Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
File: YxB3zMSCuRtFmfUslKiJABOSSf8.mft (raw, json)
Hash identifier: wVDGPO4hMIFHqnjpgew282P5wbXUtsYTCwaWg0VS53E=
Subject key identifier: 0B:36:B6:6F:50:F3:2D:45:FD:29:26:2A:7F:AB:7A:0C:87:76:62:89
Authority key identifier: 63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
Certificate issuer: /CN=631077ccc482b91b4599f52c94a88900139249ff
Certificate serial: 019A70A50BAB985656B43105292C262002FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
Manifest number: 0197
Signing time: Tue 11 Nov 2025 02:00:55 +0000
Manifest this update: Tue 11 Nov 2025 02:00:55 +0000
Manifest next update: Wed 12 Nov 2025 02:00:55 +0000
Files and hashes: 1: YxB3zMSCuRtFmfUslKiJABOSSf8.crl (hash: t6g/Eo09pLnuy+YXm/nEV/m2iIjLnmQOHDaZmK6H9qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0b:ab:98:56:56:b4:31:05:29:2c:26:20:02:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631077ccc482b91b4599f52c94a88900139249ff
Validity
Not Before: Nov 11 02:00:55 2025 GMT
Not After : Nov 12 02:00:55 2025 GMT
Subject: CN=0b36b66f50f32d45fd29262a7fab7a0c87766289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:37:02:b6:17:18:5d:4b:40:ee:4c:5c:58:
2d:1c:69:cf:67:a2:14:b9:a2:b4:84:93:5b:82:23:
91:d5:ec:15:80:5b:6b:a3:1f:1a:25:2b:63:21:71:
b2:7c:17:fe:d5:99:3e:cb:28:8d:e8:03:c1:db:94:
f0:cd:33:11:10:08:67:c6:7e:9a:15:81:5a:d5:6c:
d0:d9:0c:f2:54:5c:85:1b:d4:1c:40:59:40:fc:40:
2a:dc:02:95:8a:83:9c:d9:ba:e7:99:33:09:a8:87:
22:f9:1c:ce:38:70:b5:98:df:8d:fa:04:7d:dc:31:
e2:fe:76:bc:3f:88:a9:1a:19:75:bd:86:ab:78:c9:
03:5d:a6:f9:bf:fe:48:6c:fd:30:8c:0f:14:23:44:
25:5b:a2:8e:61:e4:83:67:7b:d0:07:2b:3a:bf:aa:
cb:d8:b8:8b:71:27:a2:37:ad:38:4f:44:b7:5f:b8:
0a:41:d7:e3:29:f4:cb:27:27:d2:6d:31:ea:55:67:
e4:fc:18:75:df:39:06:8c:bb:73:2b:03:8c:73:0d:
d6:84:b8:82:34:be:ea:01:ca:98:be:7a:7b:9c:0a:
d1:cf:94:fb:f6:69:86:6a:7a:ec:19:ee:1d:ea:94:
40:e3:7f:5b:dd:f7:d6:fc:d3:61:b6:91:29:3d:1b:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:B6:6F:50:F3:2D:45:FD:29:26:2A:7F:AB:7A:0C:87:76:62:89
X509v3 Authority Key Identifier:
keyid:63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:24:87:06:df:7a:09:05:14:c5:de:83:5e:b0:26:8b:38:bb:
02:8c:a8:cc:e1:b4:24:37:1c:09:46:47:2d:5b:3f:4e:41:bd:
a6:17:fa:04:d5:90:a5:23:50:be:11:4f:83:1e:9f:78:cc:8c:
ff:4a:d4:aa:34:8b:e9:5f:78:35:b3:81:3e:63:53:f5:3c:a4:
2c:ce:2f:7b:32:ee:95:11:d4:c4:ba:73:fa:45:87:e0:91:8a:
02:35:7b:26:be:8c:9e:31:ff:82:ad:8d:4c:e5:46:32:e4:6f:
87:b9:e6:58:3e:8f:9f:7c:f9:48:c1:eb:e2:91:36:34:b0:b2:
76:03:08:eb:7e:b9:87:1b:24:7d:d9:1f:02:3c:7f:49:10:22:
1f:f0:fa:21:82:7d:21:28:9b:67:c2:bd:d7:e0:2a:93:d7:fa:
f0:96:b0:81:42:27:61:6f:5a:be:81:94:eb:62:38:65:27:35:
3f:f5:23:b5:9a:db:96:eb:17:1e:81:33:49:8a:a8:c7:be:e8:
11:a9:a8:4f:aa:10:cf:cb:6c:84:11:b7:e2:61:8b:24:86:94:
53:5e:c5:4a:67:d3:7c:0b:9a:a5:72:a4:81:b3:1b:0e:79:6a:
a0:e1:e7:d1:7c:25:dc:0f:8e:5f:72:40:62:43:d4:01:8f:20:
36:50:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:07 2025 by rpki-client