:8a:68:17:3a:ac:ba:b8:0d:d6:02:6b:15:cd:9a:e0:
11:e5:7d:29:d3:bf:a1:12:85:27:6d:50:9c:17:42:b7:df:bd:
08:69:e1:c0:5b:93:9b:13:e1:bc:c0:7f:36:6b:4b:82:38:26:
75:f1:45:33:4b:d8:8f:c1:8f:4f:92:e2:29:fd:24:a6:9f:b8:
68:d2:a2:9e:af:48:79:bb:12:1e:ff:48:46:db:4e:3c:4f:ca:
69:b3:77:08:84:44:38:d4:26:49:c2:47:df:57:6e:43:c6:0d:
4e:56:0d:df:6a:6f:2c:42:c8:66:eb:b3:40:1e:d8:90:07:e5:
36:76:02:02:c7:45:31:41:04:88:e2:09:ef:53:d7:12:76:7a:
d5:f3:8f:21:78:98:90:b3:6b:a8:9f:8a:c0:eb:fb:49:1f:c8:
14:58:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:57 2025 by rpki-client