Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier: qBTLVvULb0+tItNDR5z0tDh0pSK/WlHZKnNSgcWTivM=
Subject key identifier: 7B:98:AD:56:61:9C:D9:79:0C:FD:5C:1F:08:41:1A:77:7F:C6:22:79
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial: 019A71B78DCC384FEFBB0A19A53F67F941E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number: 0C25
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: FDpoa5l0vnyNmBMwCInBgxB0SHjfKn1KcUszp9RobN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8d:cc:38:4f:ef:bb:0a:19:a5:3f:67:f9:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=7b98ad56619cd9790cfd5c1f08411a777fc62279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:65:77:fe:a5:d1:b0:70:d2:08:b7:d9:17:
2b:bc:ad:c1:42:92:59:b6:79:eb:8e:58:10:f9:ac:
3e:9f:16:e3:13:12:16:f0:d7:7c:11:67:72:49:62:
f1:96:40:16:fb:99:eb:b7:8e:f8:33:29:c5:ff:37:
e8:d2:ef:75:33:97:2e:33:ca:fc:10:d8:2c:13:b7:
47:66:67:78:1f:fa:78:80:07:e2:cc:c8:8a:3c:d0:
cc:51:3d:d3:fe:94:dd:97:15:51:1c:99:2a:09:c4:
b8:a4:2a:e6:f9:70:2e:49:6e:aa:08:78:1b:86:c8:
5d:f0:df:c3:11:1b:dc:c7:16:43:f7:e9:92:9a:43:
5e:b7:cb:d5:a3:c6:46:f5:48:73:03:8b:29:31:72:
24:c5:bb:54:33:11:24:cd:55:6a:e6:40:d8:fd:ad:
e1:27:25:30:da:d1:b8:67:72:ed:9c:ec:d4:02:37:
b2:c2:c2:a0:b7:0a:f6:95:fd:3b:fc:c6:dc:3e:19:
ba:d2:13:11:30:59:e2:3b:1a:81:a2:15:cc:7b:73:
4f:93:93:89:0c:85:c1:6b:99:44:d1:ee:d0:d9:6b:
ca:f3:49:49:f7:bb:4a:d1:cb:8f:68:19:38:31:d1:
0e:b1:d4:03:f8:58:f7:10:5f:01:72:39:ae:6d:d1:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:AD:56:61:9C:D9:79:0C:FD:5C:1F:08:41:1A:77:7F:C6:22:79
X509v3 Authority Key Identifier:
keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3f:8a:9b:c2:6a:8f:d9:e7:a8:49:3a:0d:fa:ed:e7:db:cc:
21:3d:5c:03:bc:6b:30:b5:d9:94:2c:dc:01:ce:0b:ef:a4:0a:
cc:c8:ad:e0:81:ff:ce:8a:e9:57:15:90:b1:69:ba:5e:c5:0d:
a4:85:70:55:d4:6a:c4:a9:ec:49:d9:26:bb:7c:cf:b8:9e:27:
0b:c9:54:70:e7:b1:67:08:ee:c2:a4:b5:8d:b0:da:8b:8d:e8:
4a:b4:8b:f0:3b:f3:06:d2:c0:69:00:84:b3:a5:4e:50:1f:85:
5e:b6:32:29:45:23:00:85:92:cb:80:35:47:be:c2:c6:37:4e:
99:57:bc:a4:b0:91:47:b6:e3:f5:bd:49:77:98:53:aa:ba:9e:
42:c6:0d:df:c3:87:70:d2:a5:15:77:cd:0e:86:e4:99:bd:d7:
77:10:d4:18:1b:74:a5:84:27:5e:67:d0:b3:01:76:9b:72:6a:
f0:e1:d8:b5:12:ff:51:3a:bb:6f:02:93:d0:0b:c3:de:2d:8a:
1e:d6:c5:51:2f:15:c2:d3:fd:bb:9b:e5:2b:da:68:00:13:cb:
87:ba:d2:bb:5d:46:e9:6d:a7:e7:93:03:64:d3:57:3d:b4:ba:
21:6c:49:35:c6:bf:52:53:82:18:9c:76:cb:3b:d2:53:b1:f5:
71:24:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:28 2025 by rpki-client