Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier: 1IaEwod+7GAkCn9xPfRvglpkHoxJpeK6ftgWR02hqyM=
Subject key identifier: CE:63:AD:F7:81:6A:30:0B:CE:13:2E:25:8C:DC:24:D0:10:FC:D5:0D
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial: 019A725CAB086EE499F034537139D49FF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: iRqFndru0BtmXmP+yKG6nkA6s3oysrctAQlRIDQo8qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ab:08:6e:e4:99:f0:34:53:71:39:d4:9f:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=ce63adf7816a300bce132e258cdc24d010fcd50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:b5:b6:10:48:02:d9:0e:96:4f:f3:5e:6f:
49:41:fb:6f:b8:0b:f0:2e:dd:11:3a:a6:23:39:8b:
bd:de:07:e8:3d:5c:f6:84:14:63:cd:56:80:3a:d8:
05:21:8d:3f:23:8a:cd:5b:bb:80:57:14:ba:5f:21:
bd:2c:87:85:20:8b:87:78:5b:e2:73:c4:c3:de:15:
cc:2d:17:65:8d:f7:84:39:64:47:78:23:09:25:e9:
e9:60:7e:27:c3:a4:36:0f:a9:8b:65:c3:28:d6:75:
2f:a6:78:89:13:14:23:87:ee:98:94:94:87:9d:6b:
ed:9c:9b:ff:62:7c:0d:16:95:24:d3:02:cd:2e:10:
17:28:74:56:27:fc:6a:83:06:95:e7:fa:4e:e8:ba:
46:15:2a:05:9f:0c:77:c3:81:ae:74:ad:13:e9:70:
d9:da:f4:97:59:c7:3b:98:10:cb:b8:1e:8a:a5:3c:
30:e0:b0:ed:49:a6:4e:67:53:1e:82:f9:27:d4:06:
f1:2b:8e:be:e9:60:51:ff:06:be:2d:91:46:7f:78:
b8:3d:d5:28:8c:b8:ba:59:3a:1c:4d:d7:c0:69:4d:
70:1a:77:48:32:89:0b:c7:fd:8f:ac:49:81:7d:6a:
eb:f2:a2:ff:30:8e:3a:58:31:04:11:77:0b:aa:c9:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:AD:F7:81:6A:30:0B:CE:13:2E:25:8C:DC:24:D0:10:FC:D5:0D
X509v3 Authority Key Identifier:
keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:86:8f:f7:bf:a2:ab:44:85:07:82:f3:a3:e8:b1:a1:8d:43:
9e:8c:c5:7e:14:9c:d9:9a:4a:ab:36:fd:c8:72:b7:7c:47:b6:
79:6c:f1:af:da:98:13:dc:ec:a4:52:88:51:c3:c2:dd:70:72:
3c:28:33:9c:3e:d2:bf:01:89:76:cf:c8:33:86:cb:81:81:67:
53:06:3a:12:ee:3f:be:b6:6c:74:5a:a5:c4:8a:9e:43:e7:7c:
24:90:92:4d:80:ac:ff:df:15:74:f7:68:72:e4:44:e7:69:72:
5c:d6:36:ac:5b:b1:f8:29:fd:3e:36:2d:a6:bf:84:d7:2f:a2:
a9:4a:ed:c9:d1:62:7e:81:a9:a3:e0:ff:30:d3:52:3b:02:d3:
07:d8:7a:1c:ff:2e:94:6f:c3:0e:d2:48:29:e6:de:75:93:5e:
0f:b1:91:da:e8:0e:47:0b:23:43:4c:8b:12:29:a1:d3:2b:e2:
5c:4a:09:6b:26:58:f5:ac:ca:d6:5e:59:d6:54:2c:27:d8:48:
a1:1a:76:3d:f0:09:87:33:81:39:55:57:f8:a7:6d:3b:7b:aa:
d1:1c:e2:17:0b:a0:8f:5f:36:8d:58:e0:c9:7f:84:d8:20:c1:
31:d7:77:4a:31:3e:50:84:7a:1e:7a:de:0e:9c:67:c3:d9:cb:
d9:17:a9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:19 2025 by rpki-client