Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier: omYZ8N/t135cJFf/VuZ7wz8GjB1m+XFWEXYdNix81oI=
Subject key identifier: C3:2C:40:3A:34:91:26:1C:F0:AD:7E:5C:32:EE:FE:FA:01:91:CD:95
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial: 019A71B8EAD0F1BD53931C6DECD806C48D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: AwHKMmhhmM8qkz9TvyIpVpoUPb66/fjrgmJJNoSVxaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ea:d0:f1:bd:53:93:1c:6d:ec:d8:06:c4:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9187af710f6285e13553071328b9d994852c471
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=c32c403a3491261cf0ad7e5c32eefefa0191cd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:54:cb:37:c6:cc:5c:df:34:8e:6b:ad:fb:
aa:59:a9:af:bc:24:df:32:34:39:30:d5:37:1d:1c:
a3:e1:4f:80:5e:e8:d1:cb:cc:ad:88:98:22:13:1e:
54:40:9e:8e:4d:29:b0:a9:76:24:ed:2a:5a:6f:f6:
fb:08:10:52:d1:d3:4c:aa:29:47:b8:cb:0a:c5:67:
a8:9a:21:74:8c:60:dd:2a:ae:dd:02:89:e8:e1:a9:
1c:02:a8:4f:fc:0a:1b:45:cd:54:6b:71:96:08:7f:
03:03:7e:68:a4:70:c7:22:ff:ad:f5:f3:cb:2d:47:
2c:4c:8f:f6:57:64:8f:b1:64:37:96:de:66:b0:67:
6a:2d:5d:f4:8d:88:33:1f:9c:02:9a:0c:43:25:82:
66:06:0f:01:b2:5b:01:92:2f:14:58:c7:04:ab:fa:
fb:e5:3a:eb:43:59:68:40:fc:69:4a:d5:d0:6a:06:
98:2d:e8:aa:c8:d8:38:cb:86:0d:00:cb:44:1e:89:
38:95:65:88:f1:15:42:d2:7f:84:ca:59:df:59:25:
f4:94:19:e6:ba:d4:ee:e3:90:6c:47:4d:8b:34:92:
ff:9a:2a:d8:6e:4b:22:4a:7a:c5:c4:5d:e6:db:fd:
6f:02:6c:28:39:5a:c2:5a:54:e6:f1:80:fd:84:1e:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:40:3A:34:91:26:1C:F0:AD:7E:5C:32:EE:FE:FA:01:91:CD:95
X509v3 Authority Key Identifier:
keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4b:25:52:8a:88:f5:cf:20:4b:6f:42:32:4c:5d:ed:1c:77:
09:49:09:94:02:60:9b:fb:9d:64:61:9e:e6:b4:4d:0f:8f:a7:
d5:4d:79:93:de:2d:d7:8d:27:76:04:4c:03:cf:5e:b1:70:41:
ba:f8:d3:2a:b7:ba:98:a9:32:cd:df:49:1d:03:0e:d2:2b:44:
72:60:b5:3b:2d:75:36:84:8a:54:de:d7:0f:fe:42:49:99:26:
7e:55:b4:3d:e0:5a:c4:14:10:a4:5f:75:ca:0c:f4:ff:cc:7e:
ba:d5:1d:b6:37:0d:39:7e:c1:e4:c6:3b:3a:27:fc:fe:28:d5:
29:44:47:c0:3a:93:2f:67:2a:08:dd:4c:7f:d1:1e:10:f5:9e:
a7:15:07:c5:19:89:f2:62:7d:a1:c5:ef:59:35:ef:f8:2b:65:
f2:f4:b5:98:3d:b5:ec:76:8a:dd:1c:67:fa:b9:79:af:f9:50:
4c:e7:d4:d7:a8:fe:ec:35:85:17:57:4b:2e:e3:d0:b0:6b:a4:
58:b7:ff:f1:60:80:93:97:4e:ae:e0:f1:35:2d:ef:f1:a3:d1:
c1:41:e0:5b:d6:42:90:f4:4a:1b:4f:28:e5:ce:05:b2:24:6c:
ce:3f:ed:0a:85:35:0f:fb:f8:e3:7b:a5:ab:44:6d:41:74:27:
ec:6f:9a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOrQ8b1Tkxxt7NgGxI0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTg3YWY3MTBmNjI4NWUxMzU1MzA3MTMyOGI5ZDk5NDg1
MmM0NzEwHhcNMjUxMTExMDcwMjE1WhcNMjUxMTEyMDcwMjE1WjAzMTEwLwYDVQQD
EyhjMzJjNDAzYTM0OTEyNjFjZjBhZDdlNWMzMmVlZmVmYTAxOTFjZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ1UyzfGzFzfNI5rrfuqWamvvCTf
MjQ5MNU3HRyj4U+AXujRy8ytiJgiEx5UQJ6OTSmwqXYk7Spab/b7CBBS0dNMqilH
uMsKxWeomiF0jGDdKq7dAono4akcAqhP/AobRc1Ua3GWCH8DA35opHDHIv+t9fPL
LUcsTI/2V2SPsWQ3lt5msGdqLV30jYgzH5wCmgxDJYJmBg8BslsBki8UWMcEq/r7
5TrrQ1loQPxpStXQagaYLeiqyNg4y4YNAMtEHok4lWWI8RVC0n+EylnfWSX0lBnm
utTu45BsR02LNJL/mirYbksiSnrFxF3m2/1vAmwoOVrCWlTm8YD9hB6vQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMsQDo0kSYc8K1+XDLu/voBkc2VMB8GA1UdIwQY
MBaAFMkYevcQ9iheE1UwcTKLnZlIUsRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zMzBmNmItMmVhNS00OGEwLTg0MTUt
NDY0ZTU5YzhmNDg1LzEveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zMzBmNmItMmVhNS00OGEwLTg0MTUtNDY0ZTU5YzhmNDg1
LzEveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUslUoqI
9c8gS29CMkxd7Rx3CUkJlAJgm/udZGGe5rRND4+n1U15k94t140ndgRMA89esXBB
uvjTKre6mKkyzd9JHQMO0itEcmC1Oy11NoSKVN7XD/5CSZkmflW0PeBaxBQQpF91
ygz0/8x+utUdtjcNOX7B5MY7Oif8/ijVKURHwDqTL2cqCN1Mf9EeEPWepxUHxRmJ
8mJ9ocXvWTXv+Ctl8vS1mD217HaK3Rxn+rl5r/lQTOfU16j+7DWFF1dLLuPQsGuk
WLf/8WCAk5dOruDxNS3v8aPRwUHgW9ZCkPRKG08o5c4FsiRszj/tCoU1D/v443ul
q0RtQXQn7G+anQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:54 2025 by rpki-client