Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
File: Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json)
Hash identifier: xFXbuSZiGG745FTUKTf0mhh44RctOP2zyz93NKi/ga8=
Subject key identifier: 55:A2:57:8D:54:13:20:90:C0:F0:A0:38:94:F0:8F:B5:E2:11:3E:39
Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Certificate issuer: /CN=638cc407ceff57b13b49455f30c20b761c7912b5
Certificate serial: 019A7112A502B253832FB706C23447D98AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
Manifest number: 01E0
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: NihKwqUVBeHnSwd4b7nblg/nrJ8Gk/MUxgE06aWQHEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a5:02:b2:53:83:2f:b7:06:c2:34:47:d9:8a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=55a2578d54132090c0f0a03894f08fb5e2113e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3e:34:e3:84:33:2b:61:a5:60:e5:3c:f4:e5:
75:51:a3:a5:d5:65:c7:e0:68:0f:78:6b:fe:b3:4a:
84:bd:4b:74:a3:7c:17:5b:7f:41:28:7c:47:be:5b:
16:7a:f2:d3:8e:39:10:66:8a:de:7d:58:ac:24:ed:
54:d0:62:9f:a2:41:72:29:02:bb:52:d8:32:00:7e:
1f:5d:14:b0:11:d2:b5:4f:94:c5:0d:99:76:7f:52:
c3:c4:34:98:d0:69:10:9a:fd:73:36:2e:bf:8a:a5:
32:28:ad:9e:7f:45:95:d1:52:1c:ca:45:09:39:58:
96:7c:cf:80:87:65:e7:0d:92:36:b3:a0:23:6e:d1:
11:3c:0e:2a:2a:13:1f:64:f8:49:07:2e:80:74:0b:
ee:64:c2:73:ef:57:7a:bc:55:4b:c0:b2:e4:b3:84:
cb:76:53:a5:13:df:6e:1a:bc:d3:41:4a:bf:e0:05:
a9:57:c2:ac:aa:61:b6:b5:85:16:74:61:ae:11:d8:
3b:4e:4d:c7:4c:e8:99:93:e8:75:eb:a1:70:cc:1a:
88:0b:c9:2b:95:64:94:d4:79:95:eb:cd:93:7c:e0:
b9:b4:fa:dc:6f:fb:b1:2b:9e:b6:62:25:65:29:cb:
4b:05:fc:9d:87:fa:2b:d4:4b:e4:67:5b:17:a4:83:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A2:57:8D:54:13:20:90:C0:F0:A0:38:94:F0:8F:B5:E2:11:3E:39
X509v3 Authority Key Identifier:
keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:2b:76:09:74:55:1e:69:1c:b4:bd:61:b7:94:a8:41:72:
20:8d:35:85:6b:95:b8:50:68:3b:ee:e4:73:b9:5c:65:05:48:
7b:95:b4:e1:31:dd:4d:1e:f9:15:12:34:80:35:72:25:85:3b:
bf:67:35:00:35:9d:13:d5:e9:2b:4c:98:a6:e7:e4:6c:05:bd:
ed:e3:4e:6e:97:66:c9:dd:80:59:83:d7:02:b5:6b:58:bf:85:
01:7d:77:67:b0:c8:75:0c:37:2f:f5:c1:35:e2:6d:8a:d1:a1:
48:4d:84:03:43:1e:f2:d5:d5:25:07:ac:30:4f:14:eb:8a:ad:
87:7f:5f:61:32:09:bf:4b:1b:4f:3d:05:9a:16:44:20:73:4a:
fa:7e:76:ce:3c:2e:97:69:8d:a6:df:7e:8c:2f:7e:cc:8d:d8:
f1:56:c5:74:dd:dd:f4:00:e7:4d:31:5c:75:f4:97:d8:ab:7b:
f9:d1:51:eb:0c:d9:95:66:c8:a9:d7:e0:e3:4d:5c:d1:0c:cb:
b5:74:0b:8a:24:4c:30:4f:9b:05:b5:e0:7d:25:9c:0d:cd:8d:
dc:3f:35:63:50:c4:5b:b4:10:dd:43:48:eb:e2:84:53:0e:73:
33:c1:77:42:ce:58:84:92:0b:d4:8b:88:25:c9:85:53:b2:a4:
f3:75:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:35 2025 by rpki-client