Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: cGc1S7d/R0VDV3/IPY9G7NqmK4wjvCxpCqhL/cs4+tY=
Subject key identifier: 5D:AD:FE:BF:77:F9:C8:F3:AA:E0:7E:04:A5:26:7E:57:8C:21:6E:02
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 019A72262A56800491695D8E504C1E41C539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 0631
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: mqrDbhJ+W+wUkVPYT7kJlftqMFNYQSNDHmua9GRg3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2a:56:80:04:91:69:5d:8e:50:4c:1e:41:c5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=5dadfebf77f9c8f3aae07e04a5267e578c216e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:2b:8b:5e:4e:af:4e:06:e3:7f:8e:d5:ab:
40:13:69:25:d8:f5:7f:e2:57:ae:38:56:c2:1c:34:
db:6e:18:d8:ee:21:03:e2:ba:5e:68:f7:66:5e:6f:
3b:e8:0f:6e:d2:76:aa:7c:38:5c:15:ba:19:c4:90:
d3:12:e8:b8:66:a3:19:b7:d5:52:86:23:d4:2b:ca:
71:c6:1e:66:da:e5:a5:e6:fc:63:1a:b8:8a:69:29:
62:79:66:57:63:f3:cb:13:05:1b:e2:63:51:2f:fd:
8f:aa:0b:19:71:d7:db:56:7c:92:ca:7b:ea:a9:bc:
53:89:09:1a:48:d5:20:0e:37:e4:72:a2:c5:e0:b3:
12:b4:77:3e:c7:7b:63:a4:8d:8b:3a:5d:b0:89:0d:
47:43:83:13:65:83:69:15:82:9b:85:fd:e4:70:80:
66:78:c0:d2:f9:6d:56:a7:3f:c8:5e:59:e0:7b:fd:
c0:e7:4a:da:ab:11:ff:4f:d2:59:92:d6:6b:ea:57:
fb:71:80:37:58:8f:cb:9a:99:c0:fc:58:48:b8:26:
67:e5:7f:1b:86:b7:e6:cc:af:c5:69:b9:6d:58:79:
8a:28:64:09:82:c7:b5:32:b6:ee:04:f5:9a:31:33:
73:86:da:69:c2:10:18:ab:4b:82:b4:ca:c5:c0:f3:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AD:FE:BF:77:F9:C8:F3:AA:E0:7E:04:A5:26:7E:57:8C:21:6E:02
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:e1:26:8e:27:92:63:2d:55:56:97:8b:4a:39:e7:88:34:
9f:ec:9a:c3:34:20:00:92:80:02:d3:b6:52:95:66:f2:27:fc:
a2:52:02:74:2f:46:60:6f:9d:79:6f:6e:e0:bd:3a:af:12:b8:
c8:ab:6c:c1:ae:af:e4:03:67:bf:a4:a1:7c:b1:2f:e0:07:57:
3b:30:99:5c:f7:b6:5d:ca:e1:31:eb:8b:ff:27:cb:b5:3d:25:
b7:cb:ad:d1:a2:e4:15:2b:f8:55:1c:78:e3:e1:18:94:36:51:
6b:f3:ba:ae:f5:35:c6:f2:8d:cf:a1:84:7f:08:a8:ad:20:a0:
4f:28:dd:27:29:9d:77:44:c6:c7:45:08:53:69:ab:70:56:e5:
af:c4:08:13:0c:e8:3b:f4:f2:b5:d8:d1:9c:77:08:1f:a6:89:
bb:a3:d6:23:4e:08:68:f3:76:de:30:78:f5:73:78:1b:98:b5:
46:ec:57:5a:5f:7c:03:37:61:db:33:30:fd:48:db:24:98:30:
75:6a:30:93:09:9f:45:b0:33:71:c0:25:34:e4:8c:bf:ec:0d:
d6:9e:7b:3b:22:9d:af:a5:cb:3b:6c:a4:87:1f:c5:5e:54:8b:
e9:42:4f:37:65:38:ed:39:93:3d:d1:c7:4d:db:4d:05:57:bd:
c3:b2:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:20 2025 by rpki-client