Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: HgcYRh5Cd8poAG8LHHJLBGOK3gdODIM7pR0Xe+DKlA8=
Subject key identifier: DB:B0:6E:44:2A:06:12:EE:8A:04:0C:D0:93:77:D1:21:0F:3C:25:90
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 019A71B7727D4AF113AA28DAC2654A2D158E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: CqcbWICA8G1GyU4KAnPd+aFDa3qbMhAaxCfoHLitSPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:72:7d:4a:f1:13:aa:28:da:c2:65:4a:2d:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=dbb06e442a0612ee8a040cd09377d1210f3c2590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:2c:59:c2:52:07:aa:ed:52:70:1c:aa:29:
3d:59:88:5b:24:f9:71:f4:49:ba:1d:08:25:b9:bb:
d9:3e:4d:58:4a:43:81:d8:25:e4:af:1e:db:ce:d8:
9b:3c:36:85:22:47:3d:5a:1b:3b:c6:32:5f:e9:41:
09:e9:fa:92:8d:69:87:1d:b6:cb:d5:b1:de:46:a2:
1a:27:13:67:7e:6d:64:ea:a3:c5:09:1d:f5:5e:2b:
d3:5b:76:93:5e:80:5b:b7:be:ff:11:d4:30:3d:35:
fe:8d:78:67:c9:da:de:3a:29:d8:54:35:93:51:73:
2a:d6:7d:b6:5d:61:1c:fe:b0:c5:0f:22:c2:5e:51:
42:6e:95:a5:89:d0:6d:5b:99:5a:89:05:87:df:e2:
20:73:65:d1:32:06:b9:4e:7b:d6:ac:40:be:ed:83:
f2:64:ab:cb:f7:01:98:2d:9d:b6:da:01:29:df:0c:
66:2d:63:34:ec:c4:03:92:32:92:7e:f1:41:41:6e:
12:cf:e8:79:13:94:cb:2a:00:c5:b3:ee:bc:92:4a:
1c:fd:08:ce:8e:d5:1c:76:48:ad:38:fa:04:6d:de:
7d:43:f4:87:7e:42:20:45:6a:41:93:84:ed:7a:6f:
68:76:4e:8d:44:d1:b9:1d:79:c7:f3:9d:d8:6e:18:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:6E:44:2A:06:12:EE:8A:04:0C:D0:93:77:D1:21:0F:3C:25:90
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7f:2d:e1:d0:b7:03:b2:ea:7f:43:06:18:f6:fb:17:8e:c6:
23:73:c5:d4:87:5c:d4:b2:1d:fe:d2:59:1d:e9:0a:f6:40:c2:
14:5f:7f:5c:ff:6f:00:a5:fd:43:70:14:17:82:78:ab:34:4a:
55:13:8a:39:29:31:86:62:c8:7f:4f:cc:40:6f:8a:18:7a:00:
de:34:43:e4:77:ce:59:20:d4:bb:30:1f:a4:58:6d:18:cd:01:
dd:20:55:84:3e:a0:c2:d1:5a:cc:cf:a1:99:14:63:f4:c5:67:
31:67:21:91:10:38:4e:76:59:73:d2:d7:a5:ae:89:ae:10:a5:
da:87:a0:4c:ff:55:c6:0f:80:6b:85:9a:c3:bf:03:2c:74:80:
ce:d3:fc:c3:0a:3b:56:91:e1:4e:b6:07:69:3e:37:ca:bc:8c:
ab:94:e0:66:d0:4e:bc:6d:c0:fc:97:36:3c:bb:f8:64:c9:07:
c1:0f:33:d2:8b:5f:ab:1e:bd:e4:3c:4b:10:0b:17:e9:19:d9:
3f:77:7a:39:fb:d1:f3:ff:ee:3a:13:c9:86:18:91:6c:71:4c:
03:f5:3b:ab:81:ab:09:a1:1c:51:f6:a2:bb:57:ef:e3:be:f8:
f9:63:f0:c1:b2:5b:56:a8:5c:ac:c8:ee:9f:f9:53:80:13:c2:
80:0a:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:14 2025 by rpki-client