Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: D6VWa8w9HQ1hSeAKmI76aN5Pzf5u1V+lg3P7p1k1qkE=
Subject key identifier: 83:C3:A0:E5:BA:6C:A7:27:34:35:CB:13:B5:90:8A:2A:84:48:44:62
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019A70A51219922DFDA9E7CE3EC81E0B79B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 0173
Signing time: Tue 11 Nov 2025 02:00:57 +0000
Manifest this update: Tue 11 Nov 2025 02:00:57 +0000
Manifest next update: Wed 12 Nov 2025 02:00:57 +0000
Files and hashes: 1: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: 6RSNttnx8QJ7yIP5Y6oAUs6suNJnl1SrS5IRvYRcRP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:12:19:92:2d:fd:a9:e7:ce:3e:c8:1e:0b:79:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Nov 11 02:00:57 2025 GMT
Not After : Nov 12 02:00:57 2025 GMT
Subject: CN=83c3a0e5ba6ca7273435cb13b5908a2a84484462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:3f:a4:c5:40:4d:07:d6:90:e1:52:ad:0b:
79:b9:94:e9:4c:d8:a0:34:5b:da:89:3a:89:8a:84:
33:ca:be:51:b1:9f:81:15:82:ce:78:36:b0:5d:91:
8f:76:53:83:1d:01:86:64:bb:fb:7a:f8:73:3d:e2:
02:b5:d7:1d:6b:52:68:d7:6b:7c:74:79:79:a9:f3:
34:cf:65:44:80:f9:58:41:34:75:38:cc:7c:54:aa:
40:0d:79:19:c9:d5:fe:ec:35:82:30:fc:7b:b2:99:
e0:20:c0:82:e4:c9:01:69:e6:24:d7:6b:31:53:11:
e8:85:21:1b:bb:f0:ac:49:34:5a:7e:95:a9:28:2c:
29:09:27:d1:f8:e6:c4:6e:22:bd:a0:0a:3c:8b:b1:
01:31:0c:17:80:88:0a:77:ee:a5:36:ef:04:a3:f0:
90:24:8f:ee:7f:a7:b3:58:58:e4:94:61:81:7f:ca:
64:96:34:47:68:3b:cd:50:0d:59:12:c2:d9:09:c0:
f8:1b:14:91:a4:59:4c:f4:a0:0d:85:7b:a7:d8:43:
79:b3:26:df:a6:23:ff:48:fa:65:b6:55:2a:1f:01:
8b:b0:a5:58:02:2c:8e:fc:2c:e9:f2:9c:e5:6e:db:
70:55:9d:f3:94:3f:d6:84:98:e6:96:f7:06:b1:bf:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:A0:E5:BA:6C:A7:27:34:35:CB:13:B5:90:8A:2A:84:48:44:62
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:f3:5f:4b:df:70:ba:0f:a3:74:6c:14:91:ac:f9:3f:71:
72:57:11:d1:bf:85:3d:45:22:5c:63:51:a7:71:e3:bf:90:06:
0f:64:3b:0c:a4:e4:52:e8:57:df:85:15:72:d6:f9:e1:f0:ef:
a5:5b:33:71:56:c3:6c:11:e1:d8:bb:ff:9f:a0:97:cf:4f:9a:
82:cc:a1:67:18:ba:da:30:d3:e2:f2:8a:ba:6e:c8:c5:f2:43:
5f:70:c9:e1:eb:5f:b8:00:20:05:88:51:9d:22:e4:01:0d:67:
e5:46:f4:23:ea:b9:f7:e0:83:f1:2d:90:53:f6:f9:f4:24:0a:
e5:ed:16:d4:3f:6f:e7:f0:9d:69:5e:3d:93:14:b2:79:b9:25:
d3:45:37:32:28:f6:a9:66:a8:d9:94:ae:5c:e2:e9:cc:6f:47:
e1:29:5e:7a:22:4a:29:a1:ff:40:8a:40:16:bd:01:71:1d:16:
5f:46:46:55:46:80:17:2e:50:4a:f3:9b:f7:19:ca:d6:1b:4d:
f2:17:33:ae:5e:c1:ef:81:71:c3:4a:da:9f:c6:5d:80:5a:ff:
4b:12:59:20:99:27:e0:c7:ca:11:5b:59:59:01:40:b0:ca:00:
3f:8c:35:12:43:2b:92:bc:78:36:74:71:69:3d:24:21:3f:eb:
a1:8c:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:47 2025 by rpki-client