Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: yl74knwuxL32C+jgy95XfdQpeR4tUF1QDtMlfzzSsnA=
Subject key identifier: F1:F4:D4:E1:61:79:82:A3:83:AE:C0:AA:15:1B:21:42:2E:1F:94:59
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 019A71132C0409F13606B5F6F4FBB84F577E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0E8C
Signing time: Tue 11 Nov 2025 04:01:13 +0000
Manifest this update: Tue 11 Nov 2025 04:01:13 +0000
Manifest next update: Wed 12 Nov 2025 04:01:13 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: QdwfGteXcmD28BXJU5SdodVXszuKJUm5YW0oZ2AF/bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2c:04:09:f1:36:06:b5:f6:f4:fb:b8:4f:57:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Nov 11 04:01:13 2025 GMT
Not After : Nov 12 04:01:13 2025 GMT
Subject: CN=f1f4d4e1617982a383aec0aa151b21422e1f9459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:2d:d8:63:a4:28:30:6d:17:50:01:92:17:
40:d5:c5:56:bf:a3:2c:3c:51:98:a5:73:69:10:ac:
3f:69:39:18:02:86:67:72:06:99:a2:62:0b:f9:67:
68:fd:6c:ed:5e:d7:e5:41:aa:44:fc:03:fb:7b:59:
ad:94:fd:b3:53:a9:7d:50:f0:f3:36:96:a1:07:e1:
c4:38:6c:8d:47:9b:bc:1f:c9:92:1b:39:e3:5b:a8:
17:bb:66:9e:1d:b4:9b:08:1e:47:2c:78:ae:98:4a:
22:06:0f:fb:14:37:08:e1:5d:5e:45:ea:bf:d7:c1:
90:05:55:68:e4:c0:a4:ae:ee:f3:ec:56:93:57:6e:
5e:60:23:78:a8:0b:06:b5:3f:8f:37:9f:f9:0d:7d:
b6:c5:a8:1f:b2:1e:bd:b4:25:13:27:01:55:62:01:
b2:64:0b:3c:3a:af:df:3c:f2:26:cc:80:c9:00:6a:
81:0c:46:fd:10:ff:fd:b0:7f:57:72:aa:4a:32:56:
9d:f5:17:74:6b:a0:cf:da:a1:ef:88:a5:17:48:14:
4e:0a:d8:c5:b6:c5:fd:24:5f:b0:b1:f7:b4:ef:d5:
d7:84:a9:85:fd:da:55:b3:1a:48:d5:06:fd:74:b3:
26:4b:28:26:bb:73:a2:4e:d5:8a:19:b3:2f:f7:84:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:D4:E1:61:79:82:A3:83:AE:C0:AA:15:1B:21:42:2E:1F:94:59
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0b:cf:11:f8:77:6a:62:aa:98:27:30:84:3c:c6:36:da:49:
64:40:9e:cd:c5:8b:73:db:07:da:a8:6d:d6:ad:2b:d1:b9:a3:
ac:70:e6:40:e8:ff:ca:2f:23:b7:1c:f1:86:3e:70:b2:59:df:
61:6d:dd:28:3a:05:aa:20:ee:a1:73:0d:fe:c0:fb:89:9c:c9:
02:b2:4f:aa:cc:ac:49:54:a5:2e:34:97:97:67:1c:1c:9c:7f:
05:95:06:59:59:26:74:ec:06:dd:f1:9e:68:3b:84:47:9f:22:
cd:ea:d4:f3:71:ad:1c:12:b9:69:5d:de:9b:9a:bb:2c:72:d5:
80:fb:24:66:e2:09:20:a7:8a:50:80:6d:6e:b5:4b:85:eb:d3:
fd:63:1c:1d:17:af:fa:f7:4f:3e:c7:60:4c:97:a6:1d:92:29:
3c:08:2d:31:91:66:45:e4:49:22:7c:47:6f:df:08:e8:fe:44:
d6:0d:d1:8b:83:f8:3d:da:4c:96:a8:c6:ba:c1:e9:29:d8:15:
87:97:aa:92:11:9d:2d:8c:eb:f0:42:43:b4:ef:72:e0:55:cc:
ca:ad:1d:75:6d:a5:1a:b1:7b:d6:b3:75:4f:34:41:0e:45:d1:
1d:4b:76:6c:af:de:80:b0:9f:98:19:34:84:41:ec:2a:71:08:
08:9b:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:55 2025 by rpki-client