Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier: v57avwLeW/VIxYOz5A+ioDCzJiRlxtFEBwJ1Ndt+DGg=
Subject key identifier: D3:9A:6A:FA:0E:8E:DF:6C:13:FB:1C:B5:A9:7E:2D:28:C2:16:52:F9
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial: 019A71B84DC7A1269C97EC9FAB7C5F75DC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number: 0C12
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: M70+dXT8QcyuhZL3YGzWTCbZp0FW8O8XdR+ppVolTJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4d:c7:a1:26:9c:97:ec:9f:ab:7c:5f:75:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=d39a6afa0e8edf6c13fb1cb5a97e2d28c21652f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:02:29:79:80:fd:ab:88:02:70:7f:b9:fe:
87:98:01:81:2f:4c:3e:bc:c0:82:bc:ac:07:23:af:
fd:8f:52:1c:2f:ab:53:d5:43:61:96:12:5c:0c:a4:
de:dd:67:87:cd:31:b9:7f:f1:9f:cb:3a:96:97:67:
df:d8:99:9b:32:3c:24:04:58:5a:a5:50:f0:41:e4:
d0:73:f2:ce:3a:86:b8:23:f2:11:f1:11:cf:1d:d7:
66:42:48:f5:3e:91:38:ad:a5:54:94:be:62:ae:64:
d4:b9:49:f8:ba:1e:a1:12:58:6d:16:07:33:0d:84:
5b:c8:b5:82:5d:05:a2:51:fe:2d:02:25:3f:2f:fc:
11:31:75:b3:3b:df:f9:1a:80:22:97:7b:57:4a:3e:
19:04:78:b1:57:78:c6:ac:22:8f:f6:74:54:ec:74:
f7:b0:7e:92:e6:d2:94:ce:c7:22:12:40:fe:5a:b1:
15:13:52:17:e3:cd:f5:61:c0:f6:78:76:4c:24:11:
6b:28:19:07:0a:de:9e:2f:f9:9c:65:76:25:5d:39:
6c:7f:90:bf:ef:fb:96:99:9a:80:cf:7d:a3:a7:6f:
09:32:61:a4:b6:4d:5d:e4:d2:6f:1d:b9:b4:b6:b9:
6e:60:d9:61:d3:81:4e:fd:15:87:30:98:7d:86:5d:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:6A:FA:0E:8E:DF:6C:13:FB:1C:B5:A9:7E:2D:28:C2:16:52:F9
X509v3 Authority Key Identifier:
keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:22:ed:c1:74:c1:e6:1c:d3:15:54:72:ff:88:11:e3:64:5f:
6a:6e:1b:0b:f5:1c:52:62:06:c4:4b:7e:8f:cd:d4:cf:aa:09:
b1:64:1f:92:1e:21:ed:63:76:80:69:10:55:b6:7e:c2:db:06:
da:b3:cb:43:44:d0:dd:1f:de:ae:b3:c4:3a:ac:4c:fb:23:52:
d2:0a:b4:9a:f1:42:3d:cd:b2:fc:9b:4d:a0:7b:42:49:ef:15:
f7:57:70:3e:08:be:55:90:2d:12:bd:0e:e5:7e:73:16:e5:86:
2e:6d:9f:e5:3f:02:b4:46:dc:81:92:ca:79:99:4c:f6:2c:b1:
d6:f9:96:62:10:9b:d5:37:68:40:a4:87:3c:19:16:bd:7f:dd:
04:b2:fd:dd:0c:de:cd:09:b0:f1:56:7a:fd:fc:c3:c7:bb:6c:
4d:9e:0a:d7:89:d2:c7:d1:44:25:82:8a:4b:9b:e0:85:d5:7e:
db:1d:55:e1:00:06:45:91:76:09:50:9b:13:40:08:61:09:58:
95:6b:5c:dd:6e:5b:b7:6a:8f:c6:f0:3e:6f:d4:5c:40:bd:3e:
57:4b:f7:97:9d:e9:0a:4f:8f:48:4f:2a:99:39:5c:6e:6b:88:
84:b9:d3:ac:80:43:d1:fc:ec:d2:7a:06:13:35:07:a7:bd:bd:
4c:6f:be:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:01 2025 by rpki-client