Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier: Gk+cKh3hdPSRFmK0TZ+b9ocdp43s9WDovwcDefySAUE=
Subject key identifier: F4:82:6D:42:FE:3D:EA:E0:61:D6:01:89:67:B2:38:21:B6:2C:9E:AE
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 019A725C3F923B9499EE2441A2C4E39638CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number: 0140
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: WQ2BgwXL2VvvmJxvUpJ4KRSh0jSXrE95r0yge2asDv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3f:92:3b:94:99:ee:24:41:a2:c4:e3:96:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=f4826d42fe3deae061d6018967b23821b62c9eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:92:4e:52:fa:db:e3:f4:8f:e3:dd:84:b5:
2c:59:52:7b:18:1e:84:14:74:6a:3e:eb:bc:a0:a2:
de:2a:95:e0:85:9f:e9:20:12:2a:b2:fe:cc:a5:59:
11:bf:3e:64:5f:ac:0b:dd:03:84:74:a0:35:ec:22:
a6:db:79:1c:50:0e:c5:77:17:88:90:4b:24:73:59:
db:30:85:09:3b:01:a3:aa:4a:00:77:7e:2c:a5:ed:
ed:1c:e1:f8:e6:af:87:5c:4a:fa:70:f2:78:3e:4f:
22:f2:e3:32:a4:ad:8b:03:d5:9a:b2:66:9e:ed:dd:
1e:63:04:d5:e7:cb:4a:1c:a7:83:ec:dd:c6:1c:ad:
23:bc:3f:62:48:1f:d9:cc:47:91:6a:e6:c8:ad:e4:
44:a0:69:0f:a0:ff:aa:cf:90:fe:5b:08:f1:79:a2:
10:06:16:67:71:f2:5c:c0:2e:cc:54:ae:23:b3:7f:
3f:2e:c4:9f:b1:70:d3:fc:7d:af:58:5d:4f:fd:91:
56:35:82:d4:63:eb:6c:a4:4c:80:36:db:01:46:1f:
63:7d:59:7a:5c:50:59:1c:75:51:48:f5:97:ea:e8:
2d:a5:d0:09:d9:bb:54:8d:b2:7f:57:12:b0:a6:61:
d4:68:8c:cf:f8:c7:a5:6f:d6:c2:37:bc:0f:e2:5d:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:6D:42:FE:3D:EA:E0:61:D6:01:89:67:B2:38:21:B6:2C:9E:AE
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:40:d0:5f:c9:cb:10:cc:7c:a1:7a:10:43:2f:59:09:4d:
b9:69:5e:8f:80:61:29:7e:1e:87:86:7b:89:f9:d9:49:fc:71:
d2:ea:59:38:86:5d:a4:c3:72:6d:71:01:d0:ed:b8:13:14:65:
27:06:fa:42:ec:7d:29:7d:7a:11:dd:06:e4:24:d2:11:d3:9c:
d5:5d:dc:9f:44:2c:8f:d1:52:3d:cb:f3:2f:80:12:8e:ad:c1:
83:df:de:42:a7:95:43:cc:18:30:d0:27:1f:6a:42:a9:3a:c4:
7c:f0:dc:4a:dc:22:77:80:e2:0c:43:b9:b2:ce:24:47:99:76:
ec:f0:4e:69:e2:ee:f4:2a:93:a5:8c:26:78:85:33:c6:62:4b:
ec:ae:bf:09:15:74:55:d7:41:d2:86:11:8f:04:97:65:8b:f9:
f8:6c:02:e7:ce:a3:62:ae:74:a4:12:f8:a1:d9:2a:50:be:c0:
53:6f:52:2a:08:81:53:dc:3a:f5:a5:3f:6c:df:20:47:3c:c8:
b1:bf:9d:1e:03:bf:3c:37:e1:f0:03:e9:7a:ea:ca:99:93:81:
62:4b:71:c4:93:57:cc:b1:c3:14:af:d0:a2:9f:a6:eb:90:80:
85:e1:17:42:c3:ef:af:6e:8c:80:12:e6:3a:b9:57:8d:32:e1:
5a:c5:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:47 2025 by rpki-client