Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier: taJ2YTlV2f6v4FUq+gO0etKtmTqRFZ2HxQggw5R9ooM=
Subject key identifier: E2:18:5C:BF:5B:F9:CF:FD:3B:06:5D:8C:8E:D9:1C:94:B1:1D:1E:A4
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial: 019A4D05F5C335C7D9DC0B6D7BE27157CF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number: 0794
Signing time: Tue 04 Nov 2025 04:00:27 +0000
Manifest this update: Tue 04 Nov 2025 04:00:27 +0000
Manifest next update: Wed 05 Nov 2025 04:00:27 +0000
Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: /nS9gaFtytt2hFnaiIoy+gfrKKDilZqDnlmIWEbWqU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f5:c3:35:c7:d9:dc:0b:6d:7b:e2:71:57:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Validity
Not Before: Nov 4 04:00:27 2025 GMT
Not After : Nov 5 04:00:27 2025 GMT
Subject: CN=e2185cbf5bf9cffd3b065d8c8ed91c94b11d1ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:76:12:81:ec:d4:be:c5:90:96:43:1b:28:
cc:58:dc:10:98:d1:ee:e1:b9:88:83:f0:8b:a6:61:
26:32:fc:b3:32:9a:cb:d4:55:28:d0:e2:c1:59:42:
f7:ae:57:2c:07:79:10:20:78:f0:b8:56:1a:ff:74:
0a:1f:8c:59:71:a5:be:79:44:96:c4:82:1d:c7:6d:
ee:ce:da:82:d1:3d:08:f6:eb:40:7f:6c:97:f4:6b:
e7:0b:ea:d0:40:78:2a:f3:f2:3d:fe:7c:c9:51:4d:
37:31:3a:a2:ab:4b:0c:66:91:50:25:ee:67:6b:08:
12:8d:bf:e5:8f:de:7c:28:1c:58:c8:41:20:db:50:
d3:5a:25:d8:fd:fc:2c:e0:f0:21:e4:ee:8e:2a:a9:
de:d6:5c:9b:6b:74:0d:8f:bc:2a:1b:f6:7f:58:5a:
72:1a:36:98:19:36:55:5b:a8:42:f9:7c:6f:c0:c6:
5c:62:58:32:9b:4e:e0:ee:8c:41:3e:41:e0:8f:5e:
e6:e5:9b:1e:bd:3b:94:50:c8:51:65:1d:93:9e:e8:
91:33:17:19:5f:60:08:d1:0d:61:b1:11:75:bb:c8:
e4:ff:05:bc:66:ce:4b:2e:ef:52:9a:6a:96:2f:55:
8a:bb:b9:9a:ba:ad:64:7a:81:1a:fa:01:d4:18:be:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:18:5C:BF:5B:F9:CF:FD:3B:06:5D:8C:8E:D9:1C:94:B1:1D:1E:A4
X509v3 Authority Key Identifier:
keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:24:5b:84:d8:a6:b1:5e:a3:c5:9b:a0:d0:ce:bd:0e:6b:
c1:a3:8f:48:ae:e3:76:f5:9d:44:46:78:3a:a7:53:bf:69:33:
6d:e2:5b:ab:e0:45:62:27:bd:75:ae:a0:c7:7b:a8:38:ce:9e:
8d:a5:3a:25:ec:6e:99:79:70:d7:a7:c2:49:af:6a:03:db:bc:
af:08:85:96:21:e4:19:d1:67:21:75:f6:7c:23:09:f9:54:a1:
fb:a8:2c:3b:38:48:42:3d:51:45:2d:f1:b0:6a:b2:a2:06:06:
e1:5d:29:7e:5d:bf:bb:6e:80:9d:46:78:4b:ba:2d:5c:3a:38:
85:b2:b1:52:1a:5a:08:7e:e0:23:81:d2:ec:32:b0:ee:75:02:
c0:ec:a7:d7:7f:cf:ab:14:bd:b6:cc:2c:bc:39:13:ee:80:12:
5a:dc:d1:89:3c:a7:4c:50:7a:0f:e4:75:99:27:36:97:fe:ef:
cf:42:c3:3d:92:92:51:03:f9:c2:1d:14:c8:d4:84:95:cd:ee:
eb:47:3d:30:b8:92:6b:19:f9:d5:40:5f:d4:6e:b9:c4:4e:e0:
d6:ce:0d:20:d8:bf:d4:e6:7f:49:f2:34:66:da:3e:75:26:5d:
91:38:37:c1:c9:2c:90:6c:58:0e:c1:6b:fb:15:05:fd:8a:74:
32:23:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:16 2025 by rpki-client