Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier: UTWpe8yIbLznbwLLE8KacC9zU3ZyVlTml2JBP6bPC48=
Subject key identifier: CD:E6:5C:B6:7C:2F:29:92:61:61:3D:8A:C6:FF:B4:D0:77:0B:16:65
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial: 019A72258E510E7DDFC6489EAA382BAF9572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number: 0279
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: bARwgMG14deqQi3+PoFShrhENdZCrvoWuG43dZD0q9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8e:51:0e:7d:df:c6:48:9e:aa:38:2b:af:95:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=cde65cb67c2f299261613d8ac6ffb4d0770b1665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:7c:d7:8e:6d:24:74:d5:e1:3d:a5:2c:b3:
6c:1b:d2:5a:a1:07:6d:ab:dc:54:88:86:db:a6:78:
a9:34:d2:e1:f1:0a:21:6f:d0:30:b7:43:98:8f:6c:
7b:4f:bd:ae:7e:7c:04:80:9a:6c:01:e3:6f:e3:21:
6f:04:8d:bb:a1:dd:43:0c:ab:2c:5e:0c:39:d3:27:
01:f6:4b:d2:0e:fb:fe:b5:79:30:d2:83:ce:b6:90:
50:eb:22:1b:94:00:a7:56:8f:bf:ef:81:73:a7:ee:
2e:3c:ff:1e:a8:14:fe:a4:c5:c7:4e:0c:79:c2:99:
df:27:31:e9:9b:f5:e3:d9:bf:9e:6e:3e:9c:e2:05:
bd:48:2e:7e:96:7f:e5:5a:f3:9c:22:98:5c:b3:5f:
af:74:f5:7f:28:d2:c5:b2:d3:dc:fb:89:92:51:f5:
56:31:a5:b7:e9:62:ff:4c:72:fa:9f:de:87:0c:46:
ad:18:bc:0a:7e:ee:e2:11:87:8f:9f:5e:d1:40:e2:
26:a8:59:0b:71:f7:2f:b5:4f:68:37:ae:63:5d:64:
4e:0e:48:1f:dc:20:af:07:df:e1:15:a7:ed:75:b3:
1d:5f:5a:c4:ee:a0:22:da:45:fa:0e:fb:ec:9c:94:
03:e5:f4:57:b6:cd:d3:d2:c2:68:d3:b8:cb:0d:fd:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:5C:B6:7C:2F:29:92:61:61:3D:8A:C6:FF:B4:D0:77:0B:16:65
X509v3 Authority Key Identifier:
keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:48:6e:76:b1:bf:56:0a:bf:d6:71:c1:86:7f:05:8e:fb:
a3:b1:8d:02:00:49:af:70:6f:24:94:d0:5c:9b:54:04:4a:af:
06:41:5c:3f:c2:b8:c8:4c:65:e4:ed:f1:d7:68:bf:b2:76:20:
65:39:a6:ed:46:5a:12:27:10:98:c3:82:1a:8a:8c:ec:49:44:
db:9d:66:da:82:6d:81:2e:c4:66:31:3c:f2:85:5d:5f:98:93:
01:06:d4:95:a6:2d:a3:33:c8:d8:de:74:96:50:62:0b:8c:00:
61:7c:ba:28:9f:ab:2a:0d:57:fd:4d:61:20:a8:7d:c5:01:7e:
28:20:c5:77:bb:91:b5:53:de:82:b1:1b:3e:92:aa:46:cc:b9:
bc:d0:09:0f:66:9d:c6:15:87:4c:c5:f0:a4:4f:6a:77:8b:38:
16:e3:3c:1e:2a:1d:d2:94:f7:9a:c3:16:8a:d0:c4:64:86:96:
c5:a6:09:f8:83:42:10:c6:05:ad:8b:49:10:6b:40:44:6f:72:
3f:e6:ff:11:02:37:2f:83:dd:d6:5f:6d:99:8e:da:d9:bb:e7:
69:2e:34:f2:5a:17:8a:62:c8:68:d2:a0:b0:6b:e5:9d:c7:9e:
13:1f:af:22:c9:ed:b3:62:67:5f:8c:ac:9b:2d:ae:a3:4a:1d:
26:2f:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:50 2025 by rpki-client