Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier: ppzsY3DcaG30CPU5sjvlD4JcgH1bOplOSViYFaHJITE=
Subject key identifier: 3D:B3:BF:E7:66:C8:7D:11:A4:56:31:89:EB:9E:DD:35:F0:53:2A:B2
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial: 019A71137B8F0A86C7D34124234A42DFA289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number: 0FE3
Signing time: Tue 11 Nov 2025 04:01:33 +0000
Manifest this update: Tue 11 Nov 2025 04:01:33 +0000
Manifest next update: Wed 12 Nov 2025 04:01:33 +0000
Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: +Z0mhUe6mjtBD3QU7hJBDQOo4fKlX/xYVzvSWAJT2y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:7b:8f:0a:86:c7:d3:41:24:23:4a:42:df:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
Validity
Not Before: Nov 11 04:01:33 2025 GMT
Not After : Nov 12 04:01:33 2025 GMT
Subject: CN=3db3bfe766c87d11a4563189eb9edd35f0532ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:f6:1a:9a:48:ce:35:f8:b2:09:7a:a9:2f:
cd:8c:38:83:22:0b:8d:f3:4a:58:a4:d3:5b:b8:21:
15:61:a5:91:63:62:4a:65:56:36:08:14:41:6e:57:
ca:45:46:3a:e9:e7:4d:d9:85:ea:f6:25:c0:4e:6e:
7f:75:67:ed:6c:0d:3d:5c:2b:e8:e7:48:e9:e2:b6:
c5:4b:b8:db:e1:b9:8c:43:40:03:b3:f3:73:d4:4d:
14:b0:23:f7:c6:fc:da:7e:96:ba:0e:79:fe:90:8a:
71:a5:b9:86:07:fb:12:81:ac:72:e1:1d:8f:c5:c1:
37:f9:14:cb:23:bc:d7:16:d7:d3:a1:5d:c8:42:00:
82:94:1e:0e:fd:3d:bc:3c:b3:6d:10:58:02:38:50:
f0:07:44:6c:a5:51:e1:41:89:4d:58:e8:c0:69:43:
29:22:ac:57:23:07:de:82:30:2f:46:e5:0c:7a:23:
f8:16:e0:4f:6f:59:9f:57:88:7a:c1:53:fe:b5:b7:
f4:25:3b:c7:6e:f6:71:87:3c:b4:85:8c:15:42:1e:
0b:64:1a:06:45:ec:71:04:e8:db:4e:69:4e:cc:ea:
af:a9:45:cd:a7:8f:47:7e:4c:0d:d9:f8:cc:bc:db:
50:a7:2f:f1:02:00:2d:4a:5f:ea:9e:1f:5e:a8:9e:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:BF:E7:66:C8:7D:11:A4:56:31:89:EB:9E:DD:35:F0:53:2A:B2
X509v3 Authority Key Identifier:
keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:fa:71:20:bd:59:f6:7a:b2:0d:bd:eb:dc:3c:22:3e:60:
a4:82:b4:4a:88:de:99:07:6b:aa:36:26:ba:97:2b:c1:7b:49:
b4:77:25:42:08:19:54:99:69:f2:ab:23:21:2e:ae:8d:90:8f:
3e:6a:6f:63:3b:a8:f9:b7:10:52:12:e9:d4:46:7e:9c:b8:d3:
b3:17:8c:82:e9:d7:71:d5:5e:be:a5:2e:d4:a8:93:ce:b9:77:
d7:7b:5c:b5:f0:87:e2:f7:b2:cd:a6:2b:4d:84:40:4b:4e:3c:
59:bc:7f:7d:62:af:78:73:59:dd:fd:d0:66:db:35:82:cc:07:
68:e9:87:35:c4:0f:24:03:18:c7:cb:7f:8f:c8:1c:bc:db:25:
20:f5:f2:1a:cc:ab:17:a7:66:0a:3a:4b:53:29:eb:74:47:58:
39:05:36:3f:08:0e:1b:e3:87:8c:d6:d5:cf:c4:0c:ec:d6:48:
a7:16:42:83:5a:d6:88:3f:1d:f9:ef:3a:d6:d0:48:75:e9:98:
99:6d:a7:cf:7e:a9:20:cd:2a:c9:6c:a2:ab:e4:57:7b:fd:15:
ad:07:46:c0:3a:8d:fb:6a:ee:aa:a9:30:f7:7a:2b:59:71:75:
af:c7:6d:90:b0:66:a9:eb:a8:73:a3:27:e9:0c:f3:b6:4f:55:
96:8f:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:55 2025 by rpki-client