Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
File: ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft (raw, json)
Hash identifier: nbCGi60oLU5aC44Wkjz0DCStZYKuzXLE9VnzfJZ1gpo=
Subject key identifier: 29:02:27:DF:82:7B:8B:D5:5B:35:FC:06:B6:EC:71:6D:4C:63:AF:05
Authority key identifier: CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1
Certificate issuer: /CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1
Certificate serial: 019A71B805B1B02F8AB82088089C648ECC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
Manifest number: 020B
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl (hash: AlpKBx2C7C6h9WGZCriLCXRIcaFl6068hhQcgUoD090=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:05:b1:b0:2f:8a:b8:20:88:08:9c:64:8e:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=290227df827b8bd55b35fc06b6ec716d4c63af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:cd:db:53:ad:3c:a4:8e:f0:28:31:92:d1:
13:e0:a7:df:fa:c7:ba:8c:cc:13:92:a4:55:46:b8:
0a:a1:c3:6a:31:76:7a:f0:4e:d2:7f:a7:3f:1b:03:
3b:43:43:a9:6a:65:fc:31:76:4d:56:2b:79:a8:7a:
74:d2:e4:c0:de:d1:71:92:84:19:ac:88:88:d3:ea:
a9:d4:1a:c1:3f:b4:9b:c7:30:3d:0d:34:03:86:42:
8d:13:46:e4:bc:99:39:0f:e5:71:e4:ed:fb:a6:e2:
ad:0e:19:7e:1d:fc:49:e4:a5:61:1f:2d:a2:2d:1e:
86:9c:9a:e0:9c:df:56:0e:2f:56:73:09:13:4a:f6:
e6:75:ed:6d:3f:a3:a4:cf:54:7d:c1:ee:82:f4:4e:
5f:47:06:19:6b:43:8f:75:80:e4:3b:18:20:d1:26:
ea:b5:18:9f:a8:29:15:82:ed:58:96:c0:37:89:5d:
75:65:49:94:1b:06:cf:55:5c:3d:85:ce:e3:09:47:
5d:7c:96:da:43:94:13:5a:f5:b2:c3:fb:61:8f:b1:
a9:48:84:fe:24:bb:13:88:ed:83:cc:f1:ef:14:b0:
68:2d:4e:1d:35:06:9c:12:3d:41:10:d8:94:9b:0e:
d9:97:a0:38:9e:9f:67:90:5d:c7:d2:82:d1:95:a5:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:27:DF:82:7B:8B:D5:5B:35:FC:06:B6:EC:71:6D:4C:63:AF:05
X509v3 Authority Key Identifier:
keyid:CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9d:78:a0:de:dc:ce:e2:43:f9:a3:fe:6f:bc:e4:cd:c7:0d:
6d:d9:87:a3:c2:df:53:28:60:25:b8:d9:4f:43:0e:d1:f5:4e:
9e:c7:35:1e:cb:73:16:d8:ad:bf:5e:3c:c2:cb:2e:48:44:3d:
e2:51:d7:e2:ca:7d:a5:cd:75:50:e1:20:02:82:ba:4a:07:31:
88:ea:39:08:76:3d:0a:90:c2:ab:87:ba:3a:9e:79:eb:23:a6:
bb:5e:47:b8:6c:36:d4:8e:13:90:5c:f3:a3:04:c3:43:f0:95:
db:2d:7a:03:83:4b:f3:13:d6:66:e4:ba:2f:7a:0a:d0:14:ca:
bc:38:3f:0a:49:3e:31:d9:c7:84:8f:5f:f8:9e:5b:3b:6e:c0:
ca:2c:28:14:de:4d:7b:8b:fa:56:da:c3:5b:b3:26:5a:57:ef:
29:37:0d:8c:32:6c:42:b8:f7:2a:46:e0:aa:59:8d:5c:94:ba:
53:44:b8:ab:f0:11:f9:a3:9c:31:2b:6b:56:e5:9e:56:17:fb:
6e:0e:73:ba:e0:d7:7c:2b:8f:eb:bc:a1:65:53:e8:9f:b9:ee:
1b:29:59:9c:72:75:03:f4:b7:81:dd:c2:88:d2:78:89:db:52:
5d:0b:51:01:64:46:3d:60:d9:0f:b4:74:76:e4:b5:d4:d3:38:
6c:5c:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:34 2025 by rpki-client