Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: eIhIWf5V4SY3IDLL4piA+WsThsQsoOpZwy0M96TTnUw=
Subject key identifier: C2:0C:4E:AE:31:76:C2:37:B5:E7:B7:78:AD:6E:61:AD:A9:31:52:A1
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 019A7293E9590EE217B67D34B0828EC00E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0DF1
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: si4cVcGkVTNHa+ZijnUgHa6U6wC6sN7o3APXaK/SApw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e9:59:0e:e2:17:b6:7d:34:b0:82:8e:c0:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=c20c4eae3176c237b5e7b778ad6e61ada93152a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:3a:a7:28:f9:55:0a:e9:08:2f:2f:50:33:
1b:5a:e4:bf:b2:e7:40:36:77:dc:0a:19:b4:b1:76:
59:d5:6b:a5:3e:46:d9:4a:f2:48:48:47:82:2e:73:
59:ab:fa:fc:4b:6b:b9:7d:85:44:2f:5b:a0:1f:ee:
36:f4:b4:57:ad:be:40:00:9c:41:d7:90:a2:de:53:
f0:7f:39:b2:c3:98:93:5c:1b:d3:0f:ea:5f:cf:b2:
87:97:6a:f8:eb:98:c9:1e:43:6d:b7:fd:cc:b6:b7:
cc:af:16:f3:d0:bc:a3:b8:2a:f9:5c:33:c0:1c:e8:
82:a7:8f:fc:91:da:8f:fc:2d:7d:98:91:68:85:cd:
d0:89:98:7a:2b:21:09:fb:1f:d9:f0:32:7f:eb:10:
7a:40:86:0f:7d:68:52:8b:e7:14:72:da:8c:4c:af:
14:30:8e:ce:cc:00:a5:e3:6f:6b:b6:6e:79:27:f3:
c1:a6:15:f3:c9:ca:74:b7:c1:3e:fc:67:83:d4:b7:
a2:f8:e2:3a:63:0e:0c:9c:5a:e2:b3:e2:1b:8b:21:
92:b7:63:13:b1:79:53:db:59:30:a2:76:5e:a7:ba:
3c:2c:da:4b:9a:e9:75:e8:2e:db:b7:23:71:4b:29:
fa:ef:37:d6:89:85:61:66:8f:98:e4:c4:c4:e1:05:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:4E:AE:31:76:C2:37:B5:E7:B7:78:AD:6E:61:AD:A9:31:52:A1
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f7:02:51:b5:0c:d9:47:6b:83:cf:9c:88:b7:52:e2:d7:9a:
7f:41:b7:f4:66:4a:03:d0:b7:8e:b8:68:c0:68:f7:06:43:f7:
1e:58:13:4a:11:44:4b:09:fa:06:77:da:fd:21:43:2a:f4:e1:
24:87:c9:17:2e:4a:a1:7a:be:cc:74:d1:1d:91:40:ad:c6:f8:
59:a3:f1:d1:e3:c7:c5:60:4d:b3:30:39:75:e3:a9:6a:a7:3d:
0d:31:a6:5b:6e:3f:be:65:28:b4:bd:b3:d8:cd:58:19:ed:aa:
a1:17:a3:aa:95:1b:e9:af:40:7f:62:e9:0e:a7:3d:e8:41:a7:
7f:b3:79:8c:12:21:56:5d:a4:f2:03:a6:c3:0f:b2:b5:f2:11:
18:af:a1:6a:19:7f:37:80:13:46:1c:a1:49:a7:92:48:46:11:
d3:a0:d1:08:74:8b:c1:ab:a4:6b:3a:eb:49:51:97:61:9e:86:
4a:f2:0a:95:05:b1:fc:ff:23:21:5c:9c:93:53:8e:90:29:06:
e3:ae:17:cf:72:b0:f7:a0:44:36:84:51:d6:9a:a8:42:90:df:
57:d1:be:52:16:2e:4c:86:7a:a0:0f:9b:67:8e:e5:95:c4:e5:
02:5f:28:51:f0:90:0a:04:22:fb:c7:88:93:94:e2:e4:d3:b2:
7a:24:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:33 2025 by rpki-client