Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
File: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft (raw, json)
Hash identifier: 965IWLtSoyM076CK/ZpfYJa1JrO+a8omJ3I+PUKkAAQ=
Subject key identifier: 11:BD:EA:28:CA:0E:47:B3:80:AD:69:6A:59:08:83:CD:32:04:38:F2
Authority key identifier: F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
Certificate issuer: /CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Certificate serial: 019A72266122B5CAB83B24A5C42C4BCE2CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
Manifest number: 05A1
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl (hash: 24MmWi42STh+WvKqwzMC5OUjDDKa1CF4JWujEhrttPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:61:22:b5:ca:b8:3b:24:a5:c4:2c:4b:ce:2c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=11bdea28ca0e47b380ad696a590883cd320438f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:d8:f2:6d:28:24:3c:99:2c:7a:cc:e6:27:
83:e2:6b:93:bc:13:f1:05:40:9e:a4:92:84:9e:e1:
75:14:cd:8e:ef:ff:be:a1:90:b1:17:6a:da:68:aa:
d9:be:8e:b2:7e:ad:bd:04:01:1e:49:c0:41:8f:e6:
e6:27:ca:d8:bc:eb:87:f5:33:2f:ca:e4:9b:6b:a5:
e9:92:2f:dc:03:6a:57:dd:76:01:74:a2:90:bb:1c:
00:ac:a8:09:02:86:68:69:cb:51:4c:99:2b:16:f9:
7e:1f:64:7c:a8:b9:d6:11:32:a9:52:ea:9a:cb:c2:
64:56:a1:51:8c:ba:be:96:8e:4c:4d:c1:06:f9:e9:
51:fd:5c:03:04:70:96:ea:13:12:1e:38:4c:0a:41:
dc:b1:d9:bb:3f:45:62:cf:84:6c:bd:b9:73:ca:42:
fe:c9:38:cb:74:2f:91:8a:bd:f6:0d:c2:c1:ee:c2:
9c:97:e9:a2:18:aa:b0:99:7d:0a:32:37:b6:fd:6d:
ba:91:0c:42:f1:b1:5f:1c:df:d7:1f:e0:8d:df:89:
c7:01:d7:0d:f9:2f:ba:a9:93:1d:56:5f:b1:a6:7c:
d5:c5:28:21:2e:ac:65:28:29:a4:a4:27:e2:c0:2d:
d3:6f:2b:49:ee:14:29:bb:ec:8a:ac:d3:f7:2c:f0:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BD:EA:28:CA:0E:47:B3:80:AD:69:6A:59:08:83:CD:32:04:38:F2
X509v3 Authority Key Identifier:
keyid:F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8b:1c:1a:2d:67:f8:bc:ea:6f:7c:08:b4:d0:12:72:48:f3:
8e:03:d9:81:3b:65:1e:ac:7d:13:ed:04:c5:32:55:3e:3d:b6:
f6:59:8c:42:f3:c3:15:6c:5f:03:c6:66:08:72:7a:fa:a5:4e:
c1:f7:b6:b7:08:d8:7f:3e:bf:e5:d6:7a:c4:a6:bf:ff:51:4b:
e2:25:b2:b5:30:42:3a:28:be:16:d2:09:e8:a0:42:bc:ba:4c:
5b:f8:bf:32:bf:3b:1c:2d:8d:78:df:f5:78:9a:95:12:29:a1:
11:e4:f3:9d:bb:94:a3:5b:32:07:26:d9:bd:d1:e6:98:55:05:
16:51:06:47:aa:45:4b:20:11:8d:73:d1:d8:83:a2:cc:1e:e0:
e2:f0:90:b7:f8:29:b0:48:42:12:c5:82:3e:8d:27:8c:6d:ee:
c1:ae:f0:f2:76:cd:01:9e:e5:3c:61:31:2e:72:7e:03:89:26:
f8:3d:cd:37:1e:99:be:a1:21:21:fd:1c:d0:54:8c:24:49:d0:
b7:01:b3:c6:e7:b1:0e:cd:76:cb:3e:fc:48:1a:a2:49:64:33:
fa:3d:c6:12:41:95:63:7a:67:50:c2:f4:28:1c:69:51:6f:6a:
da:69:50:bf:e3:b5:b3:f7:07:98:7d:4d:0a:24:39:0c:e8:a6:
5d:0f:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:07 2025 by rpki-client