Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: Yveb5OorXmHH5QRHEpvV+g3qCO02Dv8dBdpYbh58+FA=
Subject key identifier: C4:26:00:4B:8E:16:FF:F7:BC:4B:9B:DA:DB:B8:F5:AC:B7:66:50:FE
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 019A72266481BB1BF4427C22A46D4D8360F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: 0194
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: 0XRxg2gd0XN8r/EuiwF9pmn5Fm4QAwRHoFXEMd2DbFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:64:81:bb:1b:f4:42:7c:22:a4:6d:4d:83:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=c426004b8e16fff7bc4b9bdadbb8f5acb76650fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:9d:9a:a1:58:ed:77:41:98:50:fa:f1:eb:
48:75:be:78:b3:8e:53:a6:7e:0d:36:51:39:3a:bd:
0e:74:e4:fe:e6:82:f1:0c:be:06:b7:40:6b:f0:17:
7f:a3:29:31:6c:b4:a5:1c:df:2d:dd:0b:1d:cf:1b:
2a:20:26:7a:60:d7:13:07:66:9b:40:98:25:98:e9:
7f:57:a3:87:47:4c:eb:1c:c6:ca:18:fd:28:51:21:
64:b9:f8:98:81:f4:e4:98:69:3b:73:46:c6:01:e3:
97:0f:83:b2:bd:53:11:fb:08:18:cf:98:20:02:a5:
50:f3:0c:30:fe:a1:76:d6:7c:86:1b:3d:95:1c:c0:
f8:3d:b2:ff:c3:59:21:3b:6a:0e:e3:a0:94:61:a3:
7d:1e:48:79:ce:0b:87:c1:1d:0f:b5:a8:f9:eb:6f:
a3:ed:d6:98:20:fd:e4:4d:e8:a5:3e:a1:1d:b2:37:
9e:74:06:41:a3:23:5c:76:71:2d:a0:c5:a7:b7:3b:
f4:09:bb:ae:ec:0e:f3:cc:80:5c:ef:e2:36:c8:3a:
aa:60:8f:0b:02:7f:de:3e:03:26:31:e7:24:b9:8f:
f6:0e:f1:90:11:ff:b8:a0:68:47:0b:1a:f9:10:b8:
b1:9f:fb:fd:a8:5b:26:6e:73:22:32:4a:3b:b5:5e:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:00:4B:8E:16:FF:F7:BC:4B:9B:DA:DB:B8:F5:AC:B7:66:50:FE
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:14:d4:ce:a8:ae:53:97:07:5e:a6:a5:25:75:28:30:e9:53:
0c:56:e5:ed:8f:f7:42:13:f4:ce:a3:c5:ca:b3:16:cd:a9:30:
d3:73:71:8a:d4:96:35:26:b6:8a:34:50:4d:a9:32:0c:99:4c:
5c:2f:e0:d2:45:c1:3e:93:8b:4a:13:a2:cd:54:71:38:bf:14:
ec:4a:e1:05:31:7e:b6:59:86:4f:b7:52:ba:3a:6a:dd:ad:d4:
11:65:56:0a:04:7b:05:cd:15:c4:5b:1a:3c:38:58:58:ff:20:
4c:61:04:58:b4:99:4d:59:83:b8:ca:d6:87:25:6e:e3:75:db:
dc:f3:e8:92:02:18:42:8e:da:6e:4b:24:9d:22:56:5b:98:82:
82:ad:d0:95:bb:82:d2:86:15:77:24:41:55:3e:94:b7:c6:b6:
f2:3a:13:6b:39:e5:dc:56:f2:e5:75:a9:12:c5:38:35:40:17:
9f:00:a9:ee:71:d0:a2:46:3c:8f:58:e8:36:5d:1b:69:74:6d:
3a:a4:70:be:f9:57:25:54:05:2c:51:24:2d:69:6c:b6:7b:32:
b7:40:5d:0f:09:38:5f:2d:37:5d:a1:d3:16:aa:cd:ee:f8:81:
ec:7c:9a:17:64:ae:66:f4:27:4c:80:ee:5f:6d:d8:a4:41:8d:
b8:c1:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:45 2025 by rpki-client