Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: zJVR+9HOGQQ2buP9UCTvvmdzR2HLBPmwK7lI3k/kbbQ=
Subject key identifier: F2:D8:12:4B:21:B0:43:FB:27:82:21:32:91:A9:52:2C:0F:87:8A:FC
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 019A725CA650CB6C31AEDCB0C187C82BB5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 109E
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: 6jq8iBZKelcvfgblJ2eVexEsXlTXUOja7PsMHI7BpKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a6:50:cb:6c:31:ae:dc:b0:c1:87:c8:2b:b5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=f2d8124b21b043fb2782213291a9522c0f878afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:d9:49:35:6a:df:44:2e:c2:de:a9:69:73:
00:83:84:a1:11:45:7c:1d:4c:71:49:c6:bf:3e:e3:
3f:ed:58:e8:23:68:dd:35:9b:37:e9:22:ec:4b:bb:
c1:b7:f3:9f:e6:e9:70:73:fc:71:ab:ab:ec:d0:cb:
f8:62:0e:fc:72:42:5b:b9:1e:7d:31:84:40:66:e7:
63:af:ed:6a:2a:35:da:5a:93:8e:b8:43:32:4d:7f:
b3:c1:d9:0e:4a:e0:40:4a:62:78:24:e9:20:a4:19:
36:a0:b8:49:fd:d1:4b:34:ea:b1:32:7f:fd:7b:5b:
d7:07:3f:d4:e8:8d:e8:7f:a6:34:f1:45:f7:ad:4f:
6f:09:71:01:ca:16:d3:56:13:87:9c:ca:a2:13:14:
45:91:50:98:9a:1d:9c:25:56:df:3b:05:99:f6:8f:
f9:a2:50:46:52:e6:c2:f1:a6:13:df:39:eb:27:11:
09:ea:74:8e:84:2a:fa:20:40:88:c5:1a:3b:e7:d0:
17:1c:23:9b:b2:4c:3a:04:54:42:d3:d9:76:42:f8:
1e:6d:cc:a1:16:f8:b6:cb:a9:6d:82:50:61:07:f6:
e3:4d:96:a5:d2:7c:26:49:d8:1a:a4:f3:0a:2e:7b:
39:a3:ea:ef:d5:37:38:16:c8:c6:41:ef:da:72:77:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:12:4B:21:B0:43:FB:27:82:21:32:91:A9:52:2C:0F:87:8A:FC
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7d:08:9b:0a:4a:f3:60:a9:69:8f:26:ea:dd:07:4d:6e:84:
dc:e8:ea:c8:20:00:ca:cd:8b:e3:7c:b2:c9:05:1e:6f:0e:24:
c0:3c:21:f1:9c:48:ba:50:fe:e3:68:fe:99:48:fe:33:53:c9:
1c:e4:2a:c7:ad:85:1e:d1:4e:cd:b6:72:c4:e7:68:25:a3:18:
6d:68:3f:e6:2f:b0:29:cc:93:8c:f8:fa:2a:b5:9d:65:d7:a1:
f2:ee:a1:20:d2:09:29:18:50:08:3b:d5:b1:22:b6:41:cb:21:
ee:d3:7a:7a:56:f4:31:b2:a3:b3:7e:79:d3:d0:6f:e5:84:45:
f2:8f:4b:8c:1c:89:cd:43:9a:af:80:81:f8:b5:70:51:b0:e2:
1a:f5:f4:87:e7:fb:16:4d:8e:42:03:fc:66:59:50:6d:6f:48:
5e:b4:83:db:5b:52:01:c3:64:97:88:ce:4b:7a:28:85:39:86:
95:a6:a7:9e:73:e9:ee:4f:21:cd:64:49:82:ab:b8:31:e4:4d:
9b:b0:fe:49:ec:96:37:ce:08:5b:f6:d1:7d:b7:95:81:89:98:
00:92:eb:cd:9e:5f:41:c0:22:cb:84:5c:74:ac:4a:fd:00:8e:
c2:b4:1c:37:0e:d5:6b:d7:51:53:12:57:3c:ba:34:a2:c7:05:
c9:ef:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:37 2025 by rpki-client