Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier: yRx9kPNLRe6onoYmFcbb5gvWJjLCIjeYs2MGY8+KpB0=
Subject key identifier: 04:F8:6D:29:58:54:37:9B:D7:65:9C:8F:CC:88:FE:DB:20:57:2B:7B
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial: 019A711347D5EA94F5A92E0F11581E9073C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number: 0693
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: YOm3wNY5YsQdKv+YBYJA2Gdk8q4i2z6ONEyJNH1sa7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:47:d5:ea:94:f5:a9:2e:0f:11:58:1e:90:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=04f86d295854379bd7659c8fcc88fedb20572b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:59:5a:aa:9e:2c:f8:5b:15:29:0b:0b:ea:
6e:cc:b9:df:67:05:80:31:a8:eb:85:96:d0:93:e5:
a9:c2:16:3c:78:f6:07:53:d0:b9:a1:be:0b:5b:cf:
b8:8b:e7:00:71:8e:c9:3e:ae:58:87:42:80:a6:18:
bf:b8:d5:e0:d9:b1:7e:4b:03:ae:b2:b4:42:25:cc:
13:b3:e6:5a:b7:7a:08:7a:f9:60:db:db:3c:d1:bc:
da:33:4f:7c:1d:06:a4:f8:8b:cc:ba:f3:fa:18:23:
23:de:ee:e6:45:14:0e:dc:31:c6:b0:ed:2b:5e:1b:
0d:37:17:c5:95:f1:34:26:8b:6e:9a:89:c7:d6:f8:
9a:58:58:d3:28:b2:fb:f8:0a:6b:34:a3:b9:13:15:
0d:db:62:84:f7:10:0b:f6:cd:e6:de:84:9f:93:17:
30:e8:af:8b:3a:4f:3a:54:74:2d:0f:77:e2:f6:af:
f8:b4:99:9a:3d:6b:f0:a4:5e:87:30:cd:3f:ca:ec:
f9:eb:2c:90:e8:3d:35:a9:29:08:a5:ae:83:b3:cb:
70:6b:8e:6f:c4:e7:9e:0d:34:bf:23:b2:b8:96:bd:
44:e6:64:0b:be:b7:99:d1:7a:08:a2:1a:1a:26:53:
a1:91:2d:a8:b9:47:5e:39:17:fe:02:2c:12:c9:0f:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F8:6D:29:58:54:37:9B:D7:65:9C:8F:CC:88:FE:DB:20:57:2B:7B
X509v3 Authority Key Identifier:
keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3c:28:9a:b2:09:35:28:da:45:0a:5b:a2:8c:20:49:10:81:
68:06:57:16:84:40:18:39:23:32:31:c5:8e:10:68:88:4e:11:
04:27:85:24:c3:28:7c:f7:48:e4:d4:6b:d8:61:a4:b5:d2:6e:
e6:20:19:7a:40:fd:a2:27:66:28:d8:9b:db:23:0e:7c:90:65:
24:ba:42:31:5f:95:23:c4:8f:fb:ee:2f:76:60:9a:e8:f5:e0:
49:8e:a9:68:3c:4e:a0:85:0f:d5:a7:56:61:28:70:3e:0e:ca:
e2:4a:0d:1f:a6:48:a1:9a:1e:25:53:9f:b1:8c:fa:e1:d7:62:
51:20:4e:5f:a9:0e:4e:b4:64:5a:d7:5d:8b:9b:a7:d3:23:c7:
1a:cc:3b:56:11:ed:8a:e1:ed:b8:a5:db:3b:b1:ed:a2:0a:8d:
d3:bb:ed:9f:30:e0:cb:b7:cc:b0:c1:40:bb:34:be:db:cc:49:
40:85:e6:ed:ff:0d:50:91:a8:ad:16:cb:dd:e2:b6:98:33:b9:
62:3a:99:66:44:46:7f:79:1b:fd:c9:ab:ce:e4:3d:3e:aa:70:
36:89:b4:2f:8c:2a:b6:35:59:c0:b0:a6:2e:17:06:97:c4:9c:
a3:96:e6:04:69:5b:e8:d5:ad:2f:7d:d1:c9:39:a7:93:ca:42:
54:ee:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:40 2025 by rpki-client