Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: g8k3UJJSPKryKzU+iAX6BaSXiXVoJBGOYP11/SfL0Mw=
Subject key identifier: F2:17:5F:C7:E7:B1:FA:C6:76:6E:9D:32:E4:AC:80:CD:7C:0A:7B:24
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 019A71B919D38130829DA881540636EF6646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 120C
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: 9Dg7y3kBemiTNnJrHURwSdMENA7ItSyhF6govslJmX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:19:d3:81:30:82:9d:a8:81:54:06:36:ef:66:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=f2175fc7e7b1fac6766e9d32e4ac80cd7c0a7b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:2e:09:49:81:4b:03:0e:5c:6f:49:c4:ac:
41:b8:05:be:44:d1:f0:a8:7e:89:31:72:27:81:52:
5b:a8:ec:1c:46:52:fc:90:d0:40:56:62:16:be:a2:
df:03:24:e0:59:68:46:e3:f0:9b:9a:23:83:6c:e7:
76:1d:88:5c:6d:53:69:6a:f3:23:17:09:00:03:a2:
cd:25:98:63:be:8d:9e:e8:0d:85:41:31:ba:a8:07:
a7:d0:1b:a1:70:89:c5:5e:30:e8:fb:bd:d6:ac:c1:
90:ef:14:d5:ab:f6:5b:35:7f:34:57:f1:f2:bd:78:
86:37:a9:0d:18:8c:19:f5:ff:78:93:c0:15:a0:0a:
6f:41:57:55:bd:39:c8:fa:e5:a2:7f:a4:12:f6:1a:
f8:b5:87:56:7b:f9:7c:89:a8:fb:6c:98:5c:81:d9:
bc:36:fd:6d:8f:46:51:bf:a0:ed:3c:ba:70:a2:8c:
a1:6c:53:75:1c:7d:a6:c5:73:d0:a6:9b:80:ca:03:
bd:6c:23:05:3f:84:fa:9f:37:fb:41:e2:e8:ae:51:
e7:f7:f9:a6:bb:2e:34:4b:f4:2f:73:67:7e:3a:1c:
66:e1:3f:08:2b:c7:de:9e:5b:6c:10:31:77:b4:a3:
50:49:bd:d4:4b:1e:66:40:ba:b8:bd:b9:d4:94:63:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:5F:C7:E7:B1:FA:C6:76:6E:9D:32:E4:AC:80:CD:7C:0A:7B:24
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:65:02:c5:30:a0:f6:2c:60:d8:c9:2f:ee:7b:1a:c7:61:ba:
f8:50:1e:b2:aa:b5:60:43:db:34:51:1e:e5:a3:93:c7:6b:96:
72:d5:5d:bd:7b:cb:99:59:17:da:c9:00:67:7b:1b:50:16:f9:
96:87:e7:39:6f:ce:c1:fb:bb:02:59:f2:61:81:40:00:40:04:
ad:ad:56:c8:8d:af:cd:21:56:c7:4b:fd:1a:3c:bb:ac:68:eb:
31:17:d4:2c:56:17:dc:57:a2:20:bb:49:ce:86:bf:ad:21:67:
cf:56:f5:f0:3b:f0:e4:02:71:ba:42:01:13:f8:81:51:51:5b:
f1:64:c3:f7:3b:32:c6:5e:84:e3:f8:d3:61:b9:9f:9f:48:55:
3b:64:78:ba:23:f9:ac:82:d6:e0:86:47:16:04:56:34:75:f9:
fb:a9:32:17:10:d7:52:22:e2:cf:fb:b2:01:b7:ef:c4:3f:c6:
7b:f9:f1:01:e0:5b:16:a0:e2:54:99:30:4b:a5:b2:59:4a:40:
2c:1a:45:d9:02:4d:d6:35:a7:85:05:6d:82:01:75:47:33:1f:
9e:24:8c:85:9f:3c:59:ec:30:8f:8e:4a:7f:a4:25:5e:f0:64:
2a:21:b1:2c:c5:98:d8:e7:5c:5d:b5:de:d0:e0:2a:d4:31:8c:
d2:a7:6d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRnTgTCCnaiBVAY272ZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNmZhY2ViYTMzNDMyN2I2OTVlYjNiMGM5NWViMjMwOTJm
OTNlMDEwHhcNMjUxMTExMDcwMjI3WhcNMjUxMTEyMDcwMjI3WjAzMTEwLwYDVQQD
EyhmMjE3NWZjN2U3YjFmYWM2NzY2ZTlkMzJlNGFjODBjZDdjMGE3YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf0uCUmBSwMOXG9JxKxBuAW+RNHw
qH6JMXIngVJbqOwcRlL8kNBAVmIWvqLfAyTgWWhG4/CbmiODbOd2HYhcbVNpavMj
FwkAA6LNJZhjvo2e6A2FQTG6qAen0BuhcInFXjDo+73WrMGQ7xTVq/ZbNX80V/Hy
vXiGN6kNGIwZ9f94k8AVoApvQVdVvTnI+uWif6QS9hr4tYdWe/l8iaj7bJhcgdm8
Nv1tj0ZRv6DtPLpwooyhbFN1HH2mxXPQppuAygO9bCMFP4T6nzf7QeLorlHn9/mm
uy40S/Qvc2d+Ohxm4T8IK8fenltsEDF3tKNQSb3USx5mQLq4vbnUlGNH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIXX8fnsfrGdm6dMuSsgM18CnskMB8GA1UdIwQY
MBaAFGNvrOujNDJ7aV6zsMlesjCS+T4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMt
YWMzOGQ1YTIwYWZlLzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMtYWMzOGQ1YTIwYWZl
LzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWUCxTCg
9ixg2Mkv7nsax2G6+FAesqq1YEPbNFEe5aOTx2uWctVdvXvLmVkX2skAZ3sbUBb5
lofnOW/Owfu7AlnyYYFAAEAEra1WyI2vzSFWx0v9Gjy7rGjrMRfULFYX3FeiILtJ
zoa/rSFnz1b18Dvw5AJxukIBE/iBUVFb8WTD9zsyxl6E4/jTYbmfn0hVO2R4uiP5
rILW4IZHFgRWNHX5+6kyFxDXUiLiz/uyAbfvxD/Ge/nxAeBbFqDiVJkwS6WyWUpA
LBpF2QJN1jWnhQVtggF1RzMfniSMhZ88Wewwj45Kf6QlXvBkKiGxLMWY2OdcXbXe
0OAq1DGM0qdtZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:18 2025 by rpki-client