Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
File: y3yVUPThoer5UHL7G5q7JpVNJj0.mft (raw, json)
Hash identifier: v+zsV9SbQni4kFpFhuOOw9MYzVmx3AEn2WvW/o7E5nI=
Subject key identifier: A8:63:C0:3D:D3:F3:22:39:D7:71:C7:7B:B6:CE:90:F4:97:38:AC:2B
Authority key identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
Certificate issuer: /CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Certificate serial: 019A72938A8D7C723EEA69A4C848B9C6938A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
Manifest number: 0DC7
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: y3yVUPThoer5UHL7G5q7JpVNJj0.crl (hash: n6i0wz6xFNM4BYGk+23xCF5AVG3/fEptyRUD8Rjf6bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8a:8d:7c:72:3e:ea:69:a4:c8:48:b9:c6:93:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=a863c03dd3f32239d771c77bb6ce90f49738ac2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:dc:eb:cf:aa:6f:9f:51:fd:7d:d3:13:55:
04:d9:b0:ea:b0:4d:7f:fb:66:9b:a8:0a:1f:92:bb:
30:85:8b:c1:ec:10:bb:a8:84:7e:22:8c:f6:b9:43:
a8:97:9f:99:23:d1:bf:d6:fd:4f:49:55:50:87:ff:
cf:9e:d5:d1:cc:79:7d:f2:86:81:f8:69:5e:bc:c9:
69:5e:be:83:d9:4f:e0:0e:fe:91:19:70:03:59:0b:
bf:3e:77:3b:02:e0:f4:6e:70:7a:67:35:1d:dd:79:
0f:c9:37:21:52:d4:55:d4:2e:f6:ce:5b:32:0b:d5:
d5:9b:32:ac:ae:d7:52:9c:5a:83:1e:cf:1a:bc:33:
2a:83:91:ac:21:a9:86:17:19:f6:5d:80:86:d7:6b:
d8:dc:20:e4:1b:56:8c:53:e8:a4:bb:3f:f3:5c:1a:
37:d0:1a:f1:da:fc:a4:e9:4d:04:b4:83:48:e2:07:
2a:d2:07:75:f6:2d:34:5b:6a:b4:21:64:3b:10:35:
19:ea:12:09:64:6d:9c:a7:42:9f:74:51:96:47:63:
9a:ad:6c:4c:ad:8d:32:66:4f:60:4a:da:00:25:b6:
e9:bc:7b:dd:ae:1a:44:d7:a7:3b:ab:b5:aa:4e:4d:
6b:28:e0:3e:5e:75:15:7d:50:ee:17:ee:ca:6d:11:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:C0:3D:D3:F3:22:39:D7:71:C7:7B:B6:CE:90:F4:97:38:AC:2B
X509v3 Authority Key Identifier:
keyid:CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b5:72:99:f0:34:76:23:4c:2d:69:82:05:33:91:39:af:fb:
e9:c9:a4:3d:b3:b8:6a:0e:ae:c6:50:95:4f:36:59:1a:32:a9:
c8:39:a3:a0:86:b0:51:46:87:d8:19:cb:d1:d9:36:21:4a:d1:
23:af:6a:ad:78:91:63:45:2e:bd:54:24:f4:b0:4b:f9:29:58:
eb:f4:dc:9c:df:8d:1a:50:39:58:47:a1:bc:c2:e3:17:52:0e:
15:6f:d0:f3:2b:86:cf:ee:b6:73:3c:f5:b7:de:c3:1d:c7:73:
01:74:6f:b4:fb:88:f6:da:be:02:58:97:73:e2:31:78:d9:b3:
e2:60:ca:c1:c9:03:2a:32:30:2f:a5:b2:65:fe:cd:0e:e7:28:
d8:64:40:8b:06:4f:e8:50:4a:42:68:26:64:68:3f:3c:a0:92:
f3:3a:d7:d9:34:a2:8b:9e:27:5b:f5:17:9b:8c:10:94:20:a2:
c1:c0:b4:dd:31:8d:33:6c:76:54:8b:03:b4:c3:cd:d5:e5:26:
ce:8d:80:2b:39:97:1f:2c:55:19:70:3c:f9:63:d1:42:7e:07:
b8:41:b1:1f:cc:c1:75:ce:88:57:4a:04:7b:29:a0:51:72:85:
61:ff:78:4c:1e:7c:87:16:6d:21:b9:c6:d4:7c:1f:83:96:2d:
a9:f5:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:06 2025 by rpki-client