Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: g0eCOHmvKORlc4PQwy29gkD1xfv9AEl2ud18/de9JDM=
Subject key identifier: 9E:89:15:3D:48:18:12:DD:B1:D3:79:AA:0F:86:E6:A3:58:C3:8D:13
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 019A733883C499DCD6A502F1F6AB416967F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 034B
Signing time: Tue 11 Nov 2025 14:01:14 +0000
Manifest this update: Tue 11 Nov 2025 14:01:14 +0000
Manifest next update: Wed 12 Nov 2025 14:01:14 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: RTn8PAWXf6vwM08IVa47kM8FJe0UbQZ4im9TH4sNyyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:83:c4:99:dc:d6:a5:02:f1:f6:ab:41:69:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Nov 11 14:01:14 2025 GMT
Not After : Nov 12 14:01:14 2025 GMT
Subject: CN=9e89153d481812ddb1d379aa0f86e6a358c38d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:2d:a2:57:7e:ba:05:ff:65:bf:a2:df:21:
83:8a:d0:38:4a:74:a9:15:d8:d6:29:ef:35:c7:75:
11:f0:9a:c5:25:79:cd:15:10:ac:7a:37:40:25:02:
99:a8:7e:e6:00:3b:2a:b9:0e:e4:7b:b8:3e:6a:ae:
74:a3:de:33:bb:d3:2d:44:f8:91:a5:8c:48:f6:08:
cc:76:bb:76:08:df:80:fb:db:75:e8:59:81:d5:63:
5c:65:92:4e:4a:f5:50:38:65:20:d4:d7:9c:63:e5:
81:06:6e:c3:cf:64:cb:de:37:84:fd:55:0d:fd:0a:
04:f0:26:f0:bd:7b:e2:75:f4:b9:7a:58:59:74:e0:
f2:8a:3f:38:8f:49:88:c9:0b:d5:a0:2f:08:e9:56:
d2:e6:0f:8b:dd:fc:67:b6:fd:9f:9e:0b:fb:00:02:
02:2b:90:4f:f7:d3:bf:27:c9:13:74:c7:6a:a7:6e:
ae:59:bb:28:8a:48:9a:f3:cf:f4:9a:f8:9f:9b:1c:
48:da:ea:cd:a2:c5:cb:11:62:c9:49:e8:9c:99:53:
81:e3:c3:89:06:53:84:1e:ce:f7:7c:9d:82:ed:4c:
cf:cf:c2:6d:3b:0a:45:50:02:93:ba:4d:c5:53:99:
bb:bd:1a:ab:f6:08:4a:22:4f:24:b5:14:fe:e5:5a:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:89:15:3D:48:18:12:DD:B1:D3:79:AA:0F:86:E6:A3:58:C3:8D:13
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2e:d4:39:82:74:8f:bd:83:c8:b2:d3:72:9d:5c:98:c6:cd:
cb:eb:d7:3b:2c:37:ca:1c:04:02:f9:88:5e:66:04:19:56:f0:
34:4a:ee:43:4a:e9:fb:5e:3e:14:9d:b7:4c:08:b8:16:e7:36:
5f:34:89:1a:ba:2d:a2:82:e5:4e:9e:e1:89:72:c0:0c:3e:35:
7f:31:76:62:c8:cd:e3:08:eb:c2:94:8c:ef:28:ea:40:97:4f:
a7:da:a6:1b:71:d7:d8:00:87:5f:5f:be:6b:14:d0:77:48:2b:
d1:48:93:bf:5d:a5:6c:f2:b9:ce:25:30:61:5a:a1:b5:d8:d3:
c6:7c:a6:46:dc:cb:c0:bd:c8:59:12:a0:7f:78:2a:4d:41:4c:
11:98:1d:ac:e4:b3:04:4d:df:66:fb:98:0c:8f:40:c5:c5:da:
93:67:55:d2:fe:48:ec:c6:e9:3e:66:ec:31:97:67:12:b9:bd:
ac:45:a5:7e:c4:29:9c:ae:54:32:6a:dc:eb:11:7e:e7:9b:eb:
19:b6:61:bb:be:63:06:9b:26:59:e1:5a:31:ab:01:9c:10:36:
c5:14:9e:1c:81:3f:9d:5a:be:39:d6:d9:29:ee:94:b1:f5:13:
06:0d:c8:04:82:65:cb:52:b3:6a:6f:98:44:95:a9:c5:51:7f:
83:72:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:23 2025 by rpki-client