Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: mGilAEOJb1AtLrgmj4xTwQguj6llM5M/xhEExXFdi2o=
Subject key identifier: BA:06:AF:B6:28:31:C0:74:71:5D:AB:2E:3B:44:CA:A2:CF:B1:9C:8C
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 019A71B93594A896E395B7A1AE9A2C5F9D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 1377
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: 5Lt7KQOhvgT4oDkygMDJW16ZRCjsj2F8RmUpfc6oMpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:35:94:a8:96:e3:95:b7:a1:ae:9a:2c:5f:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=ba06afb62831c074715dab2e3b44caa2cfb19c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:95:06:3a:3f:7e:51:66:2b:b1:ad:95:b5:
a4:5b:d8:3d:11:e4:db:61:9c:c4:8b:68:78:17:65:
cc:f0:66:38:0e:94:21:a9:a7:eb:bc:87:7f:c1:66:
98:61:11:b0:6c:b0:d3:63:8d:cf:78:e0:af:9f:24:
dd:c4:ec:17:c4:51:ca:b9:57:83:ba:14:24:26:4a:
67:bd:ef:3e:42:e4:d4:c3:60:a4:de:a0:0a:57:0d:
4b:6c:94:2a:4f:76:60:88:60:df:26:36:96:3f:0f:
19:31:34:7a:35:ad:f1:05:48:60:68:28:cf:73:f5:
1c:cb:73:ed:9b:01:5a:6c:53:ea:46:76:47:d2:30:
f3:62:38:b5:0a:50:d5:b5:e5:5b:78:50:53:90:ee:
15:51:58:98:d4:be:13:8f:6a:1e:8c:4d:4e:9a:6d:
f5:48:5f:8d:27:3d:58:28:fc:28:b6:6d:92:d7:43:
15:9b:e7:4b:9b:0e:b8:b0:e7:e0:28:bd:2e:a7:3b:
2d:0e:48:e1:b3:14:f7:8b:08:b3:5c:a6:d6:69:bc:
33:2e:b8:b9:a0:9d:7e:2a:4e:eb:18:3b:48:58:33:
ba:eb:ae:4b:99:f2:0b:24:4b:b3:fb:51:20:88:4c:
e5:cc:dd:83:de:93:e5:55:46:1c:6a:26:05:1b:1d:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:AF:B6:28:31:C0:74:71:5D:AB:2E:3B:44:CA:A2:CF:B1:9C:8C
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:ff:da:e9:4a:57:0b:c6:98:c1:b8:0b:22:33:13:c8:2b:
c6:fa:8e:12:f6:3e:b9:af:63:6e:20:35:5b:47:bb:05:b5:07:
90:fa:c3:0d:9e:8d:23:62:56:77:75:6a:82:bb:f0:95:58:2a:
43:ec:12:9d:00:85:32:37:cb:5a:01:4c:1d:53:dd:c2:1e:b8:
ae:3a:c9:7e:32:6c:c0:8f:94:92:2b:19:57:63:a1:fd:aa:c8:
47:c1:eb:67:3f:e0:33:ad:2a:a7:1e:4d:6f:20:94:da:ce:e5:
3d:78:ab:c8:40:80:fd:e4:63:fb:2d:89:25:c2:d9:30:46:55:
76:31:07:00:60:92:11:af:86:b7:b1:f6:64:b4:90:82:6b:13:
7e:fa:3f:e6:8b:74:f7:cc:96:f8:a6:8d:3e:b5:b5:ef:70:64:
02:4f:e0:6c:58:00:08:4b:e8:d2:ce:f9:fb:d7:2b:0f:50:31:
30:d1:04:59:42:06:a8:6f:f6:80:d5:8e:08:87:ec:c9:2f:17:
f3:fd:f3:57:90:b2:92:6f:6a:ed:65:df:8d:c4:65:87:9e:04:
6b:4b:6f:82:64:13:c4:5b:1a:33:05:a3:74:68:87:16:77:5b:
f9:f0:30:61:3d:78:a2:27:35:7a:8e:f4:e7:79:3d:71:fb:3b:
e6:79:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client