Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: cpVfx5EmyqejHDDu58kmnbfxAh2iiw0jsMQ1vCANIkE=
Subject key identifier: 27:55:6E:11:1E:B4:D7:E0:88:14:0A:99:C6:2A:EC:69:1C:33:0E:B6
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 019A71B91F9F4BBD721E4278CEF68891D30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0AE4
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: I6w6O7R5zJU/qfTmAaAWrhBu2ZLQ4QVr3WqWkXJMBEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1f:9f:4b:bd:72:1e:42:78:ce:f6:88:91:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=27556e111eb4d7e088140a99c62aec691c330eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:8d:c0:f4:29:2f:02:09:61:e1:e9:5a:6a:
1a:ab:27:5b:8e:75:93:bb:c9:64:e2:36:fe:95:73:
37:8e:ff:f2:89:76:44:13:b9:16:6b:ce:42:03:8b:
f8:ee:0e:6b:46:c5:0a:52:46:ab:14:4e:57:53:80:
05:ad:71:7a:5c:0a:68:2b:eb:f1:3c:b2:4b:4c:be:
84:30:e1:ec:dd:97:48:3e:80:65:a8:a7:d8:72:db:
47:46:89:84:18:ab:68:94:d1:ee:8e:c5:01:ad:be:
7b:95:12:c2:dc:92:0d:47:60:9b:d0:9a:7a:da:eb:
e5:7e:d8:63:c3:ac:88:9b:83:85:83:70:9f:df:37:
74:b2:23:58:f9:17:b6:69:9c:6a:fb:47:d8:3e:dd:
61:93:63:ee:a6:5a:79:0a:26:81:74:67:68:91:64:
7f:17:f8:0f:e8:77:bf:d0:1e:67:d0:5e:65:1a:83:
60:67:ba:4d:06:89:63:c8:f3:ea:a6:9a:44:d3:90:
fe:01:a7:91:11:ca:58:30:98:0a:a4:a9:fd:fd:75:
60:dd:ff:8e:3b:b2:0b:af:19:eb:2b:ec:af:4c:34:
f6:71:13:df:72:d0:28:92:30:26:f1:9c:65:2b:c0:
11:85:d7:f6:bd:7c:b8:c2:b2:5e:28:be:8d:2a:a8:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:6E:11:1E:B4:D7:E0:88:14:0A:99:C6:2A:EC:69:1C:33:0E:B6
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a1:88:17:6c:69:bf:3a:5d:ff:38:60:e1:58:30:72:70:f4:
b7:68:b1:76:98:92:a8:c2:92:68:db:dd:2b:35:04:89:c8:da:
a3:45:13:04:ae:ee:75:45:eb:e0:93:cf:7b:20:ca:9e:a5:8d:
64:14:0a:e0:6a:81:0d:77:03:c7:f3:5b:26:0f:5d:35:0e:45:
59:f7:dc:0f:5f:3e:ee:64:be:d9:c6:ca:98:60:c9:83:b2:7a:
d7:ac:39:3e:a9:4f:ac:1f:3a:26:76:ad:d4:ab:be:be:13:fd:
e9:23:b4:78:5b:7f:ca:e2:ac:a4:ef:9d:a9:1d:9a:39:d8:66:
c2:df:e4:2e:d6:40:83:ae:0d:be:18:9f:00:f4:1c:bb:51:13:
d3:d7:4f:1a:a9:b9:77:2b:5b:7f:ff:2f:e2:db:f6:da:58:b5:
86:ed:7a:34:74:fa:bc:dc:63:9d:33:e2:1b:2a:03:55:c7:a4:
21:b7:17:4c:e2:b3:62:d3:30:92:9a:a5:60:82:96:b4:69:1d:
6f:52:0a:22:a0:b5:8f:88:6f:62:21:08:ee:c4:cb:7f:7a:f2:
8c:e7:f3:c0:f4:bf:90:e6:e5:8e:19:f4:d0:dc:d2:b1:fa:db:
88:16:08:56:72:33:61:ce:a3:06:bb:3e:28:dc:51:5c:de:ce:
4b:98:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client