Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: MhnLZ8TglFgygH1mFsMYjLQxNA0+1m+pgATmuAMjN98=
Subject key identifier: 12:50:94:80:A3:0E:DC:6C:D8:F3:00:A5:0C:41:66:21:94:35:C0:53
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019A714A4289409F06B5C847C985AB609FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:01:23 +0000
Manifest this update: Tue 11 Nov 2025 05:01:23 +0000
Manifest next update: Wed 12 Nov 2025 05:01:23 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: s+642qjO0uW+p3HxWxpKHaXUNp3zDgwnNoAYkcw3z+0=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:42:89:40:9f:06:b5:c8:47:c9:85:ab:60:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Nov 11 05:01:23 2025 GMT
Not After : Nov 12 05:01:23 2025 GMT
Subject: CN=12509480a30edc6cd8f300a50c4166219435c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:54:1c:41:1c:08:87:65:94:7a:7c:21:63:
a3:c7:a6:a4:be:23:1a:54:1d:ca:33:13:2a:48:33:
ee:70:fb:dc:b5:ed:45:92:52:7e:7c:16:03:2d:a4:
82:50:19:92:9a:4f:9a:50:62:32:b8:93:63:c5:73:
9b:ce:3d:9a:6a:73:07:52:c9:00:05:78:ec:b7:b4:
f4:88:aa:a2:32:97:a3:4b:b1:a4:f1:f5:f7:cf:26:
93:4d:ed:2f:46:2b:41:e2:aa:6e:b6:21:36:8e:82:
1d:a6:a5:b5:f3:d5:e5:57:62:86:66:e7:8e:1e:89:
2f:b3:88:12:a0:ff:17:e7:08:9e:fb:1c:c5:d6:75:
54:d8:98:f1:02:2f:72:18:57:7d:88:c4:ad:15:f5:
ff:18:ac:a4:ce:1f:59:86:48:90:05:91:a1:26:f4:
a9:96:37:af:7e:74:32:09:36:f7:1a:87:e6:fc:a0:
4b:01:1a:ce:02:e3:2d:36:19:66:15:03:db:e5:ca:
24:a8:62:ed:38:e4:ae:46:9c:f0:ea:c8:74:88:76:
2c:37:f7:e9:06:91:a1:5a:e9:0f:78:5f:21:f0:f3:
dc:b3:60:15:7a:f9:fa:97:27:10:23:f8:c2:09:8c:
91:f6:86:2b:93:4e:6f:0e:02:f6:d7:36:f6:60:76:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:50:94:80:A3:0E:DC:6C:D8:F3:00:A5:0C:41:66:21:94:35:C0:53
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:b1:f0:e6:a0:3d:b1:87:8e:81:a4:f9:32:1c:b6:86:63:
a0:17:00:fa:b2:5b:52:04:28:64:43:00:49:ee:91:d4:6f:38:
32:99:2c:96:3d:9f:81:28:9a:35:a0:93:59:55:b3:30:b5:b8:
52:d3:3d:44:89:6e:3f:6e:d9:ed:4e:35:9b:6f:48:62:02:cf:
e9:f2:90:f8:1a:8e:1f:00:7c:62:7b:94:3d:43:98:6c:bf:3f:
bb:8c:ec:64:a3:f3:1a:6d:6f:76:8f:89:cd:f0:b7:c7:6f:d4:
ad:e9:8d:8e:91:64:6a:ce:12:b0:2f:2e:7f:3c:a6:09:c2:0a:
3b:e9:a3:f6:f4:e8:f8:d9:79:67:6d:2b:25:bd:60:98:e5:06:
86:71:48:1b:57:9f:a1:3b:bb:b7:cc:36:37:e2:15:98:01:fd:
ad:3d:81:7c:43:4d:9c:a4:79:ed:ab:d4:60:7f:8d:ea:ce:58:
8c:5e:35:eb:41:a0:d9:fc:f3:bf:8e:4c:35:a7:80:7f:fa:59:
bb:39:a6:d5:3b:8f:a5:7f:75:07:8d:4c:9c:8f:b7:9e:41:5c:
23:ff:f9:5d:78:9e:af:51:43:8d:5b:d3:64:59:90:6d:b4:81:
fb:99:b2:49:64:e4:94:3c:f2:7c:69:bf:70:fa:06:fb:f1:99:
0f:07:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client