
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json)
Hash identifier: tTIofRav7LN64MQXJqFfrrbBPlg08IDaFJEuHGCa8tQ=
Subject key identifier: D0:6B:9F:91:77:E3:D7:EF:DB:0A:C7:4B:98:BA:4C:76:1D:65:C9:9D
Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Certificate serial: 019A50E429979AA007D4F30D574953384F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
Manifest number: 07F2
Signing time: Tue 04 Nov 2025 22:02:01 +0000
Manifest this update: Tue 04 Nov 2025 22:02:01 +0000
Manifest next update: Wed 05 Nov 2025 22:02:01 +0000
Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: 2cpoxpT0/+tJmBh5ELEOhawcDh1E7Mrg8UQiSzsLcdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:29:97:9a:a0:07:d4:f3:0d:57:49:53:38:4f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643
Validity
Not Before: Nov 4 22:02:01 2025 GMT
Not After : Nov 5 22:02:01 2025 GMT
Subject: CN=d06b9f9177e3d7efdb0ac74b98ba4c761d65c99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:57:77:6d:8b:3e:24:b9:c0:89:23:40:21:
14:4c:b0:a7:fa:79:83:cc:f4:3f:dd:0d:1d:82:eb:
6f:ad:fe:9d:3f:99:44:f7:67:54:2f:b8:14:49:88:
cb:10:b4:6f:c7:6b:91:8e:d4:08:9e:ff:38:91:c6:
43:61:78:69:d3:f2:04:a3:82:4b:68:34:9a:28:98:
b2:f9:82:46:a9:df:7b:7b:4d:d5:c3:14:18:f8:c4:
d3:cd:4a:35:77:77:81:7d:49:de:18:7f:10:80:ce:
de:78:26:d4:83:3a:fc:57:b8:38:56:a0:5f:6c:b8:
df:30:72:b2:e3:3e:d3:34:c2:0e:fe:07:c5:44:b3:
e1:ea:0f:c1:47:2c:39:c2:06:8c:04:43:f6:af:a7:
c3:b3:a5:cc:22:ac:28:ca:9a:3c:c2:eb:f4:a0:73:
24:5e:65:d2:17:39:8a:29:ec:fb:5c:3e:cd:e6:b6:
fa:3a:d5:8d:db:b9:25:e6:4a:83:df:78:ec:1b:d1:
83:f5:6a:a9:c6:dd:45:f2:28:51:35:f1:8f:37:c6:
ee:f6:2e:aa:d3:e9:6f:1d:47:fe:46:11:33:ba:8e:
83:4e:04:c6:d6:26:73:94:af:d3:a9:27:52:a4:c5:
97:50:2a:25:6f:4f:ac:82:a8:c6:41:3f:c3:75:0d:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:9F:91:77:E3:D7:EF:DB:0A:C7:4B:98:BA:4C:76:1D:65:C9:9D
X509v3 Authority Key Identifier:
keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e4:4f:97:1e:36:ac:78:0d:41:eb:aa:06:20:3a:2c:f1:35:
c5:b3:36:bf:4e:fa:d7:ed:70:ae:33:38:c2:6b:bb:f0:63:6b:
0e:d1:9e:94:30:ac:85:e2:1b:5f:05:f9:95:41:b6:71:e6:22:
08:a0:90:bc:25:a9:22:6d:a3:9c:ac:4e:fd:ee:a7:87:4c:13:
32:89:20:42:80:b1:78:3d:41:17:84:96:b1:76:96:1a:01:f7:
70:a6:a3:32:a9:31:87:ac:1f:a1:3d:c6:48:85:60:1a:5d:07:
fc:9d:45:3f:06:b7:00:c8:8a:16:7e:9e:ed:4c:7a:64:21:63:
6b:3c:ec:e6:57:1b:14:f0:41:65:ae:0f:13:3d:67:b7:e1:39:
0a:b2:ec:21:97:47:71:46:c7:da:4d:85:58:c8:72:f8:c2:4e:
0c:80:8a:e5:bd:79:75:bb:6e:ed:83:7e:bf:17:f3:79:6a:a8:
de:26:51:80:e3:fb:91:e4:c4:bb:80:92:cd:bf:a8:bc:b7:ce:
72:c2:4a:37:fa:d8:17:75:a8:b0:7e:04:c0:16:91:d5:1c:f6:
0e:09:9e:dc:d4:be:cb:a0:a2:84:6a:b5:8b:ae:88:da:d0:fd:
f9:92:80:b4:e9:de:06:f1:e8:d3:19:95:67:e3:e9:9b:55:90:
94:5a:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:21 2025 by rpki-client