Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File: kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier: +IbPsyTOJz9b/1SBJjopNtzGoazP8rPXW6LywDDJQJY=
Subject key identifier: D2:A3:A3:EB:2D:C3:EB:B7:CD:DD:54:07:E1:DA:74:A0:9F:51:DA:FB
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer: /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial: 019A7225A73C488BC5ACFFD5F2047E76A69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number: 11E6
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: QxZ9zP8s4T+cMX0bPfIard+UHk0StRFSrbwQ5GIERMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a7:3c:48:8b:c5:ac:ff:d5:f2:04:7e:76:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=d2a3a3eb2dc3ebb7cddd5407e1da74a09f51dafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:16:52:78:85:06:82:1d:8b:88:b6:bc:1d:
79:8b:9f:ed:9a:3c:54:60:f3:9e:05:a8:59:be:9f:
c7:47:68:a7:3f:a5:a3:8d:b6:c5:c2:6f:61:f0:e2:
19:60:4d:af:64:51:97:dc:8d:11:54:ec:96:c5:e2:
0b:f4:9c:01:bd:67:9c:2c:62:87:5a:e8:3a:d9:c8:
72:c1:22:1a:df:72:64:dc:3b:c0:ec:fa:72:73:14:
e1:c5:ee:49:79:86:ea:68:51:3a:0b:4e:69:ef:e4:
00:53:7f:31:be:67:aa:e0:fc:e2:97:58:be:1f:0d:
e1:c1:38:b1:3f:d9:55:63:5f:f8:65:97:80:c2:d7:
c9:4e:01:f5:ba:cb:a6:e2:e4:9f:73:b3:ea:87:39:
71:49:47:1b:eb:e6:7a:ae:74:9f:f3:6b:67:b9:67:
75:d0:36:15:2d:ed:08:19:32:d8:c4:78:63:f4:62:
c8:1d:55:4e:38:f1:29:e2:ff:57:da:c1:c5:95:62:
4a:41:24:ea:60:19:3f:b3:62:75:a8:72:ae:13:18:
18:fc:08:e4:32:71:37:9f:74:53:f3:3e:f3:13:5c:
22:5e:ac:39:71:ae:a3:d8:93:45:f8:7c:95:c9:64:
64:a9:f8:78:43:a6:ba:a3:88:a9:af:f9:e7:51:6b:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:A3:EB:2D:C3:EB:B7:CD:DD:54:07:E1:DA:74:A0:9F:51:DA:FB
X509v3 Authority Key Identifier:
keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:9a:43:56:9e:65:d3:b4:55:f4:5c:d1:34:22:5f:b2:6e:
a0:61:b3:45:70:27:52:01:d0:da:dc:11:b4:67:83:d5:0e:7b:
cc:97:e3:57:d0:ef:d8:c8:81:8d:48:d9:a5:89:71:de:7b:86:
61:a2:2b:54:e8:b4:f3:cc:1a:f6:a1:8c:7c:f6:89:90:cf:cd:
5d:91:c8:c7:d8:05:e6:bf:f6:f8:c8:00:99:92:1e:9b:47:58:
ae:41:d1:b0:c1:39:d4:a9:86:06:28:1a:b0:d1:55:dd:85:4d:
3c:58:b0:d1:bc:c4:5c:4b:88:13:04:39:f3:ee:e1:05:96:83:
20:69:ad:5a:93:54:8f:31:e8:a2:64:fc:b2:7d:bf:79:35:50:
7d:b3:ed:9a:36:12:de:68:0d:75:83:c2:ea:6d:cd:3d:05:d2:
85:7a:a7:4a:22:2b:03:0a:b4:1c:fd:02:76:c2:87:dc:6e:62:
41:d1:72:b5:ec:ea:78:ec:2c:3a:11:3b:9c:92:88:cd:5e:66:
bd:04:18:5d:b9:6a:d0:b3:f6:a0:6d:89:56:f6:5f:1f:46:a6:
c5:59:33:0c:cd:4f:a5:f8:26:42:d8:5e:d9:74:47:2a:9c:cc:
46:8c:2e:e2:1b:cd:35:a9:0f:42:fb:ff:e6:8d:89:f4:dd:e6:
ca:55:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:19 2025 by rpki-client