Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier: RAM1AF5+CE5LpFYCIwc/fHcmcJnApPzvkQtLqBxK2zk=
Subject key identifier: 83:4C:D9:E3:12:21:77:A6:DF:54:3E:79:8A:60:2F:2F:97:AA:F5:95
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial: 019A71B875B23301909D3F8E0560523509DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number: 040C
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: F6j4KmquEMkALim+NYhgpHQkL/P6cnIg84xYCVoWGGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:75:b2:33:01:90:9d:3f:8e:05:60:52:35:09:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=834cd9e3122177a6df543e798a602f2f97aaf595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:7c:2b:61:6b:f9:bf:bc:1d:9b:2e:d4:d1:
79:b7:2d:ca:f4:73:97:3c:70:6f:99:4c:ac:e5:c7:
bc:22:55:72:20:67:05:d6:9b:62:8c:75:a2:f6:c1:
aa:d8:d4:74:20:2c:4f:a4:0f:d7:76:eb:8f:54:00:
f9:98:b2:a8:09:ff:8e:34:a8:26:2b:1e:ed:e4:c6:
7c:98:f7:08:a5:5e:6e:29:ab:ca:73:eb:af:ae:93:
6f:53:c3:ab:5f:3c:c6:4f:a6:d6:37:b1:76:13:7d:
b2:26:3f:18:a2:b0:ec:25:ee:31:31:e5:b1:cf:ad:
cf:53:89:6f:73:8e:d5:3c:54:bd:1e:29:d1:6d:34:
cb:23:35:68:c9:ba:da:a1:ac:8a:fc:7a:74:e7:d8:
ca:4d:3e:b2:23:2e:a6:1b:27:e6:d9:01:cb:a7:b6:
b0:3b:ba:79:d5:b2:64:1b:97:eb:42:65:36:bc:d6:
6f:b9:2b:9e:fa:3f:ee:a2:d5:49:41:da:cd:e0:55:
11:64:b8:b6:00:68:de:2b:f4:00:54:da:36:92:5d:
2e:da:4e:3c:23:e1:bb:03:c2:5b:d3:00:d2:68:bb:
95:bb:11:93:3d:e1:64:e2:67:ae:5b:26:72:b1:51:
03:05:e3:d2:c4:01:a6:6c:20:61:dc:2d:43:5f:50:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:D9:E3:12:21:77:A6:DF:54:3E:79:8A:60:2F:2F:97:AA:F5:95
X509v3 Authority Key Identifier:
keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:22:23:53:e6:a6:96:33:11:4b:c4:07:65:ad:1d:8b:e4:9f:
6a:d2:aa:50:f7:73:f4:da:ec:dd:54:c7:b4:71:d9:92:ee:d0:
38:45:e9:5a:78:ca:57:19:4b:53:a3:9c:79:9c:7b:7a:d2:67:
dd:1b:16:d8:1a:1b:c0:65:1a:6f:3a:bc:65:80:75:b4:05:ca:
36:94:0e:79:09:63:7b:f4:8b:89:ea:5b:5e:f5:0e:93:e4:dd:
08:2b:31:b9:5a:f9:ea:a6:2f:0a:54:0a:81:1a:e2:f5:1f:8a:
44:2c:32:80:c7:c7:9c:16:5a:9c:0c:b3:8c:87:4c:73:0d:6e:
fa:f0:fe:a7:c5:32:87:87:3d:7c:e3:f5:82:d9:10:45:51:50:
c0:a6:7f:be:99:1c:a8:75:9b:57:65:14:98:9f:73:77:dc:c9:
5e:18:a4:3b:44:7d:d2:11:6e:3a:fe:29:51:22:46:38:90:bd:
d2:1c:6e:3b:e5:a0:51:4d:45:b3:80:fb:bb:71:74:35:b4:2e:
4c:64:b6:b4:4d:ce:ba:fd:e1:fb:1b:1b:24:cc:b6:b3:fb:43:
94:b8:6e:dc:d0:57:49:87:7f:bf:82:5c:c5:20:a5:97:aa:b1:
e4:db:3a:42:58:48:68:d2:d7:ea:72:50:54:a2:85:3c:0f:4d:
53:25:97:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHWyMwGQnT+OBWBSNQnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2
ZWY5YzEwHhcNMjUxMTExMDcwMTQ1WhcNMjUxMTEyMDcwMTQ1WjAzMTEwLwYDVQQD
Eyg4MzRjZDllMzEyMjE3N2E2ZGY1NDNlNzk4YTYwMmYyZjk3YWFmNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFp8K2Fr+b+8HZsu1NF5ty3K9HOX
PHBvmUys5ce8IlVyIGcF1ptijHWi9sGq2NR0ICxPpA/XduuPVAD5mLKoCf+ONKgm
Kx7t5MZ8mPcIpV5uKavKc+uvrpNvU8OrXzzGT6bWN7F2E32yJj8YorDsJe4xMeWx
z63PU4lvc47VPFS9HinRbTTLIzVoybraoayK/Hp059jKTT6yIy6mGyfm2QHLp7aw
O7p51bJkG5frQmU2vNZvuSue+j/uotVJQdrN4FURZLi2AGjeK/QAVNo2kl0u2k48
I+G7A8Jb0wDSaLuVuxGTPeFk4meuWyZysVEDBePSxAGmbCBh3C1DX1BsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINM2eMSIXem31Q+eYpgLy+XqvWVMB8GA1UdIwQY
MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt
M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw
LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSIjU+am
ljMRS8QHZa0di+SfatKqUPdz9Nrs3VTHtHHZku7QOEXpWnjKVxlLU6OceZx7etJn
3RsW2BobwGUabzq8ZYB1tAXKNpQOeQlje/SLiepbXvUOk+TdCCsxuVr56qYvClQK
gRri9R+KRCwygMfHnBZanAyzjIdMcw1u+vD+p8Uyh4c9fOP1gtkQRVFQwKZ/vpkc
qHWbV2UUmJ9zd9zJXhikO0R90hFuOv4pUSJGOJC90hxuO+WgUU1Fs4D7u3F0NbQu
TGS2tE3Ouv3h+xsbJMy2s/tDlLhu3NBXSYd/v4JcxSCll6qx5Ns6QlhIaNLX6nJQ
VKKFPA9NUyWX/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:18 2025 by rpki-client