Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
File: Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json)
Hash identifier: D7ozdsX64VbGdDjvqyOGL02rFNon8KUw1ppgIYOhGso=
Subject key identifier: C8:76:3C:DD:9F:3F:48:7B:E5:6A:27:E7:5A:F9:F3:F3:E4:83:A5:B3
Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
Certificate issuer: /CN=63850055f27ec40756297ffcd759eb861eef73c1
Certificate serial: 019A71B92FDEEC716EF3CD330AD537DBED6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: S30jW7JGb0KwSArBRxQgjAxuAl4jRNdpu2FLmc30qPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2f:de:ec:71:6e:f3:cd:33:0a:d5:37:db:ed:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=c8763cdd9f3f487be56a27e75af9f3f3e483a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:7c:29:73:84:3b:63:35:51:0e:cd:30:28:
d3:ef:da:2a:c5:3c:1f:11:5f:9c:de:ae:1d:2e:d9:
0a:67:f1:34:de:37:89:dc:13:49:26:4a:d6:b9:1b:
e3:5d:5c:8a:30:c6:a8:7a:13:41:9a:d1:f4:fe:02:
c8:04:64:24:38:6e:31:84:ef:f7:f4:0a:99:39:e9:
e4:15:3d:d2:23:28:47:e4:85:37:c8:57:64:76:e1:
69:d1:f9:7f:ea:f9:49:01:ec:78:da:94:8e:a9:bb:
7e:58:d6:95:74:f2:0b:bf:64:f9:9b:f0:74:d7:33:
60:67:79:c4:d9:55:55:87:a5:59:68:13:be:08:76:
de:b7:c2:e5:4e:bf:61:06:6a:92:ff:b5:0f:d3:88:
ee:fc:28:ff:e6:7f:40:2b:3e:66:2d:f3:0d:59:0f:
53:9a:68:48:3a:10:21:05:e4:02:d1:0e:f5:ee:d0:
ea:70:c0:b9:6e:c3:0f:12:b2:3a:98:d0:ee:bc:cf:
2f:71:85:f2:00:dc:51:e7:55:36:da:3a:ff:03:d1:
0a:1e:8d:7e:5b:e8:a5:6f:68:92:65:11:82:1e:24:
94:eb:9e:c5:bd:94:04:0a:65:29:d1:ae:10:66:22:
c7:3a:bf:c8:44:6b:19:d2:c8:1b:e9:5d:13:e4:4f:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:3C:DD:9F:3F:48:7B:E5:6A:27:E7:5A:F9:F3:F3:E4:83:A5:B3
X509v3 Authority Key Identifier:
keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:81:8b:25:1d:c6:76:59:61:00:71:d0:19:71:37:be:38:
11:97:84:1d:df:76:99:02:a1:b1:e3:1d:06:d2:f2:11:5e:8c:
a8:ad:fe:c4:38:27:3a:2d:91:75:82:2d:a3:00:c1:9b:94:ce:
ea:03:61:e8:d2:68:01:74:02:db:1a:20:50:3c:1f:1c:41:57:
cd:4a:e3:53:b6:25:8a:36:a8:4f:46:a9:dc:11:56:16:12:22:
97:28:bb:5e:6c:db:09:0a:fb:1e:1f:03:8c:5c:8a:c6:5a:29:
33:78:34:20:4d:d2:c5:16:da:44:c3:93:57:08:cb:ca:8d:6c:
71:3e:cc:29:2d:16:1c:2e:e4:bb:c5:c7:c7:20:b5:46:c8:62:
04:24:9a:88:e6:90:a3:53:8d:0d:2e:a0:2c:1a:b4:ea:e6:36:
e8:19:f1:63:86:86:f2:47:7e:89:30:b3:46:a1:a5:44:a3:4b:
5b:cd:56:51:a1:c0:5e:81:05:d3:98:5d:b0:b9:90:dd:f8:18:
ba:0f:e6:36:89:5f:09:45:40:47:ad:3a:16:cf:28:62:ff:1d:
a7:69:c2:4d:03:90:9c:0f:d2:51:34:44:9b:10:50:c2:e8:d7:
b1:84:ad:cf:1b:2b:ac:1b:00:1f:36:dc:34:1d:86:34:d5:e9:
bf:78:97:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:55 2025 by rpki-client