Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: 4tiRtofF+BHz695eowpkHg3+Eq5ySKlSuBJiVx0EAM4=
Subject key identifier: 94:04:DB:E8:44:1A:70:AC:18:4A:38:49:C7:D7:50:31:48:66:7B:53
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 019A725CB488ED93984956B987F64FA7F619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0E13
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: s+ptBtM8BMccQZjDYYIN3jgoBMqpJlFj/p9KVnqnFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b4:88:ed:93:98:49:56:b9:87:f6:4f:a7:f6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=9404dbe8441a70ac184a3849c7d7503148667b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:9c:b9:bc:67:74:64:cc:8f:a9:82:8c:3c:
2d:b6:67:dc:21:c5:ba:85:78:c4:f2:96:e5:a4:64:
cb:b0:8f:54:43:7a:cc:9f:a6:74:ac:bc:3e:b9:e1:
ab:26:30:e3:86:63:9c:2b:6c:d6:c1:53:3a:45:8f:
9d:c1:39:2d:e4:57:1f:89:b6:c7:a3:1d:c8:6a:a0:
08:14:e9:cb:e6:83:bd:fd:62:2d:ca:ce:b8:88:23:
d4:e2:0d:75:7a:1e:04:c0:5e:15:01:40:2e:65:af:
a1:de:28:e5:17:1d:82:70:13:22:a7:72:f8:c2:dd:
8b:a7:66:bc:75:34:80:2a:23:2f:50:4e:5c:19:f5:
34:05:5c:e3:f4:e8:8b:db:87:dc:e1:d8:39:86:fc:
93:99:40:f1:24:26:eb:27:b0:ae:62:cf:9f:e5:c8:
ba:8d:df:67:6c:24:57:bc:3e:58:5e:d3:ee:79:cd:
cd:22:5b:1d:79:cb:60:1d:88:e8:5d:06:81:67:06:
c0:23:ac:87:ed:90:a4:09:8b:16:da:15:c3:7b:6f:
2f:c7:1c:5b:bd:18:20:e2:21:ae:1a:af:7a:ca:75:
c1:10:48:b6:ff:58:b6:64:e9:a0:05:a2:e5:42:bf:
8a:2c:fe:8c:a0:52:3e:06:02:4f:ca:be:47:2e:a7:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:DB:E8:44:1A:70:AC:18:4A:38:49:C7:D7:50:31:48:66:7B:53
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:19:27:aa:e8:bf:c9:73:eb:99:7a:4e:54:2c:9f:af:5d:9f:
4f:07:a6:27:b8:43:f9:a7:b6:ee:61:23:85:af:86:95:84:36:
89:1b:f5:1c:18:80:13:28:b8:b8:96:fd:02:e3:e9:6a:45:ad:
08:06:a7:38:74:cf:16:0b:40:56:98:8f:67:db:80:d1:ce:53:
d6:62:d2:30:a0:2a:a7:c7:d9:8f:36:d7:31:26:02:91:d6:90:
91:8c:6b:44:2e:89:fb:95:f7:47:25:a2:23:c5:db:55:e4:2e:
42:1c:c0:92:32:19:99:ab:aa:f8:6d:a8:02:c4:24:a4:84:0f:
29:01:49:6b:4a:2f:74:12:fd:cc:89:7b:cc:08:49:9d:0d:d8:
e4:0f:97:41:9d:d2:61:17:97:16:ed:86:5e:fa:e6:10:58:01:
1c:20:c6:7a:07:d6:2f:cf:22:b8:8d:f7:72:a2:61:0c:57:16:
33:33:86:20:6e:4a:ac:87:c6:fb:c4:ad:3d:5f:48:aa:93:8f:
ee:6d:91:45:7b:65:2b:98:82:5c:59:59:53:af:41:c3:c2:13:
77:56:2f:6f:f8:4d:c1:40:95:b7:f1:31:3e:98:e2:f2:8d:be:
cd:af:05:69:65:95:f4:cb:cc:38:cd:7d:3c:a3:3b:b7:13:df:
59:62:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:32 2025 by rpki-client