Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: RBQA1ODZkkWbIohnWPo4MKq5miGpHbNYOnIA5ko8cGE=
Subject key identifier: 28:41:B3:3E:11:BF:D7:36:A5:97:A7:94:D6:12:CC:91:0B:95:9A:15
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 019A729371820BC553AD5E417705A02F3A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0D01
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: cPfavpVfizVBlSRRjTSogqpxwNTjpOl2c2G05s4vfV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:71:82:0b:c5:53:ad:5e:41:77:05:a0:2f:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=2841b33e11bfd736a597a794d612cc910b959a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:9b:fb:fb:10:8a:e7:09:ad:9a:2e:f2:12:
fa:35:64:bb:44:c8:9a:49:75:3c:67:67:4b:7e:44:
75:5a:12:e0:11:43:30:76:d0:4b:b5:34:73:40:0d:
a4:f7:61:a2:a3:51:39:e3:c9:b1:76:3c:68:65:46:
e5:76:df:01:3d:46:ac:47:74:d9:de:77:0f:ad:06:
58:cf:58:11:a7:83:f8:dc:bb:fe:56:8a:d4:cd:05:
63:ad:27:7e:30:7d:97:1b:fe:85:2f:37:ae:da:13:
bf:ed:25:0e:9c:44:e6:5b:09:95:e5:37:7d:8c:f7:
0f:b4:6a:50:64:c8:f7:38:73:2c:35:bc:bb:d9:79:
b8:7b:6e:70:33:9e:33:92:09:4a:53:96:6d:d4:aa:
fb:31:5b:26:16:47:47:7a:8f:e7:e7:94:1b:39:7d:
04:24:96:ac:ae:5e:e5:59:8c:12:af:be:91:61:9a:
da:50:4c:7f:ea:70:93:5b:a8:cb:2d:97:23:6b:96:
03:d8:01:75:30:b3:96:68:2f:6c:26:11:54:56:99:
a6:58:83:bc:e3:8c:d3:70:46:c1:71:06:a5:8c:de:
32:4e:9f:d9:ff:92:02:11:0a:cf:bb:c3:f8:1f:db:
2d:2d:dc:ba:83:94:69:08:e7:9c:82:12:47:71:96:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:B3:3E:11:BF:D7:36:A5:97:A7:94:D6:12:CC:91:0B:95:9A:15
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:07:05:d1:8e:43:9f:ca:7d:40:bc:50:34:e4:8f:1e:cd:bd:
42:98:0b:52:e1:60:ae:f9:17:91:2a:3e:b8:2f:8c:e9:02:5e:
5b:27:6a:43:76:53:e4:55:da:a3:4b:fa:03:55:0b:fe:c2:26:
24:ac:6a:3d:07:aa:38:e4:46:ef:d6:d8:ff:95:41:9b:52:bc:
8a:3f:b4:17:dd:e7:2f:88:a6:f7:a1:67:53:10:da:4f:04:52:
63:81:63:38:ac:6c:1c:79:0c:b7:ff:4b:74:ee:42:36:a1:92:
37:04:48:90:e5:dc:3c:f5:dd:4e:10:73:e7:ef:6a:e5:92:bd:
c0:2b:56:21:a5:86:08:f5:af:36:9b:3b:68:7b:e7:a0:15:8b:
73:b3:44:ba:8f:8d:82:00:e8:96:7d:84:83:22:df:8c:b8:57:
42:d1:18:82:0b:96:fa:22:f3:30:92:12:55:2a:43:dd:d9:9c:
ae:75:7d:6a:7d:1e:95:52:95:39:b8:fc:a3:44:31:7c:bb:69:
f1:1c:dc:9c:d9:20:ed:b6:df:a2:47:21:67:00:57:53:4d:ca:
86:8d:95:2f:5d:d4:b3:a3:86:a8:01:e3:f3:9a:53:64:5e:72:
7c:56:f2:48:30:68:92:23:5c:9c:f0:32:de:55:8a:3f:61:e3:
78:32:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:08 2025 by rpki-client