Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
File: yTLAXdVS5YBU2FWljWFhlVP1HGM.mft (raw, json)
Hash identifier: elK3hY+gampzfHWaIdg5y7L9Q/XQuz57G81C7ISEJSM=
Subject key identifier: 4A:CB:86:D3:17:3E:D8:2A:54:97:7F:3C:FD:51:9B:45:C7:EF:C4:B5
Authority key identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
Certificate issuer: /CN=c932c05dd552e58054d855a58d61619553f51c63
Certificate serial: 019A733803F5590521521F587C516B7C1DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
Manifest number: 01A6
Signing time: Tue 11 Nov 2025 14:00:42 +0000
Manifest this update: Tue 11 Nov 2025 14:00:42 +0000
Manifest next update: Wed 12 Nov 2025 14:00:42 +0000
Files and hashes: 1: yTLAXdVS5YBU2FWljWFhlVP1HGM.crl (hash: MKclYvsno9WqXVf4ZlPknaIf8S6VXIQTGu+E+CAiCoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:03:f5:59:05:21:52:1f:58:7c:51:6b:7c:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c932c05dd552e58054d855a58d61619553f51c63
Validity
Not Before: Nov 11 14:00:42 2025 GMT
Not After : Nov 12 14:00:42 2025 GMT
Subject: CN=4acb86d3173ed82a54977f3cfd519b45c7efc4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:f8:5a:31:a8:09:50:17:b9:c3:0c:09:96:
cc:05:ba:6d:00:01:b6:05:e7:5d:d1:73:0e:b9:1d:
77:fe:7f:84:b4:52:5d:06:a0:75:21:80:49:49:0d:
c3:46:f8:e3:d5:8c:92:0e:8b:59:f1:84:21:e3:a8:
08:5f:7c:df:b1:66:8f:a5:42:e3:cc:a9:4c:fa:bb:
7a:9b:e4:3d:07:bd:d4:e7:7e:b5:d6:fe:85:cf:e0:
10:0f:2e:3e:ad:f1:f5:db:59:8f:b5:a4:44:a2:72:
cd:f5:c2:d5:85:8c:ed:4e:24:03:71:79:94:ce:e9:
07:1c:d6:8b:7e:7e:3a:e5:0f:33:d8:71:46:09:97:
73:c8:48:8f:eb:c9:56:8d:f6:8b:0b:08:2e:d5:be:
06:50:0f:79:21:be:fc:83:c1:b9:b9:0d:7a:44:2e:
2b:eb:29:0b:d9:de:9e:36:82:b0:a4:d8:dd:d4:76:
a9:46:58:ee:e0:76:00:3a:92:5b:ab:52:37:2c:a5:
39:21:5c:16:c1:1c:f4:ab:90:81:e1:70:0d:d0:24:
ad:c8:e5:1c:2f:70:d2:d5:fe:c2:f3:88:44:39:a9:
13:09:0b:38:87:c8:bb:13:de:33:69:f3:9d:7e:d1:
db:6a:ae:29:3b:cb:bf:db:16:a7:a2:2e:a3:05:de:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CB:86:D3:17:3E:D8:2A:54:97:7F:3C:FD:51:9B:45:C7:EF:C4:B5
X509v3 Authority Key Identifier:
keyid:C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:64:fb:71:e0:df:4f:83:2a:3f:40:7a:19:2b:b7:d7:fe:4b:
13:9e:a1:4a:8a:9e:b9:65:49:54:5d:42:89:a3:31:5c:a4:67:
04:4f:25:38:7d:9e:71:26:ca:34:9f:d6:ea:f5:c6:0b:0c:b4:
d1:ae:17:b4:6e:38:6d:71:04:0e:59:57:17:00:6a:8f:57:b4:
65:89:36:8e:ca:2c:d7:6a:41:81:3b:cd:ff:a9:37:44:36:74:
31:1a:86:70:44:6f:02:6d:e8:81:23:41:33:b2:a3:df:47:81:
06:2e:29:48:4d:e7:78:91:dc:dc:25:68:2c:f1:37:95:3f:19:
73:de:7a:a7:32:d7:39:0c:fa:0c:50:da:38:38:2a:13:8b:f8:
7d:2e:c6:3e:cf:75:31:79:70:80:d0:15:dd:f0:9c:b5:38:16:
fd:4b:35:86:81:84:4a:e1:8b:e4:1a:7a:e2:f3:68:5a:7b:99:
ef:1f:f5:de:6d:fd:63:50:b0:50:84:3d:2d:34:29:a8:8d:de:
e8:a7:3a:55:c3:59:c4:a1:05:04:4d:6a:31:b6:82:2b:b3:57:
7b:c5:1b:3b:56:ab:b0:27:0c:71:55:7a:b4:79:e6:84:dc:2e:
eb:7d:09:57:7b:b5:ef:54:42:e6:6c:f5:bb:39:4c:f0:5e:6c:
d3:5c:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:33 2025 by rpki-client