Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier: TmTolNaBN9AvQY7W864QQyS/1871q9DQ66DBG5FkvbE=
Subject key identifier: 5C:69:48:5F:6F:E0:37:B4:DF:01:71:17:40:29:94:93:DD:BA:02:CB
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial: 019A71808591022F4A5DBF7E2FB89EE53713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number: 0E54
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: LaaUaGthrmis7j7/x3iuEXz9PWXd5vfkWPcODb3kpAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:85:91:02:2f:4a:5d:bf:7e:2f:b8:9e:e5:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=5c69485f6fe037b4df01711740299493ddba02cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:2b:17:52:98:f4:7b:ae:1d:af:31:61:93:
20:fa:9c:f0:08:e7:ad:2d:ac:59:3c:55:03:e1:e3:
12:3d:93:6b:54:08:bb:27:15:6c:5b:9b:02:80:a4:
86:ba:27:f4:7b:69:bb:55:14:e8:66:c3:f6:e4:8f:
8e:3e:de:13:b4:30:ae:06:ef:13:9c:2d:e3:08:db:
e5:2b:2b:70:7f:f4:49:a1:fa:07:57:cf:d8:34:e7:
6a:43:4b:1c:ec:74:bc:38:01:ac:80:52:b4:58:22:
2d:47:9c:4f:9d:6a:37:30:fb:11:62:c0:a9:3b:d1:
d9:25:51:cc:f2:29:4c:ce:6d:30:e6:1d:68:35:58:
97:24:57:de:77:65:c1:81:f4:c7:95:34:e0:34:2f:
d4:8b:7b:41:5f:83:27:77:34:20:87:13:4b:93:94:
23:44:44:78:8f:ad:a9:2a:a2:3c:d9:cd:3e:fa:76:
c4:1e:65:90:91:21:34:1b:f1:22:b3:13:d1:33:ec:
68:93:d7:0c:5a:a5:45:e6:ad:12:8e:a3:55:6d:24:
62:37:67:46:04:12:84:6b:83:22:e9:93:8a:e4:e2:
4c:fe:90:2b:f5:22:a8:32:e2:6b:12:5d:1b:c2:f7:
3c:94:f8:2a:99:81:96:3c:b0:86:31:02:42:4c:ec:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:48:5F:6F:E0:37:B4:DF:01:71:17:40:29:94:93:DD:BA:02:CB
X509v3 Authority Key Identifier:
keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bb:54:79:48:a4:f6:d6:3a:bc:db:f8:06:a6:e8:56:d4:fe:
2d:d1:f0:16:ea:11:44:f5:dd:f2:e0:1b:df:be:02:b1:06:58:
a2:94:7f:cc:cc:fc:ec:cd:1f:d4:3c:c5:ed:4e:fc:1c:14:ef:
f5:21:9e:b0:07:65:57:66:1e:c1:64:83:63:33:c8:cf:d4:18:
62:06:9e:93:2a:d2:2d:98:a1:13:62:b5:93:f1:4b:4b:4c:12:
2d:f8:72:b7:ba:bc:5b:c8:9e:82:13:47:4b:83:2a:21:fc:22:
af:24:a8:05:5c:d1:38:17:a7:a4:42:93:e9:35:a9:f5:7f:86:
3e:05:ba:da:8a:3c:20:95:37:81:3d:7b:dd:56:f5:92:e7:42:
37:9d:1f:d3:a7:1f:97:95:08:9c:d3:e5:3b:6d:c0:16:c2:7b:
d1:92:06:fe:09:83:9a:18:95:03:4d:d9:b5:5c:73:84:f7:07:
c2:b2:b0:e6:c9:e2:7a:73:70:f1:33:c6:f9:54:aa:cb:9a:ad:
46:e6:c2:e5:f7:99:71:16:03:7a:b9:a8:6f:38:a1:55:37:09:
fa:ea:ab:48:b5:de:cc:08:96:34:c4:86:47:49:fc:21:2b:cb:
8c:f3:a4:2d:9b:3d:22:e5:d8:14:c4:40:45:3e:80:f4:86:1e:
a8:05:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:50 2025 by rpki-client