Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: AqTi2VGFumvCdfDlVOQnkIXC3VV1k3jdQgWyhzkC/Jk=
Subject key identifier: 33:C3:1A:ED:A6:DF:13:25:D3:D2:95:83:A2:B7:CB:9E:22:B5:CF:72
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 019A71B77C606241A929CA0E1300E97ACA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0A4E
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: 20hAFSa2Bny44McBsKNMRtrZZ1iwdSriD/OdyJTljrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7c:60:62:41:a9:29:ca:0e:13:00:e9:7a:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=33c31aeda6df1325d3d29583a2b7cb9e22b5cf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:17:d1:d7:1f:7b:81:85:7f:05:8f:ca:e8:
5a:37:ec:24:f4:c2:1f:bd:e8:3b:ed:42:00:7c:eb:
9b:4a:48:72:64:27:ad:e6:4b:75:85:de:66:d8:f3:
ae:ee:64:cf:40:79:00:b9:70:dd:71:e8:7e:c8:58:
aa:38:cc:9b:98:58:d6:c0:4d:20:57:a6:2c:e4:5e:
67:50:aa:ae:14:71:12:90:d6:82:c1:6f:30:d9:2e:
d7:d3:b1:9c:66:aa:a7:5e:7f:23:4a:56:fa:14:ce:
20:27:b0:7e:0d:d6:cb:db:20:c3:2b:34:35:a2:26:
8f:49:87:92:8a:62:22:cc:74:05:cb:d0:fa:2f:01:
2c:c1:6c:a5:20:39:43:9e:a2:05:bf:f2:49:94:fe:
9d:c0:3d:6b:34:6f:92:88:1e:e2:dc:a3:31:af:b3:
28:9e:38:52:df:8f:d9:11:5d:8f:9c:a0:01:cd:9b:
1c:58:f1:55:ee:dd:53:1c:a5:f5:c7:da:86:1e:fb:
79:f2:6b:d6:50:3a:ac:dd:1c:e7:ca:36:ad:dd:41:
8b:de:bc:62:6c:dc:b2:65:42:3f:ce:40:6e:50:9c:
3f:8d:b2:7e:ee:98:c5:28:3b:48:35:5b:32:f2:3a:
36:f3:c9:bf:63:99:11:d9:44:5b:26:bf:45:e5:46:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:1A:ED:A6:DF:13:25:D3:D2:95:83:A2:B7:CB:9E:22:B5:CF:72
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c7:1d:08:6a:d5:27:33:3e:a2:a4:26:c9:86:90:1a:3b:fc:
56:33:81:0d:1f:d2:ee:77:23:09:54:69:24:31:92:88:1b:25:
b5:4b:53:b2:77:09:d1:ca:9c:4f:83:2b:68:1f:a3:3c:e6:76:
70:43:cf:7b:78:24:ee:e0:a7:27:bb:13:69:b3:c7:b2:2d:e0:
69:2c:54:7c:86:c8:9e:d2:e9:7e:d8:cd:6b:8c:76:56:ef:ca:
09:c3:38:28:36:3c:fd:cc:ff:2b:c7:15:c9:0a:02:7c:0b:2b:
4e:5e:55:95:58:e5:26:3d:93:cd:be:7a:d1:70:2c:36:a1:03:
6e:5c:1c:ab:1c:21:4d:e0:4e:c2:78:c4:69:14:5c:e9:c8:6e:
92:a4:0e:63:7c:be:89:28:c6:db:d9:50:45:b8:26:e4:c4:ff:
5b:2e:17:5c:d7:b7:64:77:7c:9d:28:fb:1f:d9:c4:d8:20:98:
11:7f:f1:48:a7:68:e7:7a:f6:a2:a1:50:e9:41:c1:3c:cc:53:
aa:3b:cb:aa:a0:46:bc:4e:42:10:4c:64:90:35:af:f0:3d:d7:
8b:fc:0e:47:35:79:97:47:19:3d:77:41:bc:62:c3:9f:1f:57:
e4:ac:90:a4:e2:58:8a:3e:a2:a2:ca:f2:cb:0c:bf:03:5f:87:
7b:53:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:45 2025 by rpki-client