Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: mrvBvt6ZNjqekJT77bc3XeCJOwIzomKJsZ85K3s9r10=
Subject key identifier: 85:D7:4D:5B:7D:B3:62:5D:21:51:99:20:23:F7:5D:68:00:55:B4:B7
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 019A70DC0C76921E912E9894A7446654406D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 022E
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: bDLBw5FwHgBuN/pp4QY1/k/PAkjNXwxY7gS4JfxgsLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0c:76:92:1e:91:2e:98:94:a7:44:66:54:40:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=85d74d5b7db3625d2151992023f75d680055b4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:1d:8f:46:bd:3b:51:0d:16:71:8f:fb:0e:
68:33:14:16:7f:d6:0d:e1:39:13:a4:e4:52:4e:a7:
a1:d8:fb:c7:a1:1e:1a:fe:ea:bf:60:f9:24:cc:7d:
f9:12:a7:c5:c7:62:7b:f3:bb:47:3b:74:07:ab:60:
db:a1:5a:07:19:eb:b2:5c:b0:1f:60:22:3b:5b:26:
df:5e:5d:14:45:b0:62:d0:be:1e:68:e8:f4:6f:6d:
4b:ce:5d:31:0b:f9:da:63:b7:d6:f6:18:bf:b6:fb:
03:54:e3:54:5a:af:e6:37:53:7d:aa:fb:5c:d4:7c:
f2:49:5d:5b:ab:27:60:76:68:d3:e0:a4:de:f7:dd:
4a:eb:4c:b1:d5:bb:9d:03:13:7d:89:e3:f3:0b:12:
c4:ba:3c:49:cb:df:ae:b1:8d:4f:66:d6:7b:01:82:
be:b2:17:d7:d9:6e:a5:e6:27:b0:73:cb:4e:47:72:
d3:9c:10:b6:e4:b3:f8:d7:f6:93:32:05:d8:41:e9:
eb:d1:6c:73:97:86:15:52:96:9f:00:81:b8:d5:d3:
2a:d3:d5:01:2d:6a:db:6b:a1:4a:d3:f4:4d:ad:1e:
f9:3c:06:6f:34:37:50:bb:26:ac:6a:e8:79:b8:1c:
a0:4b:96:e3:ec:eb:df:25:3a:ce:35:41:17:38:24:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:4D:5B:7D:B3:62:5D:21:51:99:20:23:F7:5D:68:00:55:B4:B7
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:5c:2a:a4:18:8c:79:50:dc:67:1e:1c:eb:97:1b:a9:2d:
05:58:9d:1c:6d:d2:76:1b:d4:15:10:95:8c:4d:75:0f:e8:38:
b1:9d:ea:e7:be:35:7f:80:50:49:91:70:94:7d:dd:7a:10:f1:
56:52:80:36:a4:c4:85:6b:c6:cf:39:27:7a:42:64:4a:82:b4:
09:d5:31:12:71:29:ac:38:7c:33:ae:ec:11:3d:50:ba:9b:89:
79:d9:1f:d6:c5:05:5e:d6:87:d9:b1:3f:5f:90:7c:72:ee:5a:
64:68:33:fa:85:9f:70:cc:97:51:f2:0a:9b:35:88:4e:05:1d:
28:6e:b5:75:c7:0f:e2:fa:8c:ea:d3:12:1d:0f:b9:90:03:b5:
d2:4c:c0:a8:8c:bb:53:31:25:1b:49:36:e1:2e:2d:d2:cc:6b:
94:76:b2:77:18:f7:b6:1d:a7:89:95:7f:aa:74:d3:35:55:f0:
4e:94:77:df:88:1b:ce:e8:3f:04:27:67:fd:8c:16:b9:1d:b0:
0d:ca:d0:9b:d8:62:54:71:94:19:72:2e:25:5d:01:9b:01:0c:
47:9d:11:f2:f3:54:54:22:4f:a9:09:60:78:6d:65:62:45:1a:
bf:03:fe:98:81:6f:04:fd:3d:06:7e:fd:11:13:dd:ea:1b:dd:
51:d0:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:58 2025 by rpki-client