Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: 1sk5USOi/c+dz+I3kpkwcoL5ZpL5A3fM1wJmnK/+mAU=
Subject key identifier: C0:32:64:9C:52:AC:BA:30:36:D1:57:7F:10:AA:AB:8C:BD:C5:35:49
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019A71B8E3B32A2B29CCBD666CD28A0E7CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: KWKuDdP8cuowZTB+z/83o9g6gvS42FX40Z14S7APPjg=)
2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e3:b3:2a:2b:29:cc:bd:66:6c:d2:8a:0e:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=c032649c52acba3036d1577f10aaab8cbdc53549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:fa:12:50:6a:43:66:c4:ab:04:f5:90:d8:
ed:0f:77:74:7e:64:f0:ec:da:04:fc:04:e9:e5:f9:
05:45:fb:24:95:aa:54:22:70:52:fd:6a:36:98:ba:
7e:3e:f0:e9:09:81:68:e3:86:1b:14:65:4d:d5:8b:
99:59:72:56:93:12:d8:76:b3:8c:7d:ea:14:66:14:
96:c9:71:83:99:97:33:26:a9:47:aa:56:eb:33:83:
42:64:79:29:8f:3b:10:7b:36:3e:c6:f0:ed:15:90:
db:d0:98:ae:12:9f:6c:fe:3c:bf:e1:2b:ba:2b:9c:
eb:11:03:73:5d:b0:22:a6:28:f3:b4:75:91:28:d7:
40:a5:23:bd:93:74:f5:cd:72:04:6d:59:90:9f:b4:
fd:e5:05:7b:02:bd:18:60:b1:96:89:eb:4b:e9:9c:
e7:5c:1f:3f:bd:70:03:f8:df:d7:ca:18:6a:a9:66:
03:d4:2f:66:df:55:6c:af:30:e4:1d:40:61:4a:cf:
43:a9:7b:b2:c4:15:01:fc:94:ec:3a:3b:0f:f3:d4:
e4:0c:06:c9:c6:e4:17:56:70:76:81:b0:f3:94:63:
11:34:f4:e6:2c:f2:85:d1:5b:f3:09:8e:bb:d2:0b:
0c:c0:83:10:7f:3a:d7:78:c4:36:1c:43:df:f3:68:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:64:9C:52:AC:BA:30:36:D1:57:7F:10:AA:AB:8C:BD:C5:35:49
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:73:fa:fb:38:60:a0:cf:19:4d:ef:a2:c3:26:38:80:3a:41:
64:aa:0b:fc:e5:61:aa:3d:9c:c4:a8:53:e4:67:66:4a:8e:d3:
e8:c2:2d:60:01:fe:95:bd:b7:1c:d0:98:78:1f:cc:46:68:83:
80:d0:68:e9:01:b6:31:41:f8:2e:c4:8a:78:3b:8f:c3:d3:fe:
f9:9a:83:3b:46:4f:9e:26:ea:66:74:0b:cf:89:b2:eb:03:c0:
b4:33:1c:e1:18:fb:1c:24:0a:24:2e:a0:db:70:a8:15:d9:b5:
be:18:63:22:5c:52:75:a7:d6:d1:d2:05:24:a2:db:75:40:9d:
42:3a:59:14:bd:50:d0:95:73:92:7a:fa:2c:6f:1d:73:b8:bd:
26:43:c7:0f:78:d1:2a:21:f6:83:5d:eb:c0:66:3a:eb:66:5b:
47:81:09:e5:8c:92:a5:e4:37:48:5f:6b:ec:a6:13:1f:a6:95:
68:13:ea:02:1e:05:65:77:00:18:fc:1a:5e:ab:83:fa:34:20:
a1:e1:bf:63:8d:f3:7d:65:73:66:ba:ce:1c:a1:96:39:c5:ac:
2c:3e:fb:50:e9:3b:58:43:41:4f:8c:f6:e2:05:46:d1:90:36:
6d:ed:ed:2d:fa:55:80:55:f8:d9:88:f7:20:0c:67:b1:5c:ef:
0e:eb:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:01 2025 by rpki-client