Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File: Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier: oHc3Az0V48JOl+Pc9Ekr+BJgyERJwvdhF1e2zYW0lgg=
Subject key identifier: F2:58:83:81:AE:F6:97:C9:CC:65:67:57:24:32:E7:EB:64:89:B6:1A
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer: /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial: 019A71135B8522E88F5F4F79D065C842BB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number: 0D1C
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: +qXzaD8EbAFMZ2uLYH0+45voVNBosnRtx09rNUCEXzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5b:85:22:e8:8f:5f:4f:79:d0:65:c8:42:bb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=f2588381aef697c9cc6567572432e7eb6489b61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:fe:ae:60:ae:c5:da:86:88:15:c9:d3:23:
27:25:98:16:86:f4:a1:53:f5:14:74:23:fd:9c:9d:
25:df:29:02:65:ed:95:8a:46:55:28:b1:21:90:bc:
82:f3:a3:bb:cd:81:c8:69:80:f1:da:52:c3:d3:7e:
f9:7f:7c:dd:eb:d7:d3:01:b3:a8:e7:0d:a2:0f:99:
00:ec:2c:37:e9:07:b7:14:83:b4:ef:83:b9:07:de:
53:34:ba:93:1e:6d:9c:e4:9a:d2:4f:84:f2:70:97:
e9:55:e1:ec:92:e9:82:06:9d:d4:a3:20:45:bc:d5:
ce:93:78:a1:f0:41:3c:0e:db:f4:cb:09:66:0a:08:
23:d3:3f:23:60:92:90:ed:d9:11:c5:b4:ca:66:d7:
86:cd:38:e5:5f:ac:ff:93:1d:80:77:81:97:df:2c:
88:53:76:af:55:ee:1d:d4:e0:b4:9b:4f:44:5f:79:
6d:fb:c2:ba:ef:1d:36:c3:31:66:8a:23:13:c5:4d:
32:8f:2b:20:15:ac:47:26:2e:00:fe:59:52:e4:42:
ed:82:0c:06:ed:66:a4:94:94:25:8f:b6:55:c7:96:
59:e5:70:a5:42:04:08:77:0b:39:78:11:c9:ec:3b:
ed:b3:64:7e:7e:22:d6:91:34:5b:45:78:99:5e:40:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:58:83:81:AE:F6:97:C9:CC:65:67:57:24:32:E7:EB:64:89:B6:1A
X509v3 Authority Key Identifier:
keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:c6:37:ff:ef:5c:8f:15:30:f2:62:f2:e5:e2:2e:50:8b:
ea:af:07:cf:d2:28:32:7f:ad:d3:01:67:6e:2e:1c:44:c3:7a:
c3:07:5f:98:09:82:3f:c5:73:8f:6b:72:45:c6:66:8c:11:25:
37:6e:52:8e:c1:80:eb:96:26:f7:20:64:47:31:76:9a:5f:b9:
02:3c:57:d7:ac:e6:23:62:34:68:d1:fc:9c:49:e4:fe:0c:55:
bf:83:fc:ce:f7:34:f3:98:2e:96:a6:0e:65:70:54:59:39:1d:
75:35:67:f8:96:d3:6c:4b:21:ca:9c:d7:2f:2f:82:de:34:34:
8a:c5:df:58:34:2d:51:ad:46:26:ed:36:5c:ce:d5:8a:1a:b9:
fb:7f:92:7d:fa:88:d2:64:46:9c:ce:99:18:a9:c1:97:1f:61:
98:ef:1d:2d:da:a9:07:71:6c:9e:a0:08:1c:5f:6b:53:74:c1:
f6:9e:81:8d:10:35:0d:d2:f7:48:db:b1:7c:40:8f:0a:e6:77:
c3:26:2f:e2:63:7a:70:74:a3:af:e5:af:c9:1c:b4:07:67:58:
1a:21:8d:64:bd:19:92:48:3f:da:25:e8:1f:a2:01:40:25:af:
7b:f6:71:ea:f3:84:d8:7f:db:1e:29:64:cf:bd:d9:06:14:88:
dd:09:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:59 2025 by rpki-client