Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: 0oYXFHPNWBqdSgxT/WUbjgv9/7fiThpabW43XGPI2PM=
Subject key identifier: FE:9B:4D:97:59:4C:0F:70:3B:5D:AF:05:DF:AE:49:17:1E:36:2C:49
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 019A71B82289C0937E34479A43A8F037E902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 1681
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: YDJ1UNTEGB7bOKphasxEr4i9fcOmie3NoN3yHvF2u5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:22:89:c0:93:7e:34:47:9a:43:a8:f0:37:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=fe9b4d97594c0f703b5daf05dfae49171e362c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:b6:55:ff:cd:7c:39:01:28:7b:a5:18:7f:
58:20:0c:bc:ea:56:00:73:2f:1d:0a:d5:f2:1d:7a:
ca:a0:e2:19:b5:e8:02:92:4c:17:8c:2c:a6:bc:8f:
1d:89:64:42:71:d0:29:6a:91:f6:1f:ff:c7:17:ee:
bf:73:fb:5e:a1:62:84:87:cc:77:19:45:59:a3:8a:
d2:81:ef:27:88:cf:8c:25:03:ae:4c:d8:67:24:60:
76:df:39:c5:47:22:9e:98:0e:ea:9b:51:5a:af:f3:
81:4a:df:60:72:c8:c3:f9:3c:31:d8:33:d2:86:26:
d2:2a:ab:d4:7e:a5:7d:e1:59:3f:fe:75:a2:4f:4c:
34:e1:fe:94:6c:c0:5a:c9:0c:d6:58:35:97:40:51:
a6:d3:47:19:0b:aa:a7:61:3a:ba:4a:b7:e8:9d:c6:
82:a1:ca:64:d3:aa:c5:ed:ca:01:13:bf:9e:0e:86:
a8:19:6d:49:d7:db:c4:37:21:98:80:9a:0e:f0:2f:
ea:cd:60:c9:b0:19:38:b3:53:15:52:e7:0e:eb:d8:
9c:19:db:c0:c6:39:f9:97:fb:06:c4:86:04:cd:b5:
03:5f:cf:c5:1c:13:64:5b:0a:71:91:c4:40:8b:9d:
c1:79:bf:63:b5:78:a7:c3:67:d3:39:73:b2:07:6f:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:4D:97:59:4C:0F:70:3B:5D:AF:05:DF:AE:49:17:1E:36:2C:49
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:a6:b3:10:b9:b1:8a:56:6b:58:b2:ff:d1:36:ff:52:48:
4d:fd:27:07:1d:dd:63:cf:29:9a:d5:09:85:a7:67:40:bf:83:
37:61:e2:1b:21:56:d6:07:e7:b3:23:af:06:90:8d:3e:43:8f:
c2:c6:cb:8c:bc:a0:d2:51:30:40:93:59:21:d7:66:49:9b:09:
25:70:b9:f6:52:6c:c5:d3:98:70:40:66:47:0d:95:dc:f8:30:
8f:65:dd:8c:34:ec:9d:2c:ad:ee:d2:4f:92:4a:f8:6a:25:23:
38:36:6f:bc:cc:d0:ad:26:ce:bc:08:ef:76:39:83:42:9e:09:
15:73:55:0f:a1:85:48:99:70:29:80:7b:ab:9e:49:95:75:6b:
f1:1a:8e:03:d9:5b:a4:75:ef:8b:69:97:b3:2a:05:4b:18:64:
b2:ec:90:21:18:68:d6:1e:60:6c:11:9c:a6:1b:d4:70:30:a3:
c8:f8:90:17:72:62:eb:a1:50:58:b0:23:e5:a9:e9:1f:f4:f6:
66:3a:a4:8c:4e:11:0c:a5:eb:bb:0a:1a:33:b7:1d:48:6b:0c:
88:bf:b5:39:d9:44:6f:00:5b:17:a6:1d:d6:6b:0c:4f:93:6c:
e7:95:f6:aa:e4:2e:e1:c8:ca:2d:a5:02:75:8f:b9:20:ad:b7:
4b:ff:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:20 2025 by rpki-client