Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json)
Hash identifier: PgexAjlMI7GjUfL9OkbS4sTp61ilbL0Dcpl9vq7xLu8=
Subject key identifier: E1:0B:28:19:D5:80:23:AE:52:F3:E0:BA:88:E6:B1:C8:B2:B2:26:4E
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial: 019A71134203A89D05671C3EA6EA3D73CA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
Manifest number: 1053
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: RVEBnsZv5simQiKQAYigknlepHNt3ReQSUAfH8wMPYs=)
2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:42:03:a8:9d:05:67:1c:3e:a6:ea:3d:73:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=e10b2819d58023ae52f3e0ba88e6b1c8b2b2264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:c8:c1:88:fe:69:a3:69:7c:30:c3:44:4c:
84:a9:d9:53:24:5c:f2:2c:0b:00:ec:03:bc:13:68:
67:0f:0e:91:cb:d3:87:60:d4:d1:02:de:fb:7b:08:
5b:85:91:b6:ab:51:cd:a7:d5:2a:51:0c:73:88:8f:
b5:64:f8:10:4c:bd:34:0e:93:51:2a:fc:17:f1:68:
77:f5:ea:6d:0d:33:27:06:7a:c3:c4:55:65:a6:4b:
78:26:fc:39:5f:5a:28:ac:d3:91:71:64:d6:f8:9e:
2e:58:c9:c7:bf:2a:b8:85:62:d9:1e:1e:56:a9:78:
06:b8:ea:aa:5d:ae:cc:8f:d6:8b:3c:b0:3b:8d:6a:
27:ee:f5:78:12:d8:0a:ca:84:d1:1a:ec:72:7e:49:
25:91:35:07:d2:0e:25:cd:ff:1f:9b:e9:16:bc:fa:
72:3c:67:bd:5f:db:43:54:55:1a:9a:31:69:d4:2a:
8a:4f:31:b2:88:8d:b9:a7:02:12:22:d5:c2:20:8e:
1a:ba:33:c0:46:9b:9c:6a:90:8c:d5:d1:40:bc:ac:
f8:e9:02:6f:15:a4:3d:85:eb:6f:9b:20:e8:43:41:
53:a7:70:68:c5:e9:f7:89:6f:25:07:72:3e:fa:d8:
2b:4a:db:d5:8e:c7:36:9d:40:ee:1d:61:e9:11:84:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:28:19:D5:80:23:AE:52:F3:E0:BA:88:E6:B1:C8:B2:B2:26:4E
X509v3 Authority Key Identifier:
keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:61:fa:61:71:68:d8:c7:45:ed:50:9a:a1:9b:43:a5:1c:43:
b0:4b:17:11:3f:41:06:8b:1c:a4:4b:b1:b0:19:96:10:27:23:
d3:9b:41:5d:be:68:f0:ad:7c:08:2d:50:7f:53:63:82:6f:56:
e3:0b:2d:ec:22:50:c4:cf:eb:17:9b:ab:cc:39:10:d3:ea:ea:
47:f0:5b:c6:77:20:22:2f:d6:79:28:c7:db:d3:ef:b3:3f:84:
d2:bc:79:94:87:7e:c9:71:9f:e9:ab:f9:e7:a0:88:69:2c:2f:
ad:75:df:07:46:cb:10:21:ea:7a:57:cb:92:86:f0:af:73:17:
b8:85:83:bb:14:c4:81:02:6f:44:6c:ca:01:b3:af:bb:2f:c3:
37:1e:55:d2:cc:17:c0:2d:bf:7b:e6:1d:87:0a:2b:33:75:b1:
ee:c2:eb:a7:19:99:88:81:b3:05:86:38:45:1d:50:bc:99:55:
2c:1c:5c:02:61:14:9b:a5:7b:cc:29:90:d2:23:62:99:06:b1:
f8:28:9e:81:c9:94:85:4a:16:79:0e:ea:1f:db:f1:e4:ae:73:
bb:5d:0a:4f:ff:48:68:e0:6d:37:03:9e:e5:70:59:a3:46:da:
6d:4f:56:26:91:ac:73:30:04:08:77:61:f4:a4:19:cb:6b:0f:
26:09:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:53 2025 by rpki-client