Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: WMSu//stj44DdRcP7ELGb602Z527arw2613I1+hMCvE=
Subject key identifier: 7A:CF:FA:0B:A6:CB:F6:E1:73:4E:A5:5C:0A:54:D4:DF:02:CF:C7:CB
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 019A71EEE6872716F3D43EAB2A491229A230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: Bikbasylhm9nzBJYq/4gVwRuwejAcxaFFVd0GNFo4YQ=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e6:87:27:16:f3:d4:3e:ab:2a:49:12:29:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=7acffa0ba6cbf6e1734ea55c0a54d4df02cfc7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:46:cb:21:2c:db:0a:96:d5:2e:45:39:fa:
de:47:a9:b4:33:3d:42:cb:84:b3:f4:0e:1d:8e:a1:
f2:c1:4b:34:eb:5d:9c:dc:08:95:98:b2:b5:4d:5d:
79:65:bd:27:5f:1b:c7:eb:20:a4:bb:ee:44:2b:a1:
b3:9d:d4:29:bc:d9:84:60:ed:22:ef:63:69:74:95:
83:4f:e8:32:5f:bd:7e:99:c3:91:12:b0:a9:95:49:
3f:c4:c6:1a:59:be:7e:50:94:c0:65:bd:9d:2e:29:
ac:c9:61:aa:33:24:20:c9:77:78:5d:2e:9a:40:25:
4b:01:08:b8:89:0a:e0:ad:dd:13:ec:4a:de:a7:0a:
a6:11:43:aa:5a:15:13:53:17:01:e5:5a:a7:de:d4:
86:ff:98:ae:b5:a6:ee:fc:99:5b:fd:8d:bd:83:e0:
bd:83:a8:d5:fa:49:ca:e1:a5:b0:40:dd:39:af:a3:
c1:5a:d8:c6:bd:e4:75:b6:2c:55:fb:44:f7:a6:a3:
e7:de:b2:92:36:64:2c:fe:39:e4:7c:0b:84:f4:d6:
aa:f4:fd:dd:b7:96:6e:22:37:dc:33:70:c9:c3:5a:
1b:38:5d:a9:31:33:ac:4a:bb:ca:c4:04:e7:8b:f2:
20:34:56:97:3b:6d:1b:78:2b:b8:9a:60:cf:16:ed:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:FA:0B:A6:CB:F6:E1:73:4E:A5:5C:0A:54:D4:DF:02:CF:C7:CB
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:16:43:da:80:27:2c:f2:16:f7:eb:0a:40:df:31:85:a0:bf:
fd:85:b7:d5:89:05:13:86:46:ce:50:bc:e0:15:01:0d:c7:d7:
5c:98:16:50:1f:89:5b:35:1d:8c:68:01:89:ce:f3:77:ec:87:
69:a9:d6:ba:90:f4:40:1e:1e:c6:96:ce:5e:af:20:6d:7c:4a:
31:0f:58:d7:4a:d9:8c:a6:48:12:f1:e2:fe:c8:70:dc:09:20:
ce:62:6c:6b:27:81:4b:f5:b3:e2:ff:67:38:d9:c6:5e:18:e6:
ac:91:8f:ba:68:22:4b:24:05:29:13:6d:da:d8:08:f9:49:6e:
c8:23:e4:60:7d:2f:77:1a:58:6e:71:5c:45:f4:d0:fa:2e:1f:
28:a9:f3:3c:f5:c3:0f:4c:34:c2:c2:5f:d6:b2:13:db:48:5f:
f8:d5:43:18:10:67:40:d8:6b:f1:cf:b8:16:35:47:81:27:2b:
c5:26:83:b6:a6:1a:d3:e4:33:e3:4f:88:90:d3:c5:74:6d:f1:
c1:ec:14:d2:bc:3a:fc:a3:b0:de:b5:d2:39:6b:a4:2e:b6:af:
39:47:1f:7a:32:54:49:a6:16:96:a7:8f:d6:0b:d8:35:3e:c6:
a3:b2:d3:b1:b0:85:a6:4b:fe:29:81:cd:7a:af:c9:52:a8:ca:
9e:27:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:51 2025 by rpki-client