Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: gLvfUqVjvyxZt+g/j+RP9IFda4rvTTg8zomgKcrAnko=
Subject key identifier: 45:E3:4E:1C:23:97:8D:69:67:95:C2:FE:C8:2A:A4:21:BF:39:B0:2E
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 019A7112E21FBAD8EC5EC8F1B6247CB62831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 0C23
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: eNl7u1DmROqJcToZU+MqwbKvQUsL/dEwF62VUAeb3w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e2:1f:ba:d8:ec:5e:c8:f1:b6:24:7c:b6:28:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=45e34e1c23978d696795c2fec82aa421bf39b02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:0a:f2:ce:b9:b4:88:ba:73:19:ac:ff:63:
07:85:84:7d:a5:d8:8f:77:a8:cc:fa:7a:b6:0b:00:
0a:a1:db:36:50:83:34:8f:92:d8:8c:36:98:87:cb:
35:97:10:a3:6a:5f:46:7f:60:c3:1e:06:47:7d:25:
66:9c:84:69:96:39:a3:9e:0d:97:2d:09:e5:78:49:
be:e0:b8:4d:6b:51:15:e8:74:55:6c:98:84:2c:09:
bb:df:e2:d0:a5:74:68:e9:43:27:77:7a:5d:7c:4a:
70:7a:99:26:0e:1b:bd:be:e6:8d:67:af:62:48:29:
1b:f5:7a:c4:26:39:4f:c1:12:96:44:e2:bd:b4:6a:
0c:c5:b1:99:5d:db:03:ea:7c:75:16:64:73:03:1d:
a8:77:e7:64:d3:d4:e1:3f:d9:de:36:c1:1d:9b:04:
d5:77:32:b4:ea:7e:dd:f5:cd:36:17:12:94:14:5e:
de:fb:66:df:d2:da:bf:39:20:0d:45:6b:4d:2a:a0:
17:08:b6:d7:47:96:e8:f3:1f:82:dc:82:e8:31:6b:
cd:45:37:10:32:85:c9:b1:9f:93:23:e7:a9:a3:62:
33:45:80:8d:ba:49:3f:1e:c6:50:4d:5e:5d:42:62:
d5:37:4b:81:37:a8:75:a0:71:bd:9f:75:f9:fc:5f:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:4E:1C:23:97:8D:69:67:95:C2:FE:C8:2A:A4:21:BF:39:B0:2E
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:90:86:b8:f9:8d:8b:6b:9d:65:42:72:18:da:d7:dc:06:53:
7c:e8:28:03:f8:5c:7a:f6:ad:d3:7f:39:91:65:f7:af:0b:07:
1e:5e:d3:9f:ac:5f:b5:a5:c0:24:ba:8a:9e:4e:31:6f:97:9f:
d7:80:59:05:50:5b:e3:66:89:25:09:da:89:6e:1c:02:f7:2f:
bc:b3:f4:be:08:ed:ad:ca:1b:aa:21:ff:23:53:b1:94:59:ed:
9a:bb:63:87:94:30:93:43:2f:07:82:3e:8f:66:fc:50:3a:55:
a5:54:bd:57:c4:cb:03:06:25:02:bd:f4:7c:0f:11:97:a8:66:
b6:1f:70:58:e3:8e:7a:49:00:14:21:d1:53:02:53:20:65:cb:
15:6b:88:83:3d:6b:e2:87:83:8e:6e:21:b7:35:87:c7:ff:21:
be:2b:ff:6e:1d:be:c4:04:a7:eb:65:8a:86:79:42:dd:89:ed:
1f:92:bc:72:8f:09:60:f3:12:65:76:eb:d7:eb:3e:9f:9d:84:
0f:24:0c:34:78:2b:3b:29:e0:4d:78:9a:03:0a:78:e6:5c:d1:
0f:b8:bf:0e:8b:95:24:38:f8:fd:fc:46:1d:4b:41:02:8a:f6:
4a:25:83:cf:0e:b6:3d:63:cb:52:75:06:38:f4:da:3a:e4:ed:
51:ba:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:09 2025 by rpki-client