Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: 7HXLjhdx2IywLfgOBj/G8L1finZVaFHP0evXjDoJcDU=
Subject key identifier: 74:D5:61:91:76:0C:1C:FB:74:B7:0F:47:E3:55:8C:FB:19:B0:C0:F6
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 019A72935FEF9FFA77BAF0A033315080509E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0D09
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: xpGUWZ/0DXjfGd1eAut7t6bp5uylvtfNgeHfnu2yhXc=)
2: vkrMhuf_Nwa-DHFTVc7CunyiQxI.roa (hash: K2VF0naJWK7Qtyx/C6l0KfqLVoX8m+LdPWumnPHJSTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5f:ef:9f:fa:77:ba:f0:a0:33:31:50:80:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=74d56191760c1cfb74b70f47e3558cfb19b0c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:43:17:30:57:b9:73:3c:e6:54:5f:99:2d:
37:79:df:e9:2f:ac:c8:21:d1:ad:a5:da:84:42:e2:
e7:36:90:65:f4:ca:e4:6d:4e:b0:45:ee:6e:1e:3b:
51:10:13:76:ea:a3:c2:85:e3:a1:a9:8e:33:bd:f3:
af:e7:e9:b6:09:b0:c2:56:6f:ee:a8:12:89:23:8a:
50:c7:b9:c9:ab:ee:09:90:bc:b1:a5:37:a5:8b:12:
b7:1e:7d:02:42:a0:c3:38:8c:5f:d7:9d:4a:13:ca:
05:3c:eb:ad:5a:6d:88:af:e3:7d:c2:1c:ef:3a:e5:
7c:ab:cd:23:5f:60:7a:10:40:46:f0:74:7b:d0:39:
1b:43:46:09:44:de:61:b0:b4:cc:89:2e:ef:66:e7:
a9:69:d3:89:fe:8e:94:a5:b6:0a:27:4c:8c:1e:2e:
b2:0b:bb:d0:4c:ee:fb:8b:f8:a1:ae:0b:72:cd:03:
58:10:f3:f8:bc:e8:84:0f:25:ce:70:6b:05:45:03:
67:08:1b:2b:f9:d7:47:56:fb:dd:e0:fe:d4:e8:d8:
cc:56:00:3a:71:28:50:c6:e8:9d:8d:94:4a:52:49:
39:ac:40:19:ed:62:85:1e:00:a4:b5:25:ac:61:2d:
48:6b:2d:63:ef:bb:51:91:23:11:3d:bd:3b:0d:c4:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:61:91:76:0C:1C:FB:74:B7:0F:47:E3:55:8C:FB:19:B0:C0:F6
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ce:fb:ef:45:70:42:78:e1:4b:b4:58:e3:8e:7f:ca:65:d6:
71:14:5e:2e:ea:89:9b:4a:fe:eb:13:9d:de:43:64:4d:34:26:
e4:76:e8:b4:57:93:a2:b5:7d:c5:a0:26:ab:59:a2:1d:5e:1c:
66:bf:37:cc:7a:db:bb:da:3d:f5:a7:01:e1:15:c0:7d:df:25:
39:64:af:77:10:1f:59:72:ae:e2:65:80:2c:cf:91:01:b1:f7:
fb:c8:e0:1c:5f:32:d9:18:4f:0b:6c:61:78:b8:0f:70:fc:24:
ad:bf:b7:6c:f3:66:44:bd:d4:ef:4f:21:e5:a1:02:af:db:28:
14:73:ad:b2:27:82:51:fb:6e:8a:c9:9a:cc:3d:13:83:aa:cd:
cb:b4:bd:76:ab:aa:96:ce:06:9c:20:49:62:fc:7c:30:b5:43:
1b:fd:3d:93:83:46:0f:f2:8f:4e:7b:fd:10:76:16:b7:18:e3:
65:13:a4:8d:6d:7f:bc:97:38:d9:e5:eb:71:4e:7e:d1:6b:2d:
07:2d:0e:3b:0a:d5:d1:0a:9c:bf:cc:0d:c7:62:78:32:14:af:
7f:a0:4f:a7:9f:d2:77:54:19:81:30:09:c5:f6:64:6a:66:10:
00:42:d8:27:3c:cf:0b:27:e6:f1:fc:1b:d5:33:0f:d3:6e:78:
8b:95:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:05 2025 by rpki-client